From 62e68af896887ebe18944e6a0a9721e269119ad4 Mon Sep 17 00:00:00 2001
From: Vladimir Kuklin <vkuklin@mirantis.com>
Date: Mon, 9 Mar 2015 17:53:08 +0300
Subject: [PATCH] Ensure admin role is assigned prior to creating floating
 range

Nova API will return a 403 if a non-admin user attempts to create
a floating IP range.

Change-Id: I5458f9e261ecf90554db264f7b3d3a8b4f0ce468
Closes-bug: #1407675
---
 .../modular/openstack-controller/openstack-controller.pp        | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/deployment/puppet/osnailyfacter/modular/openstack-controller/openstack-controller.pp b/deployment/puppet/osnailyfacter/modular/openstack-controller/openstack-controller.pp
index cef40fafcc..a2a183a13c 100644
--- a/deployment/puppet/osnailyfacter/modular/openstack-controller/openstack-controller.pp
+++ b/deployment/puppet/osnailyfacter/modular/openstack-controller/openstack-controller.pp
@@ -423,6 +423,8 @@ if $primary_controller {
   Exec<| title=='create-m1.micro-flavor' |>
   Class['keystone::roles::admin'] ->
   Exec<| title=='create-m1.micro-flavor' |>
+  Class['keystone::roles::admin'] ->
+  Nova_floating_range <| |>
 
   if ! $use_neutron {
     nova_floating_range { $floating_ips_range: