Merge "Delete the default value of domain in role creation" into stable/victoria

This commit is contained in:
Zuul 2021-01-21 13:29:53 +00:00 committed by Gerrit Code Review
commit 777e56d2e1
2 changed files with 14 additions and 2 deletions

View File

@ -51,9 +51,8 @@ class KeystoneRole(resource.Resource):
DOMAIN: properties.Schema(
properties.Schema.STRING,
_('Name or id of keystone domain.'),
default='default',
constraints=[constraints.CustomConstraint('keystone.domain')],
support_status=support.SupportStatus(version='10.0.0')
support_status=support.SupportStatus(version='16.0.0')
)
}

View File

@ -0,0 +1,13 @@
---
prelude: >
There was a mismatch between the way heat create role behaved with the
templates or with the openstack CLI on what relates to the default domain
if the domain is not specified on both cases the CLI will not assign on
to the created new role but the heat templates will assign the "default"
domain
critical:
- |
Templates that creates roles but does not specify the domain will not get
a "default" domain from now on. To have a domain added to your new role
it needs to be assigned in the template.