Merge "Add service role to ironic service users"
This commit is contained in:
commit
33129b7554
|
@ -364,6 +364,14 @@ ironic_ks_users:
|
||||||
password: "{{ ironic_inspector_keystone_password }}"
|
password: "{{ ironic_inspector_keystone_password }}"
|
||||||
role: "admin"
|
role: "admin"
|
||||||
|
|
||||||
|
ironic_ks_user_roles:
|
||||||
|
- project: "service"
|
||||||
|
user: "{{ ironic_keystone_user }}"
|
||||||
|
role: "service"
|
||||||
|
- project: "service"
|
||||||
|
user: "{{ ironic_inspector_keystone_user }}"
|
||||||
|
role: "service"
|
||||||
|
|
||||||
####################
|
####################
|
||||||
# TLS
|
# TLS
|
||||||
####################
|
####################
|
||||||
|
|
|
@ -5,3 +5,4 @@
|
||||||
service_ks_register_auth: "{{ openstack_ironic_auth }}"
|
service_ks_register_auth: "{{ openstack_ironic_auth }}"
|
||||||
service_ks_register_services: "{{ ironic_ks_services }}"
|
service_ks_register_services: "{{ ironic_ks_services }}"
|
||||||
service_ks_register_users: "{{ ironic_ks_users }}"
|
service_ks_register_users: "{{ ironic_ks_users }}"
|
||||||
|
service_ks_register_user_roles: "{{ ironic_ks_user_roles }}"
|
||||||
|
|
|
@ -32,3 +32,10 @@
|
||||||
|
|
||||||
- include_tasks: legacy_upgrade.yml
|
- include_tasks: legacy_upgrade.yml
|
||||||
when: not ironic_enable_rolling_upgrade | bool
|
when: not ironic_enable_rolling_upgrade | bool
|
||||||
|
|
||||||
|
# TODO(bbezak): Remove this task in the Dalmatian cycle.
|
||||||
|
- import_role:
|
||||||
|
name: service-ks-register
|
||||||
|
vars:
|
||||||
|
service_ks_register_auth: "{{ openstack_ironic_auth }}"
|
||||||
|
service_ks_register_user_roles: "{{ ironic_ks_user_roles }}"
|
||||||
|
|
|
@ -0,0 +1,5 @@
|
||||||
|
---
|
||||||
|
features:
|
||||||
|
- |
|
||||||
|
Add the service role to ironic service users. Ironic recently enforced
|
||||||
|
new policy validation and added service role support.
|
Loading…
Reference in New Issue