openstack/kolla-ansible
Code Issues Proposed changes

Support removing user role assignments

Browse Source 
Change-Id: I5bb26d351218b8f8d9712d6a2a894b951826e96d
This commit is contained in:
Matt Crees
2024-11-15 14:06:11 +00:00
parent 755bc7470a
commit e4d7c6d690
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ansible/roles/service-ks-register/tasks/main.yml
View File

@@ -100,7 +100,7 @@
retries: "{{ service_ks_register_retries }}" retries: "{{ service_ks_register_retries }}"
delay: "{{ service_ks_register_delay }}" delay: "{{ service_ks_register_delay }}"
- name: "{{ project_name }} | Granting user roles" - name: "{{ project_name }} | Granting/revoking user roles"
kolla_toolbox: kolla_toolbox:
container_engine: "{{ kolla_container_engine }}" container_engine: "{{ kolla_container_engine }}"
module_name: openstack.cloud.role_assignment module_name: openstack.cloud.role_assignment
@@ -114,6 +114,7 @@
auth: "{{ service_ks_register_auth }}" auth: "{{ service_ks_register_auth }}"
interface: "{{ service_ks_register_interface }}" interface: "{{ service_ks_register_interface }}"
cacert: "{{ service_ks_cacert }}" cacert: "{{ service_ks_cacert }}"
state: "{{ item.state | default('present') }}"
with_items: "{{ service_ks_register_users + service_ks_register_user_roles }}" with_items: "{{ service_ks_register_users + service_ks_register_user_roles }}"
loop_control: loop_control:
label: "{{ item.user }} -> {{ item.project | default(item.domain) | default(item.system) }} -> {{ item.role }}" label: "{{ item.user }} -> {{ item.project | default(item.domain) | default(item.system) }} -> {{ item.role }}"

5
releasenotes/notes/support-removing-user-role-assignments-97f5463a8a653158.yaml Normal file
View File

@@ -0,0 +1,5 @@
---
other:
- |
User role assignments for services can now be removed by setting the option
``state: absent``.