From a5926489e553be8faf8802c6ad549367bf0a24cb Mon Sep 17 00:00:00 2001 From: Luis Tomas Bolivar Date: Fri, 18 May 2018 13:39:47 +0200 Subject: [PATCH] Remove admin rights need from verify_keystone_connection This patch sets changes the call perform to verify keystone connectivity from project list to region list, as the former needs admin rights by default. In addion, usually the number of regions is low, so it should be a non expensive call to keystone. Closes-Bug: 1772005 Change-Id: Iabca253a86dc89b567a9a68b09cef015c9a482b0 --- kuryr_kubernetes/controller/managers/health.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kuryr_kubernetes/controller/managers/health.py b/kuryr_kubernetes/controller/managers/health.py index 573ee3aa4..8afaa8da7 100644 --- a/kuryr_kubernetes/controller/managers/health.py +++ b/kuryr_kubernetes/controller/managers/health.py @@ -127,7 +127,7 @@ class HealthServer(object): endpoint_type = getattr(getattr(cfg.CONF, conf_group), 'endpoint_type') ks = keystone_client.Client(session=sess, auth=auth_plugin, endpoint_type=endpoint_type) - ks.projects.list() + ks.regions.list() def verify_neutron_connection(self): neutron = utils.get_neutron_client()