diff --git a/octavia_tempest_plugin/tests/test_base.py b/octavia_tempest_plugin/tests/test_base.py index f0477f48..70d51bac 100644 --- a/octavia_tempest_plugin/tests/test_base.py +++ b/octavia_tempest_plugin/tests/test_base.py @@ -71,8 +71,10 @@ class LoadBalancerBaseTest(validators.ValidatorsMixin, ['lb_observer', CONF.load_balancer.observer_role, 'reader'], ['lb_global_observer', CONF.load_balancer.global_observer_role, 'reader'], - ['lb_member', CONF.load_balancer.member_role], - ['lb_member2', CONF.load_balancer.member_role]] + # Note: Some projects are now requiring the 'member' role by + # default (nova for example) so make sure our creds have this role + ['lb_member', CONF.load_balancer.member_role, 'member'], + ['lb_member2', CONF.load_balancer.member_role, 'member']] # If scope enforcement is enabled, add in the system scope credentials. # The project scope is already handled by the above credentials. diff --git a/releasenotes/notes/Make-sure-member-credentials-have-the-member-role-for-new-defaults-5fbc2e05768c04b9.yaml b/releasenotes/notes/Make-sure-member-credentials-have-the-member-role-for-new-defaults-5fbc2e05768c04b9.yaml new file mode 100644 index 00000000..89fc5a6a --- /dev/null +++ b/releasenotes/notes/Make-sure-member-credentials-have-the-member-role-for-new-defaults-5fbc2e05768c04b9.yaml @@ -0,0 +1,7 @@ +--- +fixes: + - | + Some services are now enabling the "new default roles" which means all + non-admin users must have the "member" or "reader" role. This fix updates + the test credentials to include these roles when not running in + admin-or-owner test mode.