openstack/openstack-ansible-os_keystone
Code Issues Proposed changes

Merge "Change example to contain domain name instead of UUID"

Browse Source
This commit is contained in:
Zuul 2024-09-30 11:44:30 +00:00 committed by Gerrit Code Review
commit 28e972aa4f
2 changed files with 17 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
defaults/main.yml
View File

@ -460,7 +460,7 @@ keystone_sp: {}
# metadata_file: 'metadata-keystone-idp.xml' # metadata_file: 'metadata-keystone-idp.xml'
# metadata_reload: 1800 # metadata_reload: 1800
# federated_identities: # federated_identities:
# - domain: default # - domain: Default
# project: fedproject # project: fedproject
# group: fedgroup # group: fedgroup
# role: member # role: member
@ -497,7 +497,7 @@ keystone_sp: {}
# metadata_file: 'metadata-testshib-idp.xml' # metadata_file: 'metadata-testshib-idp.xml'
# metadata_reload: 1800 # metadata_reload: 1800
# federated_identities: # federated_identities:
# - domain: default # - domain: Default
# project: fedproject # project: fedproject
# group: fedgroup # group: fedgroup
# role: member # role: member
@ -523,7 +523,7 @@ keystone_sp: {}
# metadata_file: 'metadata-adfs-idp.xml' # metadata_file: 'metadata-adfs-idp.xml'
# metadata_reload: 1800 # metadata_reload: 1800
# federated_identities: # federated_identities:
# - domain: default # - domain: Default
# project: fedproject # project: fedproject
# group: fedgroup # group: fedgroup
# role: member # role: member
@ -562,7 +562,7 @@ keystone_sp: {}
# entity_ids: # entity_ids:
# - 'https://identity-provider/openid-endpoint/' # - 'https://identity-provider/openid-endpoint/'
# federated_identities: # federated_identities:
# - domain: default # - domain: Default
# project: fedproject # project: fedproject
# group: fedgroup # group: fedgroup
# role: member # role: member

13
releasenotes/notes/federated_domain_names-4e169b8b9a947940.yaml Normal file
View File

@ -0,0 +1,13 @@
---
issues:
- |
Due to the underlying `bug <https://bugs.launchpad.net/ansible-collections-openstack/+bug/2065680>`_
in Ansible collections for OpenStack, ``Default`` domain name can be
renamed to ``default`` under certain conditions.
One known example is having ``domain: default`` defenition under
``keystone_sp -> trusted_idp_list -> federated_identities`` structure.
upgrade:
- |
Please, make sure that in case of federation usage you define domain
name instead of it's ID (ie. ``Default`` instead of ``default``)
under ``keystone_sp -> trusted_idp_list -> federated_identities``