openstack
/
openstack-ansible-os_swift
Code Issues Proposed changes

Stop reffering _member_ role 

Keystone has stopped providing or reffering `_member_` role for a while,
thus role should not be refferenced anymore.

Moreover, with 2023.1 service policies have dropped `_member_`
which resulted in the role to be insufficient for basic operations.

Change-Id: I4d6eacae2041b0a00114dda4e8315d4ec6295319
Related-Bug: #2029486
This commit is contained in:
Dmitriy Rabotyagov 2023-08-15 13:10:38 +02:00
parent 99c6fb2835
commit 1d0bba49a7
3 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/source/configure-swift-add.rst
View File

@ -14,7 +14,7 @@ existing deployment.
#. Optionally, allow all keystone users to use swift by setting
``swift_allow_all_users`` in the ``user_variables.yml`` file to
``True``. Any users with the ``_member_`` role (all authorized
``True``. Any users with the ``member`` role (all authorized
keystone users) can create containers and upload objects
to swift.

2
doc/source/configure-swift.rst
View File

@ -29,7 +29,7 @@ usage.
#. Optionally, allow all Identity (keystone) users to use swift by setting
``swift_allow_all_users`` in the ``user_variables.yml`` file to
``True``. Any users with the ``_member_`` role (all authorized
``True``. Any users with the ``member`` role (all authorized
keystone users) can create containers and upload objects
to Object Storage.

4
templates/proxy-server.conf.j2
View File

@ -92,9 +92,9 @@ memcache_secret_key = {{ memcached_encryption_key }}
use = egg:swift#keystoneauth
{% if swift_allow_all_users is defined and swift_allow_all_users == True %}
{% if 'ceilometer' in swift_middleware_list %}
operator_roles = admin, {{ swift_operator_role }}, _member_, {{ swift_reselleradmin_role }}
operator_roles = admin, {{ swift_operator_role }}, member, {{ swift_reselleradmin_role }}
{% else %}
operator_roles = admin, {{ swift_operator_role }}, _member_
operator_roles = admin, {{ swift_operator_role }}, member
{% endif %}
{% else %}
{% if 'ceilometer' in swift_middleware_list %}