Drop ResellerAdmin role from ceilometer user

The ResellerAdmin role is no longer required because ceilometer doesn't
comminucate with Swift directly but only via Gnocchi.

Change-Id: I8111890a588b84f18ff34bc85794963b905cb844
This commit is contained in:
Takashi Kajinami 2021-04-18 23:22:05 +09:00
parent ee236d482d
commit 58d9927112
3 changed files with 7 additions and 15 deletions

View File

@ -125,16 +125,5 @@ class ceilometer::keystone::auth (
password => $password, password => $password,
email => $email, email => $email,
tenant => $tenant, tenant => $tenant,
roles => ['admin', 'ResellerAdmin'],
} }
if $configure_user_role {
if !defined(Keystone_role['ResellerAdmin']) {
keystone_role { 'ResellerAdmin':
ensure => present,
}
}
Keystone_role['ResellerAdmin'] -> Keystone_user_role["${auth_name}@${tenant}"]
}
} }

View File

@ -0,0 +1,5 @@
---
upgrade:
- |
The ``ResellerAdmin`` role is no longer assigned to the ceilometer user
in Keystone.

View File

@ -32,8 +32,7 @@ describe 'ceilometer::keystone::auth' do
it 'configures ceilometer user roles' do it 'configures ceilometer user roles' do
is_expected.to contain_keystone_user_role("#{default_params[:auth_name]}@#{default_params[:tenant]}").with( is_expected.to contain_keystone_user_role("#{default_params[:auth_name]}@#{default_params[:tenant]}").with(
:ensure => 'present', :ensure => 'present',
:roles => ['admin','ResellerAdmin']
) )
end end
end end
@ -59,8 +58,7 @@ describe 'ceilometer::keystone::auth' do
it 'configures ceilometer user roles' do it 'configures ceilometer user roles' do
is_expected.to contain_keystone_user_role("#{params[:auth_name]}@#{params[:tenant]}").with( is_expected.to contain_keystone_user_role("#{params[:auth_name]}@#{params[:tenant]}").with(
:ensure => 'present', :ensure => 'present',
:roles => ['admin','ResellerAdmin']
) )
end end
end end