From b14631aae1afb30a7173246245d646ffb2dcbdb9 Mon Sep 17 00:00:00 2001 From: Juan Antonio Osorio Robles Date: Fri, 7 Apr 2017 10:09:11 +0300 Subject: [PATCH] Enable creation of keystone domain when ldap backends are created This sets the flag create_domain_entry for the ldap_backend resource, which will create the domain for the ldap backend (this was previously not the case since only the configuration was created). Furtherly, this flag will also refresh the keystone server, so the changes come into effect. Note that this is only done in step 3, so the domains are created there and the refresh happens in that step. Also, this is only done for the bootstrap node, since when the other nodes start, they will already have the domains available in the keystone database and there won't be a need to restart. Related-Bug: #1677603 Depends-On: Ib6c633b6a975e4b760c10a2aef3c252885b05e28 Change-Id: Id879cf5c5ae39d37bf58b73c78733001d2b03d9c (cherry picked from commit 13ea87e658e36d1afcc3e4db7f43bcfc068e1f49) --- manifests/profile/base/keystone.pp | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/manifests/profile/base/keystone.pp b/manifests/profile/base/keystone.pp index 91ebd4deb..44afaab71 100644 --- a/manifests/profile/base/keystone.pp +++ b/manifests/profile/base/keystone.pp @@ -171,7 +171,9 @@ class tripleo::profile::base::keystone ( if $ldap_backend_enable { validate_hash($ldap_backends_config) - create_resources('::keystone::ldap_backend', $ldap_backends_config) + create_resources('::keystone::ldap_backend', $ldap_backends_config, { + create_domain_entry => $manage_domain, + }) } }