Browse Source

Merge "Ensure Barbican required roles are created by Keystone" into stable/stein

tags/10.5.1
Zuul 4 weeks ago
parent
commit
a27e36075a
1 changed files with 9 additions and 0 deletions
  1. 9
    0
      manifests/profile/base/keystone.pp

+ 9
- 0
manifests/profile/base/keystone.pp View File

@@ -331,9 +331,18 @@ class tripleo::profile::base::keystone (
331 331
     }
332 332
 
333 333
     if hiera('barbican_api_enabled', false) {
334
+      keystone_role { 'key-manager:service-admin':
335
+        ensure => present
336
+      }
334 337
       keystone_role { 'creator':
335 338
         ensure => present
336 339
       }
340
+      keystone_role { 'observer':
341
+        ensure => present
342
+      }
343
+      keystone_role { 'audit':
344
+        ensure => present
345
+      }
337 346
     }
338 347
   }
339 348
 

Loading…
Cancel
Save