openstack/designate
Code Issues Proposed changes
master
designate/devstack
History
Slawek Kaplonski 4388f00d26 Add "admin" role to the designate user created by devstack plugin 
Service user with name "designate" had only "service" role up to now but
it seems that with oslo.policy 4.4.0 where "enforce_new_defaults" is set
to True by default, this breaks integration between Neutron and
Designate as e.g. Neutron's creation of the recordset fails with
Forbidden exception as this seems to be allowed only for admin user or
shared or primary zone.

This patch adds also "admin" role for this "designate" service user to
workaround that issue, at least until Designate will support "service"
role usage with Secure RBAC policies.

Closes-Bug: #2078518
Change-Id: I477cc96519e7396a614f92d109867222207ec388
2024-09-03 10:54:00 +02:00
..
designate_plugins Multi-pools implementation 2024-08-09 18:06:54 +02:00
files Switch to apache for designate-api 2019-10-19 07:16:14 +00:00
gate Removed deprecated powerdns 3 driver 2019-09-24 04:26:19 -07:00
lib Fix bashate errors 2024-06-01 05:06:51 +00:00
upgrade Fix bashate errors 2024-06-01 05:06:51 +00:00
exercise.sh Fix bashate errors 2024-06-01 05:06:51 +00:00
plugin.sh Add "admin" role to the designate user created by devstack plugin 2024-09-03 10:54:00 +02:00
README.rst Multi-pools implementation 2024-08-09 18:06:54 +02:00
settings Multi-pools implementation 2024-08-09 18:06:54 +02:00

README.rst

Enabling in Devstack

WARNING: the stack.sh script must be run in a disposable VM that is not being created automatically, see the README.md file in the "devstack" repository. See contrib/vagrant to create a vagrant VM.

  1. Download DevStack:

    git clone https://opendev.org/openstack/devstack.git
cd devstack

  2. Add this repo as an external repository:

    > cat local.conf
[[local|localrc]]
enable_plugin designate https://opendev.org/openstack/designate

    Note: Running with a multipool option: Perform the above step, and in addition set the backend driver and scheduler filters:

    SCHEDULER_FILTERS=attribute,pool_id_attributes,in_doubt_default_pool
DESIGNATE_BACKEND_DRIVER=multipool-bind9

  3. run stack.sh