openstack/devstack
Code Issues Proposed changes

Merge "Reduce service user permissions"

Browse Source
This commit is contained in:
Jenkins 2015-02-11 15:55:40 +00:00 committed by Gerrit Code Review
commit ee2e53592b
8 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/ceilometer
View File

@ -108,7 +108,7 @@ function create_ceilometer_accounts {
# Ceilometer # Ceilometer
if [[ "$ENABLED_SERVICES" =~ "ceilometer-api" ]]; then if [[ "$ENABLED_SERVICES" =~ "ceilometer-api" ]]; then
create_service_user "ceilometer" "admin" create_service_user "ceilometer"
if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then
local ceilometer_service=$(get_or_create_service "ceilometer" \ local ceilometer_service=$(get_or_create_service "ceilometer" \

2
lib/cinder
View File

@ -333,7 +333,7 @@ function create_cinder_accounts {
# Cinder # Cinder
if [[ "$ENABLED_SERVICES" =~ "c-api" ]]; then if [[ "$ENABLED_SERVICES" =~ "c-api" ]]; then
create_service_user "cinder" "admin" create_service_user "cinder"
if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then

2
lib/ironic
View File

@ -362,7 +362,7 @@ function create_ironic_accounts {
if [[ "$ENABLED_SERVICES" =~ "ir-api" ]]; then if [[ "$ENABLED_SERVICES" =~ "ir-api" ]]; then
# Get ironic user if exists # Get ironic user if exists
create_service_user "ironic" "admin" create_service_user "ironic"
if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then

2
lib/nova
View File

@ -356,6 +356,8 @@ function create_nova_accounts {
# Nova # Nova
if [[ "$ENABLED_SERVICES" =~ "n-api" ]]; then if [[ "$ENABLED_SERVICES" =~ "n-api" ]]; then
# NOTE(jamielennox): Nova doesn't need the admin role here, however neutron uses
# this service user when notifying nova of changes and that requires the admin role.
create_service_user "nova" "admin" create_service_user "nova" "admin"
if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then

2
lib/sahara
View File

@ -61,7 +61,7 @@ TEMPEST_SERVICES+=,sahara
# service sahara admin # service sahara admin
function create_sahara_accounts { function create_sahara_accounts {
create_service_user "sahara" "admin" create_service_user "sahara"
if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then

2
lib/swift
View File

@ -603,7 +603,7 @@ function create_swift_accounts {
local another_role=$(openstack role list | awk "/ anotherrole / { print \$2 }") local another_role=$(openstack role list | awk "/ anotherrole / { print \$2 }")
create_service_user "swift" "admin" create_service_user "swift"
if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then

2
lib/trove
View File

@ -81,7 +81,7 @@ function setup_trove_logging {
function create_trove_accounts { function create_trove_accounts {
if [[ "$ENABLED_SERVICES" =~ "trove" ]]; then if [[ "$ENABLED_SERVICES" =~ "trove" ]]; then
create_service_user "trove" "admin" create_service_user "trove"
if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then

2
lib/zaqar
View File

@ -215,7 +215,7 @@ function stop_zaqar {
} }
function create_zaqar_accounts { function create_zaqar_accounts {
create_service_user "zaqar" "admin" create_service_user "zaqar"
if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then