openstack/kolla-ansible
Code Issues Proposed changes

Always create ResellerAdmin role for Swift

Browse Source 
ResellerAdmin role should be created always when Swift is enabled
and not only for Ceilometer. The role is needed for normal users
to get administration rights for their Swift projects and is
required to pass DefCore (OpenStack Powered) certification.

Change-Id: I4faa63b8fae1814e382de2794301248cc0f4a90a
Closes-Bug: #1700729
This commit is contained in:
Vladislav Belogrudov 2017-06-27 12:34:15 +03:00
parent 52cd348ae1
commit 0ffa770b83
2 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible/roles/swift/tasks/register.yml
View File

@ -42,5 +42,4 @@
auth: "{{ '{{ openstack_swift_auth }}' }}" auth: "{{ '{{ openstack_swift_auth }}' }}"
module_extra_vars: module_extra_vars:
openstack_swift_auth: "{{ openstack_swift_auth }}" openstack_swift_auth: "{{ openstack_swift_auth }}"
when: enable_ceilometer | bool
run_once: True run_once: True

2
ansible/roles/swift/templates/proxy-server.conf.j2
View File

@ -48,7 +48,7 @@ memcached_servers = {% for host in groups['memcached'] %}{{ hostvars[host]['ansi
[filter:keystoneauth] [filter:keystoneauth]
use = egg:swift#keystoneauth use = egg:swift#keystoneauth
operator_roles = admin,{{ keystone_default_user_role }}{% if enable_ceilometer | bool %},ResellerAdmin{% endif %} operator_roles = admin,{{ keystone_default_user_role }},ResellerAdmin
{% if enable_ceilometer | bool %} {% if enable_ceilometer | bool %}
[filter:ceilometer] [filter:ceilometer]