install-guide should clarify purpose of heat_stack_owner role
Bug #1401668 reported by
Steve Baker
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openstack-manuals |
Fix Released
|
Low
|
Darren Chan |
Bug Description
wherever the install-guide includes the following instructions:
$ keystone role-create --name heat_stack_user
$ keystone role-create --name heat_stack_owner
there needs to be a warning that users should *never* be assigned to the role heat_stack_owner, since the default policy forbids most operations with that role.
Because of the name of the heat_stack_owner role, people often assume that their users should be assigned to it, so the warning will emphasise that they should not.
The instructions should also better clarify that users do need to be assigned to the heat_stack_user role to use heat.
description: | updated |
Changed in openstack-manuals: | |
assignee: | nobody → Darren Chan (dazzachan) |
To post a comment you must log in.
Thanks!