Not possible to customize barbican policies

[Erlon R. Cruz]

In current charmed Barbican requires roles to function properly.
Unfortunately those roles have generic names which do not reflect the service they belong to:
admin, creator, observer, audit (see https://docs.openstack.org/barbican/stein/admin/access_control.html)

Barbican Charm should allow for a renaming of those roles, in order to make them more distinguishable for Admins/Users.
For example, in our environment we would like those roles to be named: "barbican-creator" "barbican-observer" "barbican-audit".

[Ryan Beisner (1chb1n)]

Please indicate the scope of OpenStack versions which apply to your specific scenario (ex. Bionic + Stein).

Also, what is the back-end? Is this for use with the Vault charm?

Generally-speaking, more use case information and user story detail will make it easier to design and prioritize this feature request.

Thank you.

[Ryan Beisner (1chb1n)]

I think this may be addressed by the policy.d work that is currently underway across all of OpenStack Charms. However, it would be helpful to gather the use case details and log that here:

OpenStack Version
Ubuntu Version
Sanitized bundle attachment

[Erlon R. Cruz (sombrafam)]

Thanks Ryan, here is the information:

OpenStack Version: Queens
Ubuntu Version: Xenial
Bundle: https://gist.github.com/sombrafam/a9bf2bda707e5d8dc9db67f7cedfab30
Erlon

[Erlon R. Cruz (sombrafam)]

FWIW, this approved spec[1] will likely solve this problem when its implemented.

[1] https://review.opendev.org/#/c/679421/