_get_domain_id_from_name uses domain_admin_client; results in 403 from keystone
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Heat |
Fix Released
|
High
|
Steve McLellan |
Bug Description
In heat_keystonecl
Typically this user only has admin access over its own domain. In a typical keystone v3 setup, listing domains requires cloud administrative privileges (admin on the default domain) - https:/
Either the sample keystone setup is wrong (and a user should be able to list domains they have access to) or potentially heat needs to use the admin_client (and in turn, THAT user needs admin privileges on the default domain).
Changed in heat: | |
assignee: | nobody → Kanagaraj Manickam (kanagaraj-manickam) |
Changed in heat: | |
assignee: | Clint Byrum (clint-fewbar) → Steve McLellan (sjmc7) |
Changed in heat: | |
milestone: | none → kilo-3 |
status: | Fix Committed → Fix Released |
Changed in heat: | |
milestone: | kilo-3 → 2015.1.0 |
Fix proposed to branch: master /review. openstack. org/151028
Review: https:/