In the previous cycle, the ``--immutable-roles`` option was added to the
bootstrap command as an optional way to opt-in to making the default
roles immutable. Following step 4 of the spec[1], we now make that
behavior the default and additionally offer a way to opt out of it.
Reviewed: https:/ /review. opendev. org/705859 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=da28046944a aa5b6068d2cc8f1 4e72ef1de6c012
Committed: https:/
Submitter: Zuul
Branch: master
commit da28046944aaa5b 6068d2cc8f14e72 ef1de6c012
Author: Colleen Murphy <email address hidden>
Date: Tue Feb 4 14:06:41 2020 -0800
Default to bootstrapping roles as immutable
In the previous cycle, the ``--immutable- roles`` option was added to the
bootstrap command as an optional way to opt-in to making the default
roles immutable. Following step 4 of the spec[1], we now make that
behavior the default and additionally offer a way to opt out of it.
[1] http:// specs.openstack .org/openstack/ keystone- specs/specs/ keystone/ train/immutable -resources. html#proposed- change
Change-Id: I6b680efb2c87c1 d7559ddcc989bbc e68456b9a5f
Closes-Bug: #1823258