RFE: Create a role in between admin and member

Bug #1951622 reported by Lance Bragstad
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Undecided
Unassigned

Bug Description

In Rocky, keystone added a default role hierarchy. This was part of a large initiative to improve RBAC across all OpenStack projects. That effort is still underway today. Through the process of adopting the default roles implemented in Rocky, OpenStack developers and operators have acknowledged the need for another default role that sits in between ``admin`` and ``member``.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to keystone-specs (master)

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/keystone-specs/+/818603

Changed in keystone:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to keystone-specs (master)

Reviewed: https://review.opendev.org/c/openstack/keystone-specs/+/818603
Committed: https://opendev.org/openstack/keystone-specs/commit/f9f4e50737a01409391517b9b5be049419223554
Submitter: "Zuul (22348)"
Branch: master

commit f9f4e50737a01409391517b9b5be049419223554
Author: Lance Bragstad <email address hidden>
Date: Fri Nov 19 10:55:46 2021 -0600

    Describe the need for a default manager role

    Related-Bug: 1951622
    Change-Id: Ida889aa30d462443b801c0f524c51f54b8b756d5

liuhuajie (liuhuajie)
Changed in keystone:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.opendev.org/c/openstack/keystone/+/822601
Committed: https://opendev.org/openstack/keystone/commit/bbbbd10e482a67b53187a93daa58f8bee770852f
Submitter: "Zuul (22348)"
Branch: master

commit bbbbd10e482a67b53187a93daa58f8bee770852f
Author: Abhishek Kekane <email address hidden>
Date: Wed Dec 22 07:45:06 2021 +0000

    Add default manager role support to bootstrap command

    Added manager role support to bootstrap command.

    Closes-Bug: #1951622
    Change-Id: I4149e99bdc50194dd4067f5f3e2f3019e48b5a59

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/keystone 24.0.0.0rc1

This issue was fixed in the openstack/keystone 24.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.