OpenStack-Ansible

Add default roles used by Barbican

Bug #1657742 reported by Nenad Radojevic
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack-Ansible
Fix Released
High
Vadim Kuznetsov
kolla-ansible
Fix Released
Undecided
Nenad Radojevic

Bug Description

The default roles used by Barbican are missing.
According to the default policy.json (http://docs.openstack.org/developer/barbican/admin-guide-cloud/access_control.html) the roles 'key-manager:service-admin', 'creator', 'observer', 'audit' are necessary for Barbican.

Nenad Radojevic (nradojevic)
Changed in kolla-ansible:
assignee: nobody → Nenad Radojevic (nradojevic)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)

Fix proposed to branch: master
Review: https://review.openstack.org/422643

Changed in kolla-ansible:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.openstack.org/422643
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=4385fb682cb85edc39db50c5749b36c1598f36c1
Submitter: Jenkins
Branch: master

commit 4385fb682cb85edc39db50c5749b36c1598f36c1
Author: Nenad Radojevic <email address hidden>
Date: Thu Jan 19 14:05:20 2017 +0000

    Add default roles used by Barbican

    The default roles used by Barbican are missing.
    According to the policy.json the Key Manager
    comes with, four roles have to be defined.

    Change-Id: I8882c2cf328b62e68797e383b26908540d669629
    Closes-Bug: #1657742

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 4.0.0.0rc1

This issue was fixed in the openstack/kolla-ansible 4.0.0.0rc1 release candidate.

Vadim Kuznetsov (vakuznet)
Changed in openstack-ansible:
assignee: nobody → Vadim Kuznetsov (vakuznet)
Kevin Carter (kevin-carter)
Changed in openstack-ansible:
status: New → Confirmed
importance: Undecided → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-ansible-os_barbican (master)

Fix proposed to branch: master
Review: https://review.openstack.org/581419

Changed in openstack-ansible:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-ansible-os_barbican (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/581425

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-ansible-os_barbican (master)

Reviewed: https://review.openstack.org/581419
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-os_barbican/commit/?id=0ed71b4f48c847cd167c2303713f341501803a0c
Submitter: Zuul
Branch: master

commit 0ed71b4f48c847cd167c2303713f341501803a0c
Author: Vadim Kuznetsov <email address hidden>
Date: Tue Jul 10 12:15:58 2018 -0400

    Add default roles used by Barbican

    The default roles used by Barbican are missing.
    According to the policy.json the Key Manager
    comes with, four roles have to be defined.

    Depends-On: I999aa55269348497154a8eb073c2ff663242af4e
    Change-Id: If50e02a5886a1f3b26eb033103904122302afeda
    Closes-Bug: #1657742

Changed in openstack-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-ansible-os_barbican (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/585540

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on openstack-ansible-os_barbican (stable/queens)

Change abandoned by Jesse Pretorius (odyssey4me) (<email address hidden>) on branch: stable/queens
Review: https://review.openstack.org/581425
Reason: Superceded by https://review.openstack.org/#/c/585540/1

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-ansible-os_barbican (stable/queens)

Reviewed: https://review.openstack.org/585540
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-os_barbican/commit/?id=f3db3d834e9c1718e77cd73ff6b75a54b359d87a
Submitter: Zuul
Branch: stable/queens

commit f3db3d834e9c1718e77cd73ff6b75a54b359d87a
Author: Vadim Kuznetsov <email address hidden>
Date: Tue Jul 10 12:53:36 2018 -0400

    Add default roles used by Barbican

    The default roles used by Barbican are missing.
    According to the default policy.json the roles
    'key-manager:service-admin', 'creator',
    'observer', 'audit' are necessary for Barbican.

    This is reimplementation of the 0ed71b4 because
    keystone module is used in stable/queens.

    Change-Id: If50e02a5886a1f3b26eb033103904122302afeda
    Closes-Bug: #1657742

tags: added: in-stable-queens
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_barbican queens-eol

This issue was fixed in the openstack/openstack-ansible-os_barbican queens-eol release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_barbican rocky-eol

This issue was fixed in the openstack/openstack-ansible-os_barbican rocky-eol release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_barbican stein-eol

This issue was fixed in the openstack/openstack-ansible-os_barbican stein-eol release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_barbican train-eol

This issue was fixed in the openstack/openstack-ansible-os_barbican train-eol release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_barbican ussuri-eol

This issue was fixed in the openstack/openstack-ansible-os_barbican ussuri-eol release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_barbican yoga-eom

This issue was fixed in the openstack/openstack-ansible-os_barbican yoga-eom release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_barbican victoria-eom

This issue was fixed in the openstack/openstack-ansible-os_barbican victoria-eom release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_barbican wallaby-eom

This issue was fixed in the openstack/openstack-ansible-os_barbican wallaby-eom release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/openstack-ansible-os_barbican xena-eom

This issue was fixed in the openstack/openstack-ansible-os_barbican xena-eom release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.