[bare-metal]need to revert "Use new "service" role instead of "admin""

[Ma Wen Cheng]

it reports permission error in /var/log/nova/nova-compute.log

2015-04-29 10:30:11.696 8828 ERROR nova.openstack.common.periodic_task [req-6b765963-ad46-4c89-9a21-6177d590befd - - - - -] Error during ClusteredComputeManager.update_available_resource: Forbidden (HTTP 403)
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task Traceback (most recent call last):
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task File "/usr/lib/python2.7/site-packages/nova/openstack/common/periodic_task.py", line 224, in run_periodic_tasks
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task task(self, context)
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 6297, in update_available_resource
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task nodenames = set(self.driver.get_available_nodes())
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task File "/usr/lib/python2.7/site-packages/nova/virt/ironic/driver.py", line 501, in get_available_nodes
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task self._refresh_cache()
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task File "/usr/lib/python2.7/site-packages/nova/virt/ironic/driver.py", line 482, in _refresh_cache
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task node_list = self.ironicclient.call('node.list', detail=True, limit=0)
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task File "/usr/lib/python2.7/site-packages/nova/virt/ironic/client_wrapper.py", line 122, in call
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task return self._multi_getattr(client, method)(*args, **kwargs)
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task File "/usr/lib/python2.7/site-packages/ironicclient/v1/node.py", line 91, in list
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task limit=limit)
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task File "/usr/lib/python2.7/site-packages/ironicclient/common/base.py", line 96, in _list_pagination
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task resp, body = self.api.json_request('GET', url)
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task File "/usr/lib/python2.7/site-packages/ironicclient/common/http.py", line 206, in json_request
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task resp, body_iter = self._http_request(url, method, **kwargs)
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task File "/usr/lib/python2.7/site-packages/ironicclient/common/http.py", line 189, in _http_request
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task error_json.get('debuginfo'), method, url)
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task Forbidden: Forbidden (HTTP 403)
2015-04-29 10:30:11.696 8828 TRACE nova.openstack.common.periodic_task

# SUGGESTION

seems like the something wrong about user/role rule for ironic user in nova.conf on compute node

[Mark Vanderwiel (vanderwl)]

Added ironic to the bug as it should NOT have to rely on Admin role anymore, the Service role should be used instead.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/178909
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-bare-metal/commit/?id=0cea7f1ac6f4bd607005fa6f324f51ceabb7dabf
Submitter: Jenkins
Branch: master

commit 0cea7f1ac6f4bd607005fa6f324f51ceabb7dabf
Author: Ma Wen Cheng <email address hidden>
Date: Thu Apr 30 03:02:09 2015 +0000

    Revert "Use new "service" role instead of "admin""

    This reverts commit de410e11fb3d0cc3f894609733e6be56d2b81bab.

    Closes-bug: #1450473
    Change-Id: Id81eca2dca6cf418086483662cb49204c3129fce