commit e8adf4b397bfef30f59f0738f363c2f918aa9953
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Thu Jan 17 14:17:36 2019 +0200
Create barbican's creator role by default
Barbican has a very specific set of keystone roles that it uses in order
to properly enforce RBAC. One of them (and the most important) is the
creator role. Which you'll assign to your users in order to allow them
to create and retrieve secrets (the other role that can do this is
admin... but we don't want to rely on this).
For usability, lets create this role automatically as part of the
TripleO installation.
Closes-Bug: #1812209
Change-Id: I9d5f912684a0987a6bdf244321215bd5595a0fa0
(cherry picked from commit dfd408a73d14ca2e8b8785d685b7d88a0739c71d)
Reviewed: https:/ /review. openstack. org/631851 /git.openstack. org/cgit/ openstack/ puppet- tripleo/ commit/ ?id=e8adf4b397b fef30f59f0738f3 63c2f918aa9953
Committed: https:/
Submitter: Zuul
Branch: stable/rocky
commit e8adf4b397bfef3 0f59f0738f363c2 f918aa9953
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Thu Jan 17 14:17:36 2019 +0200
Create barbican's creator role by default
Barbican has a very specific set of keystone roles that it uses in order
to properly enforce RBAC. One of them (and the most important) is the
creator role. Which you'll assign to your users in order to allow them
to create and retrieve secrets (the other role that can do this is
admin... but we don't want to rely on this).
For usability, lets create this role automatically as part of the
TripleO installation.
Closes-Bug: #1812209 7a6bdf244321215 bd5595a0fa0 e8b8785d685b7d8 8a0739c71d)
Change-Id: I9d5f912684a098
(cherry picked from commit dfd408a73d14ca2