From the Rocky release, Keystone is bootstrapped by default [1]
with a 'member' role, while previously we used to create at
deployment time a role called 'Member'.
Role names are case insensitive in Keystone but Ceph RGW expects
a whitelist of role names to which access is permitted. This change
adds 'member' to the Ceph RGW whitelist, in addition to 'Member'.
Reviewed: https:/ /review. opendev. org/688651 /git.openstack. org/cgit/ openstack/ tripleo- heat-templates/ commit/ ?id=7ecd756b7c5 eff4ef938fced33 5d75123749b1f3
Committed: https:/
Submitter: Zuul
Branch: stable/stein
commit 7ecd756b7c5eff4 ef938fced335d75 123749b1f3
Author: Giulio Fidente <email address hidden>
Date: Wed Oct 9 23:19:43 2019 +0200
Permit access to Ceph RGW for 'member' role
From the Rocky release, Keystone is bootstrapped by default [1]
with a 'member' role, while previously we used to create at
deployment time a role called 'Member'.
Role names are case insensitive in Keystone but Ceph RGW expects
a whitelist of role names to which access is permitted. This change
adds 'member' to the Ceph RGW whitelist, in addition to 'Member'.
1. https:/ /blueprints. launchpad. net/keystone/ +spec/basic- default- roles
Change-Id: Ib3c70c136fa4a0 3b58edc370343a0 1d657b5b101 c699df5b9230c38 2a803eb5d7)
Closes-Bug: 1847539
(cherry picked from commit 1357a131c83e0d4