openstack/kolla-ansible
Code Issues Proposed changes

Merge "Support removing user role assignments"

Browse Source
This commit is contained in:
Zuul 2025-03-31 06:51:34 +00:00 committed by Gerrit Code Review
commit 5252790047
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ansible/roles/service-ks-register/tasks/main.yml
View File

@ -102,7 +102,7 @@
retries: "{{ service_ks_register_retries }}" retries: "{{ service_ks_register_retries }}"
delay: "{{ service_ks_register_delay }}" delay: "{{ service_ks_register_delay }}"
- name: "{{ project_name }} | Granting user roles" - name: "{{ project_name }} | Granting/revoking user roles"
kolla_toolbox: kolla_toolbox:
container_engine: "{{ kolla_container_engine }}" container_engine: "{{ kolla_container_engine }}"
module_name: openstack.cloud.role_assignment module_name: openstack.cloud.role_assignment
@ -116,6 +116,7 @@
auth: "{{ service_ks_register_auth }}" auth: "{{ service_ks_register_auth }}"
interface: "{{ service_ks_register_interface }}" interface: "{{ service_ks_register_interface }}"
cacert: "{{ service_ks_cacert }}" cacert: "{{ service_ks_cacert }}"
state: "{{ item.state | default('present') }}"
with_items: "{{ service_ks_register_users + service_ks_register_user_roles }}" with_items: "{{ service_ks_register_users + service_ks_register_user_roles }}"
loop_control: loop_control:
label: "{{ item.user }} -> {{ item.project | default(item.domain) | default(item.system) }} -> {{ item.role }}" label: "{{ item.user }} -> {{ item.project | default(item.domain) | default(item.system) }} -> {{ item.role }}"

5
releasenotes/notes/support-removing-user-role-assignments-97f5463a8a653158.yaml Normal file
View File

@ -0,0 +1,5 @@
---
other:
- |
User role assignments for services can now be removed by setting the option
``state: absent``.