openstack/kolla-ansible
Code Issues Proposed changes

Remove service role from ironic-inspector user

Browse Source 
Related-Bug: #2064655
Change-Id: I76956cb9b30ceef5fe8ccd13feb22cc40e6dc305
This commit is contained in:
Matt Crees 2024-11-15 14:08:50 +00:00 committed by Bartosz Bezak
parent e4d7c6d690
commit 865c33087a
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible/roles/ironic/defaults/main.yml
View File

@ -370,6 +370,7 @@ ironic_ks_user_roles:
- project: "service"
user: "{{ ironic_inspector_keystone_user }}"
role: "service"
state: "absent"
- system: "all"
user: "{{ ironic_inspector_keystone_user }}"
role: "service"

7
releasenotes/notes/remove-ironic-inspector-service-role-765027c3d91016d1.yaml Normal file
View File

@ -0,0 +1,7 @@
---
upgrade:
- |
Now that we give the ironic inspector system scope ``all``, we do not need
to grant it the service role. This is automatically removed. If you
overrode the default list of role assignments, you should make this
change too.