diff --git a/ansible/roles/ironic/defaults/main.yml b/ansible/roles/ironic/defaults/main.yml index db86c0cf39..188cf05709 100644 --- a/ansible/roles/ironic/defaults/main.yml +++ b/ansible/roles/ironic/defaults/main.yml @@ -370,6 +370,7 @@ ironic_ks_user_roles: - project: "service" user: "{{ ironic_inspector_keystone_user }}" role: "service" + state: "absent" - system: "all" user: "{{ ironic_inspector_keystone_user }}" role: "service" diff --git a/releasenotes/notes/remove-ironic-inspector-service-role-765027c3d91016d1.yaml b/releasenotes/notes/remove-ironic-inspector-service-role-765027c3d91016d1.yaml new file mode 100644 index 0000000000..e3b89e96b1 --- /dev/null +++ b/releasenotes/notes/remove-ironic-inspector-service-role-765027c3d91016d1.yaml @@ -0,0 +1,7 @@ +--- +upgrade: + - | + Now that we give the ironic inspector system scope ``all``, we do not need + to grant it the service role. This is automatically removed. If you + overrode the default list of role assignments, you should make this + change too.