openstack/kolla-ansible
Code Issues Proposed changes

Add heat_stack_owner role to admin project

Browse Source 
The Orchestration service automatically assigns the heat_stack_user
role to users that it creates during stack deployment.
To avoid conflicts, do not add this role to users with the heat_stack_owner role.

Closes-Bug: #1690975

Change-Id: I7a4cb7f4a13de7be4fc9ce9c24057ece6a0ced5c
This commit is contained in:
shaofeng_cheng 2017-05-16 11:10:46 +08:00
parent 81b7ef7b36
commit a1606f875e
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
ansible/roles/heat/tasks/register.yml
View File

@ -55,3 +55,16 @@
module_extra_vars: module_extra_vars:
openstack_heat_auth: "{{ openstack_heat_auth }}" openstack_heat_auth: "{{ openstack_heat_auth }}"
run_once: True run_once: True
- name: Add the heat_stack_owner role to the admin project
kolla_toolbox:
module_name: "os_user_role"
module_args:
project: "{{ openstack_auth.project_name }}"
user: "{{ openstack_auth.username }}"
role: "{{ heat_stack_owner_role }}"
region_name: "{{ openstack_region_name }}"
auth: "{{ '{{ openstack_heat_auth }}' }}"
module_extra_vars:
openstack_heat_auth: "{{ openstack_heat_auth }}"
run_once: True