diff options
author | Zuul <zuul@review.opendev.org> | 2022-02-10 20:31:25 +0000 |
---|---|---|
committer | Gerrit Code Review <review@openstack.org> | 2022-02-10 20:31:25 +0000 |
commit | 8b4e31fbd68a4e7015bbbee9b5aed4417b3cffde (patch) | |
tree | 6cc3e1adef4e539f4fc3747e8ed6f6ed037826d3 | |
parent | 1503e8d88d5afe7fbcaba04c65287bdeea5377a0 (diff) | |
parent | a375c5418633f8b15c7255030ecc008e20ccc806 (diff) | |
download | horizon-8b4e31fbd68a4e7015bbbee9b5aed4417b3cffde.tar.gz |
Merge "Update default value of OPENSTACK_KEYSTONE_DEFAULT_ROLE"
5 files changed, 19 insertions, 9 deletions
diff --git a/doc/source/configuration/settings.rst b/doc/source/configuration/settings.rst index f6fefd692..a24e5b287 100644 --- a/doc/source/configuration/settings.rst +++ b/doc/source/configuration/settings.rst @@ -1405,7 +1405,12 @@ OPENSTACK_KEYSTONE_DEFAULT_ROLE .. versionadded:: 2011.3(Diablo) -Default: ``"_member_"`` +.. versionchanged:: 21.0.0(Yoga) + +Default: ``"member"`` + +The default value is changed from ``_member_`` to ``member`` to conform +with what keystone-bootstrap creates. The name of the role which will be assigned to a user when added to a project. This value must correspond to an existing role name in Keystone. In general, diff --git a/doc/source/contributor/topics/ini-based-configuration.rst b/doc/source/contributor/topics/ini-based-configuration.rst index 931b16961..3bb79e021 100644 --- a/doc/source/contributor/topics/ini-based-configuration.rst +++ b/doc/source/contributor/topics/ini-based-configuration.rst @@ -170,7 +170,7 @@ approach will be used in the initial effort. cfg.StrOpt( 'default_role', - default='_member_', + default='member', django-setting='OPENSTACK_KEYSTONE_DEFAULT_ROLE', help=... ) diff --git a/openstack_dashboard/dashboards/identity/projects/tests.py b/openstack_dashboard/dashboards/identity/projects/tests.py index 5a2fcfc08..873895ac4 100644 --- a/openstack_dashboard/dashboards/identity/projects/tests.py +++ b/openstack_dashboard/dashboards/identity/projects/tests.py @@ -1379,13 +1379,13 @@ class DetailProjectViewTests(test.BaseAdminViewTests): # Check the content of the table users_expected = { '1': {'roles': ['admin'], - 'roles_from_groups': [('_member_', 'group_one'), ], }, - '2': {'roles': ['_member_'], + 'roles_from_groups': [('member', 'group_one'), ], }, + '2': {'roles': ['member'], 'roles_from_groups': [], }, - '3': {'roles': ['_member_'], - 'roles_from_groups': [('_member_', 'group_one'), ], }, + '3': {'roles': ['member'], + 'roles_from_groups': [('member', 'group_one'), ], }, '4': {'roles': [], - 'roles_from_groups': [('_member_', 'group_one'), ], } + 'roles_from_groups': [('member', 'group_one'), ], } } users_id_observed = [user.id for user in @@ -1490,7 +1490,7 @@ class DetailProjectViewTests(test.BaseAdminViewTests): "horizon/common/_detail_table.html") # Check the table content - groups_expected = {'1': ["_member_"], } + groups_expected = {'1': ["member"], } groups_id_observed = [group.id for group in res.context["groupstable_table"].data] diff --git a/openstack_dashboard/defaults.py b/openstack_dashboard/defaults.py index c6894332f..4b1f80ef6 100644 --- a/openstack_dashboard/defaults.py +++ b/openstack_dashboard/defaults.py @@ -367,7 +367,7 @@ OPENSTACK_CINDER_FEATURES = { # "cloud_admin": "rule:admin_required and domain_id:<your domain id>" # This value must be the name of the domain whose ID is specified there. OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = 'Default' -OPENSTACK_KEYSTONE_DEFAULT_ROLE = '_member_' +OPENSTACK_KEYSTONE_DEFAULT_ROLE = 'member' # The OPENSTACK_KEYSTONE_BACKEND settings can be used to identify the # capabilities of the auth backend for Keystone. # If Keystone has been configured to use LDAP as the auth backend then set diff --git a/releasenotes/notes/change-keystone-default-role-3f95b6af11aed63b.yaml b/releasenotes/notes/change-keystone-default-role-3f95b6af11aed63b.yaml new file mode 100644 index 000000000..64d96c27a --- /dev/null +++ b/releasenotes/notes/change-keystone-default-role-3f95b6af11aed63b.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - | + The default value of OPENSTACK_KEYSTONE_DEFAULT_ROLE is changed from + _member_ to member to conform with what keystone-bootstrap creates. |