Comment 4 for bug 1812209

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-tripleo (stable/rocky)

Reviewed: https://review.openstack.org/631851
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=e8adf4b397bfef30f59f0738f363c2f918aa9953
Submitter: Zuul
Branch: stable/rocky

commit e8adf4b397bfef30f59f0738f363c2f918aa9953
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Thu Jan 17 14:17:36 2019 +0200

    Create barbican's creator role by default

    Barbican has a very specific set of keystone roles that it uses in order
    to properly enforce RBAC. One of them (and the most important) is the
    creator role. Which you'll assign to your users in order to allow them
    to create and retrieve secrets (the other role that can do this is
    admin... but we don't want to rely on this).

    For usability, lets create this role automatically as part of the
    TripleO installation.

    Closes-Bug: #1812209
    Change-Id: I9d5f912684a0987a6bdf244321215bd5595a0fa0
    (cherry picked from commit dfd408a73d14ca2e8b8785d685b7d88a0739c71d)