Designate does not allow a zone to be shared across domains and projects
Bug #1808590 reported by
Pedro Guimarães
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Designate Charm |
Confirmed
|
High
|
Unassigned |
Bug Description
Openstack: xenial-queens
I need to share a single zone across multiple projects and domains.
When working on a multi-domain scheme, domain A cannot create/
summary: |
- Designate does not allow a zone to be shared accross domains + Designate does not allow a zone to be shared across domains |
description: | updated |
summary: |
- Designate does not allow a zone to be shared across domains + Designate does not allow a zone to be shared across domains and projects |
Changed in charm-designate: | |
milestone: | 19.04 → 19.07 |
Changed in charm-designate: | |
milestone: | 19.07 → 19.10 |
Changed in charm-designate: | |
milestone: | 19.10 → 20.01 |
Changed in charm-designate: | |
milestone: | 20.01 → 20.05 |
Changed in charm-designate: | |
milestone: | 20.05 → 20.08 |
Changed in charm-designate: | |
milestone: | 20.08 → none |
To post a comment you must log in.
We will need to check policy.json with users in two different domains:
Create auth_v3_ token_admin. json based on https:/ /github. com/openstack/ oslo.policy/ blob/master/ sample_ data/auth_ v3_token_ admin.json.
Generate the policy file from defaults in code: policy- generator --config-dir /etc/designate/ --output-file policy.json --namespace designate v3_token_ admin.json --policy ./policy.json
oslopolicy-
Check what passes and what does not.
oslopolicy-checker --access ./auth_