OpenStack Keystone Charm

  1. Bug #1649106
  2. Comment #15

Comment 15 for bug 1649106

Revision history for this message
Linda Guo (lihuiguo) wrote (last edit ):

Hi Alex.

The user with admin role can perform action (list role) using Horizon, but CLI failed. I have reviewed the keystone policy file, it looks good.

"admin_required": "role:Admin",

"identity:get_role": "rule:admin_required",
    "identity:list_roles": "rule:admin_required",
    "identity:create_role": "rule:cloud_admin",
    "identity:update_role": "rule:cloud_admin",
    "identity:delete_role": "rule:cloud_admin",

openstack/ubuntu version:
Ubuntu 18.04 (Bionic)
OpenStack Queens

keystone charm is at version 312

Openstack hasn't been upgraded