[Openstack-operators] _member_ role clarification

Justin Cattle j at ocado.com
Thu Nov 10 10:11:46 UTC 2016


Thanks all for the responses.
I have seen both of those threads already, but I wasn't 100% sure what I
was seeing was a design change or a bug.

For now I've added a "me too" to the keystone bug and I'll see what the
response is.

Thanks.



Cheers,
Just

On 9 November 2016 at 13:18, Mohammed Naser <mnaser at vexxhost.com> wrote:

> http://www.gossamer-threads.com/lists/openstack/dev/38640
>
> This is of your interest.
>
> Sent from my iPhone
>
> On Nov 9, 2016, at 6:55 AM, Justin Cattle <j at ocado.com> wrote:
>
> Hi,
>
>
> Apologies if this questions has been answered already, or is in some doc
> somewhere. Please point me in the right direction of so.
>
>
> I'm upgrading openstack from Juno to Mitaka, in steps.  We role our own
> openstack using puppet, and have been using identity v3 in Juno with
> domains via an ldap backend.
>
> The upgrade process is largely created, tested and working, but not rolled
> out across our production sites yet.
>
> However, I notice when I create a new cloud using openstack Mitaka from
> scratch, not upgraded from Juno, the _member_ role is no longer created
> automatically when users are assigned to projects [ tenants in old money
> ].  I'm pretty sure this was happening in Juno, and the Juno docs seem to
> confirm it.
> I believe horizon at least was using this role to allow users access.
>
> I've noticed this because we have scripts to automate some user/group
> stuff, and the have some usage of the _member_ role hard coded atm.  They
> are failing, as the role doesn't exist on non-upgraded clouds :)
>
>
> So I would like some advice/clarification on what the situation is.
>
> What else, if anything, was the _member_ role used for? heat maybe?
>
> Is the _member_ role no longer required at all, not even by horizon?
>
> If it's no longer required, is it safe or desirable to remove the _member_
> role from upgraded clouds?
>
>
>
>
>
> Cheers,
> Just
>
> Notice:  This email is confidential and may contain copyright material of
> members of the Ocado Group. Opinions and views expressed in this message
> may not necessarily reflect the opinions and views of the members of the
> Ocado Group.
>
>
>
> If you are not the intended recipient, please notify us immediately and
> delete all copies of this message. Please note that it is your
> responsibility to scan this message for viruses.
>
>
>
> Fetch and Sizzle are trading names of Speciality Stores Limited and Fabled
> is a trading name of Marie Claire Beauty Limited, both members of the Ocado
> Group.
>
>
>
> References to the “Ocado Group” are to Ocado Group plc (registered in
> England and Wales with number 7098618) and its subsidiary undertakings (as
> that expression is defined in the Companies Act 2006) from time to time.
> The registered office of Ocado Group plc is Titan Court, 3 Bishops Square,
> Hatfield Business Park, Hatfield, Herts. AL10 9NE.
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
>

-- 


Notice:  This email is confidential and may contain copyright material of 
members of the Ocado Group. Opinions and views expressed in this message 
may not necessarily reflect the opinions and views of the members of the 
Ocado Group. 

 

If you are not the intended recipient, please notify us immediately and 
delete all copies of this message. Please note that it is your 
responsibility to scan this message for viruses. 

 

Fetch and Sizzle are trading names of Speciality Stores Limited and Fabled 
is a trading name of Marie Claire Beauty Limited, both members of the Ocado 
Group.

 

References to the “Ocado Group” are to Ocado Group plc (registered in 
England and Wales with number 7098618) and its subsidiary undertakings (as 
that expression is defined in the Companies Act 2006) from time to time. 
 The registered office of Ocado Group plc is Titan Court, 3 Bishops Square, 
Hatfield Business Park, Hatfield, Herts. AL10 9NE.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20161110/26dd4471/attachment.html>


More information about the OpenStack-operators mailing list