Open Stack

Matt Fischer wrote:
> I'd like to get some clarification and hopefully correction on the
> values for the two operator_roles variables. One is
> in manifests/keystone/auth.pp, and it claims "Array of strings. List of
> roles Swift considers as admin.". The other is
> in manifests/proxy/keystone.pp and it claims to be "a list of keystone
> roles a user must have to gain access to Swift.".  "gain access to" does
> not imply admin to me, it implies basic features won't work, but I'm not
> sure that's really what it means.
> 
> So are these in fact separate concepts? What I read is that despite them
> having the same name, one is for admins, and one is needed to use swift
> at all. However, since they both default to ["admin", "SwiftOperator"],
> I don't really think that's true.
> 
> Can someone clarify and then fix the comments or code?
> 

Best I can tell from the Swift docs, they are the same.  One creates
roles in Keystone and the other tells Swift which roles are important by
actually putting them in a config file.


-- 
Cody

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 931 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20151102/3b476db0/attachment.pgp>