GitList

Browse code

Create stack_domain_admin user

Create an additional service user for Heat, which is a domain admin
for the stack_user_domain - this is necessary since the normal service
user cannot manage the projects/users in the stack_user_domain when
keystone is configured to use the v3cloudsample policy (such as in
gate integration tests).

Change-Id: If59c11a74145b9bd02f78a7e0882afe1b0a72e40

Steven Hardy authored on 2014/02/25 03:09:10
Showing 1 changed files

lib/heat

History View file @ dd029da

@@ -207,6 +207,16 @@ function create_heat_accounts() {
                              --description "Owns users and projects created by heat" \
                              | grep ' id ' | get_field 2)
                          iniset $HEAT_CONF DEFAULT stack_user_domain ${D_ID}
+                    +
                     +    openstack --os-token $OS_TOKEN --os-url=$KS_ENDPOINT_V3 \
                     +        --os-identity-api-version=3 user create --password $SERVICE_PASSWORD \
                     +        --domain $D_ID heat_domain_admin \
                     +        --description "Manages users and projects created by heat"
                     +    openstack --os-token $OS_TOKEN --os-url=$KS_ENDPOINT_V3 \
                     +        --os-identity-api-version=3 role add \
                     +        --user ${U_ID} --domain ${D_ID} admin
                     +    iniset $HEAT_CONF DEFAULT stack_domain_admin heat_domain_admin
                     +    iniset $HEAT_CONF DEFAULT stack_domain_admin_password $SERVICE_PASSWORD
+                     }
                      # Restore xtrace