> > As an OIDC user, tried to play with Heat and Murano recently. They usually > fail with a trust creation error, noticing that keystone cannot find the > _member_ role while creating the trust. > Hmmm...that should not be the case. The user in question should have a > role on the project, but getting it via a group is OK. > > I suspect the problem is the Ephemeral nature of Federated users. With the > Shadow user construct (under construction) there would be something to > use. > > Please file a bug on this and assign it to me (or notify me if you can't > assign). >
I had filed a bug to murano before, maybe it can be assigned to keystone(?): https://bugs.launchpad.net/murano/+bug/1589993 __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
