http://www.gossamer-threads.com/lists/openstack/dev/38640
This is of your interest. Sent from my iPhone > On Nov 9, 2016, at 6:55 AM, Justin Cattle <j...@ocado.com> wrote: > > Hi, > > > Apologies if this questions has been answered already, or is in some doc > somewhere. Please point me in the right direction of so. > > > I'm upgrading openstack from Juno to Mitaka, in steps. We role our own > openstack using puppet, and have been using identity v3 in Juno with domains > via an ldap backend. > > The upgrade process is largely created, tested and working, but not rolled > out across our production sites yet. > > However, I notice when I create a new cloud using openstack Mitaka from > scratch, not upgraded from Juno, the _member_ role is no longer created > automatically when users are assigned to projects [ tenants in old money ]. > I'm pretty sure this was happening in Juno, and the Juno docs seem to confirm > it. > I believe horizon at least was using this role to allow users access. > > I've noticed this because we have scripts to automate some user/group stuff, > and the have some usage of the _member_ role hard coded atm. They are > failing, as the role doesn't exist on non-upgraded clouds :) > > > So I would like some advice/clarification on what the situation is. > > What else, if anything, was the _member_ role used for? heat maybe? > > Is the _member_ role no longer required at all, not even by horizon? > > If it's no longer required, is it safe or desirable to remove the _member_ > role from upgraded clouds? > > > > > > Cheers, > Just > > Notice: This email is confidential and may contain copyright material of > members of the Ocado Group. Opinions and views expressed in this message may > not necessarily reflect the opinions and views of the members of the Ocado > Group. > > If you are not the intended recipient, please notify us immediately and > delete all copies of this message. Please note that it is your responsibility > to scan this message for viruses. > > Fetch and Sizzle are trading names of Speciality Stores Limited and Fabled is > a trading name of Marie Claire Beauty Limited, both members of the Ocado > Group. > > References to the “Ocado Group” are to Ocado Group plc (registered in England > and Wales with number 7098618) and its subsidiary undertakings (as that > expression is defined in the Companies Act 2006) from time to time. The > registered office of Ocado Group plc is Titan Court, 3 Bishops Square, > Hatfield Business Park, Hatfield, Herts. AL10 9NE. > _______________________________________________ > OpenStack-operators mailing list > OpenStack-operators@lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
_______________________________________________ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
