[Yahoo-eng-team] [Bug 1850656] Re: Deploy will fail if keystone.conf has '[oslo_policy]/enforce_scope=true'

2021-06-10 Thread Florian Faltermeier
Hello, this affect kolla-ansible/wallaby, too. ** Also affects: wallaby Importance: Undecided Status: New ** No longer affects: wallaby -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1850656] Re: Deploy will fail if keystone.conf has '[oslo_policy]/enforce_scope=true'

2020-06-12 Thread Mark Goddard
** Changed in: kolla-ansible Milestone: 10.0.0 => None ** Changed in: kolla-ansible/ussuri Milestone: 10.0.0 => None ** Also affects: kolla-ansible/victoria Importance: Medium Assignee: Radosław Piliszek (yoctozepto) Status: In Progress ** Changed in: kolla-ansible/ussuri

[Yahoo-eng-team] [Bug 1850656] Re: Deploy will fail if keystone.conf has '[oslo_policy]/enforce_scope=true'

2019-11-27 Thread Mark Goddard
Given the current size of the patch, we'll drop this from 9.0.0. ** Changed in: kolla-ansible/train Milestone: 9.0.0 => None ** Changed in: kolla-ansible/train Status: In Progress => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team,

[Yahoo-eng-team] [Bug 1850656] Re: Deploy will fail if keystone.conf has '[oslo_policy]/enforce_scope=true'

2019-11-14 Thread Mark Goddard
** Also affects: kolla-ansible/ussuri Importance: Medium Assignee: Radosław Piliszek (yoctozepto) Status: In Progress ** Changed in: kolla-ansible/ussuri Milestone: 9.0.0 => 10.0.0 -- You received this bug notification because you are a member of Yahoo! Engineering Team,

[Yahoo-eng-team] [Bug 1850656] Re: Deploy will fail if keystone.conf has '[oslo_policy]/enforce_scope=true'

2019-10-31 Thread Colleen Murphy
> It either ends up having Client Error with admin-project-scoped auth or 401 with supposedly defalt-domain-scoped auth. The scope_type for identity:create_endpoint is "system": https://docs.openstack.org/keystone/latest/configuration/policy.html So neither a project- nor domain-scoped token

[Yahoo-eng-team] [Bug 1850656] Re: Deploy will fail if keystone.conf has '[oslo_policy]/enforce_scope=true'

2019-10-31 Thread Radosław Piliszek
So trying to get auth not scoped to a project but domain instead, I get this: failed: [primary] (item={u'service_type': u'identity', u'name': u'keystone'}) => { "action": "os_keystone_service", "attempts": 5, "changed": false, "invocation": { "module_args": {