summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGhanshyam Mann <gmann@ghanshyammann.com>2022-10-15 20:05:06 -0500
committerGhanshyam Mann <gmann@ghanshyammann.com>2022-10-15 20:05:06 -0500
commitceec890947892d9deed12ac7f648f42514ad49e1 (patch)
treed433cd89600541a85826d25f5ab2ed934d72c23b
parentf2bc2ff3635904598983a2075405428e7b528576 (diff)
downloadironic-ceec890947892d9deed12ac7f648f42514ad49e1.tar.gz
Use project scoped token for cinder, glance services
All services except Ironic (and keystone to support ironic with system scope deployement), will not have system scope in their API policy instead they are default to project scoped. Change-Id: Id13a359086f9b24dbfcd2b565a42c50d0dab7736
-rw-r--r--devstack/lib/ironic6
1 files changed, 0 insertions, 6 deletions
diff --git a/devstack/lib/ironic b/devstack/lib/ironic
index 154dc665d..aae8ca5cf 100644
--- a/devstack/lib/ironic
+++ b/devstack/lib/ironic
@@ -1649,15 +1649,9 @@ function configure_client_for {
# NOTE(TheJulia): Below are services which we know, as of late 2021, which support
# explicit scope based ops *and* have knobs.
- # Needed: Neutron, swift, nova ?service_catalog?
- # Neutron - https://review.opendev.org/c/openstack/devstack/+/797450
if [[ "$service_config_section" == "inspector" ]] && [[ "$IRONIC_INSPECTOR_ENFORCE_SCOPE" == "True" ]]; then
use_system_scope="True"
- elif [[ "$service_config_section" == "cinder" ]] && [[ "${CINDER_ENFORCE_SCOPE:-False}" == "True" ]]; then
- use_system_scope="True"
- elif [[ "$service_config_section" == "glance" ]] && [[ "${GLANCE_ENFORCE_SCOPE:-False}" == "True" ]]; then
- use_system_scope="True"
fi
if [[ "$use_system_scope" == "True" ]]; then