mcp/patches/reclass-system-salt-model/0003-Define-keystone-domain-for-heat-stack.patch

   1 ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
   2 : Copyright (c) 2019 Mirantis Inc., Enea AB and others.
   3 :
   4 : All rights reserved. This program and the accompanying materials
   5 : are made available under the terms of the Apache License, Version 2.0
   6 : which accompanies this distribution, and is available at
   7 : http://www.apache.org/licenses/LICENSE-2.0
   8 ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
   9 From: Michael Polenchuk <mpolenchuk@mirantis.com>
  10 Date: Wed, 9 Jan 2019 15:36:36 +0400
  11 Subject: [PATCH] Define keystone domain for heat stack
  12
  13 Create domain for heat stack user by keystone state,
  14 previously it was doing by heat-keystone-setup-domain script.
  15
  16 diff --git a/keystone/client/v3/service/heat.yml b/keystone/client/v3/service/heat.yml
  17 index 6c45bfe2..25d16e18 100644
  18 --- a/keystone/client/v3/service/heat.yml
  19 +++ b/keystone/client/v3/service/heat.yml
  20 @@ -6,6 +6,9 @@ parameters:
  21      client:
  22        resources:
  23          v3:
  24 +          domains:
  25 +            heat:
  26 +              description: 'Contains users and projects created by heat'
  27            roles:
  28              heat_stack_user:
  29                name: heat_stack_user
  30 @@ -21,6 +24,15 @@ parameters:
  31                  service_admin:
  32                    name: admin
  33                    project_id: service
  34 +            heat_domain_admin:
  35 +              domain_id: heat
  36 +              password: ${_param:heat_domain_admin_password}
  37 +              email: ${_param:admin_email}
  38 +              roles:
  39 +                heat_stack_admin:
  40 +                  name: admin
  41 +                  role_domain_id: heat
  42 +                  domain_id: heat
  43            services:
  44              heat:
  45                type: orchestration