Bug 1326396

Summary: [RFE] Implement Secure RBAC Project Scoped Personas within cinder
Product: Red Hat OpenStack Reporter: Jaison Raju <jraju>
Component: openstack-cinderAssignee: Brian Rosmaita <brian.rosmaita>
Status: CLOSED ERRATA QA Contact: Evelina Shames <eshames>
Severity: medium Docs Contact: Andy Stillman <astillma>
Priority: urgent    
Version: 7.0 (Kilo)CC: abishop, brian.rosmaita, broose, cylopez, djuran, eharney, gcharot, gfidente, igarciam, jraju, jschluet, lbragsta, ltoscano, mariel, mburns, molasaga, morazi, nkinder, nlevinki, nsatsia, pgrist, pveiga, spower, srevivo, vimartin
Target Milestone: gaKeywords: FutureFeature, Reopened, Triaged
Target Release: 17.1   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: openstack-cinder-18.2.1-1.20221109051124.ebc27d3.el9ost python-cinder-tests-tempest-1.8.0-1.20230304051243.el9ost Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-08-16 01:09:22 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version: Xena
Embargoed:
Bug Depends On: 1228474, 1801416, 2050773    
Bug Blocks: 1381612, 1956280    

Description Jaison Raju 2016-04-12 15:02:36 UTC
1. Proposed title of this feature request  
Need cinder policy to be configured to include a read-only role .
  
3. What is the nature and description of the request?  
Customer has requirement of read-only admin role for all core services .

4. Why does the customer need this? (List the business requirements here)  
  A read-only admin user is necessary for customer environment .
  
Additional info:
The following bug is raised for keystone to add role .
This role can be configured in policy file .
Bug 1228474 - [RFE] Read only role for tenant access (edit) 
https://blueprints.launchpad.net/keystone/+spec/admin-readonly-role

Comment 22 Brian Rosmaita 2022-05-31 13:28:18 UTC

*** This bug has been marked as a duplicate of bug 1956280 ***

Comment 29 Lukas Svaty 2023-06-16 08:13:29 UTC
Bulk moving target milestone to GA after the release of Beta on 14th June '23.

Comment 42 errata-xmlrpc 2023-08-16 01:09:22 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 17.1 (Wallaby)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2023:4577