Bug 2157858

Summary:	[OSP17.1][SRBAC] Enforce secure rbac isn't set glance enforce_scope setting
Product:	Red Hat OpenStack	Reporter:	msava
Component:	openstack-tripleo-heat-templates	Assignee:	Pranali Deore <pdeore>
Status:	CLOSED NOTABUG	QA Contact:	Joe H. Rahme <jhakimra>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	17.1 (Wallaby)	CC:	cyril, mburns, msava, pdeore, ramishra
Target Milestone:	ga	Keywords:	Triaged
Target Release:	17.1	Flags:	ifrangs: needinfo? (pdeore)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-01-19 10:56:33 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description msava 2023-01-03 09:55:47 UTC

Description of problem:
After deploying a Secure RBAC env,glance enforce_scope isn't setted.
Passed `-e /usr/share/openstack-tripleo-heat-templates/environments/enable-secure-rbac.yaml` and file with `parameter_defaults: \n     EnforceSecureRbac: true`

Version-Release number of selected component (if applicable):
openstack-tripleo-heat-templates-14.3.1-1.20221118011425.fc038b6.el9ost.noarch
core_puddle_version:1:RHOS-17.1-RHEL-9-20221130.n.1

How reproducible:

Steps to Reproduce:
1. Deploy env with secure rbac
2. With overcloudrc file sourced.Check enforce_scope setting in glance-api.conf.

Actual results:
Glance enforce_scope not configured

Expected results:
Glance enforce_scope setting should be 'enforce_scope = true'


Additional info: