Description of problem: In Horizon dashboard there's no "create role" button in "Roles" page. Version-Release number of selected component (if applicable): python-django-horizon-14.0.1-0.20180903221923.e975afd.el7ost.2.noarch How reproducible: 100% Steps to Reproduce: 1. Install OSP14-passed-phase1(containerized) 2. deploy overcloud 3. Login to Horizon dashboard with admin user 4. Go to Identify->Roles Actual results: Here is no "create role" button. Expected results: "Create role" button should be in this page. Additional info: puddle from: 2018.09.06 Link to test run in polation: https://polarion.engineering.redhat.com/polarion/#/project/RHELOpenStackPlatform/workitem?id=RHELOSP-12048
I can reproduce this with osp14, but not with the upstream master, so there must be a patch that fixes it that we missed. I will try to find it and backport it.
Can you please check if the OPENSTACK_KEYSTONE_BACKEND setting in /etc/openstack-dashboard/local_settings contains the setting "'can_edit_role': True,"? Can you also check /etc/openstack-dashboard/keystone_policy.json and see what is the policy for "create_role"?
I found the problem. The REST_API_REQUIRED_SETTINGS setting needs to contain 'OPENSTACK_KEYSTONE_BACKEND' as per https://review.openstack.org/#/c/579085/ That needs to be added to the template for local_settings file for Horizon.
Verified: python-django-horizon-14.0.1-0.20181006183341.19865ee.el7ost.noarch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2019:0045