Bug 2157858 - [OSP17.1][SRBAC] Enforce secure rbac isn't set glance enforce_scope setting [NEEDINFO]
Summary: [OSP17.1][SRBAC] Enforce secure rbac isn't set glance enforce_scope setting
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 17.1 (Wallaby)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ga
: 17.1
Assignee: Pranali Deore
QA Contact: Joe H. Rahme
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-01-03 09:55 UTC by msava
Modified: 2023-08-03 15:46 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-01-19 10:56:33 UTC
Target Upstream Version:
Embargoed:
ifrangs: needinfo? (pdeore)

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker OSP-21125 0 None None None 2023-01-03 10:04:53 UTC

Description msava 2023-01-03 09:55:47 UTC 
Description of problem:
After deploying a Secure RBAC env,glance enforce_scope isn't setted.
Passed `-e /usr/share/openstack-tripleo-heat-templates/environments/enable-secure-rbac.yaml` and file with `parameter_defaults: \n     EnforceSecureRbac: true`

Version-Release number of selected component (if applicable):
openstack-tripleo-heat-templates-14.3.1-1.20221118011425.fc038b6.el9ost.noarch
core_puddle_version:1:RHOS-17.1-RHEL-9-20221130.n.1

How reproducible:

Steps to Reproduce:
1. Deploy env with secure rbac
2. With overcloudrc file sourced.Check enforce_scope setting in glance-api.conf.

Actual results:
Glance enforce_scope not configured

Expected results:
Glance enforce_scope setting should be 'enforce_scope = true'


Additional info:
Note You need to log in before you can comment on or make changes to this bug.