-
Bug
-
Resolution: Duplicate
-
Undefined
-
None
-
None
-
False
-
-
False
-
?
-
?
-
?
-
?
-
-
-
Moderate
When enabling keystone_default_roles in octavia and tempest, octavia-tempest-plugin configures users with specific roles:
'admin', 'primary', ['lb_admin', CONF.load_balancer.admin_role, 'admin'], ['lb_observer', CONF.load_balancer.observer_role, 'reader'], ['lb_global_observer', CONF.load_balancer.global_observer_role, 'reader'], ['lb_member', CONF.load_balancer.member_role, 'member'], ['lb_member2', CONF.load_balancer.member_role, 'member'], ['lb_member_not_default_member', CONF.load_balancer.member_role]]
The default values for the load_balancer.role are the load-balancer roles which are not needed with keystone_default_roles.
One solution is to set the value of those settings to dummy values (existing roles that don't impact octavia), another fix would be to not use other roles than admin/reader/member.