| commit | b58f00cb61ab6d41f0231ef94bbd8fa24c45db41 | [log] [tgz] |
|---|---|---|
| author | Pavlo Shchelokovskyy <shchelokovskyy@gmail.com> | Mon Aug 29 13:45:36 2022 +0300 |
| committer | Pavlo Shchelokovskyy <shchelokovskyy@gmail.com> | Mon Aug 29 15:00:29 2022 +0300 |
| tree | 447c795e2e8eeaa9d63c42a76100f77781cbcb40 | |
| parent | 3488b8e5edccdcf2068aa0ec2f8ea2c282191396 [diff] |
Require member role in the static get_primary_creds otherwise the reader role might be picked up, which is not enough in some cases even when scope and new policies are not enforced, like barbican requiring a 'creator' role, and reader+creator makes no sense. Change-Id: Icab8c2a84d13ba29e4402442edc29df539c70c9f Related-Issue: PRODX-26490