| commit | 86b2f6db38a6044df83d6bd09a9cc5a920d13240 | [log] [tgz] |
|---|---|---|
| author | Pavlo Shchelokovskyy <shchelokovskyy@gmail.com> | Mon Aug 29 13:45:36 2022 +0300 |
| committer | Pavlo Shchelokovskyy <shchelokovskyy@gmail.com> | Fri Apr 18 13:32:05 2025 +0000 |
| tree | 389fcc3108aa2c90cc223a654a72af8110389051 | |
| parent | b8645e535d5f312081d3e6c9fb6c71ef8cd06533 [diff] |
Require member role in the static get_primary_creds otherwise the reader role might be picked up, which is not enough in some cases even when scope and new policies are not enforced, like barbican requiring a 'creator' role, and reader+creator makes no sense. Change-Id: Icab8c2a84d13ba29e4402442edc29df539c70c9f Related-Issue: PRODX-26490 (cherry picked from commit 9dff261a9f2d4d0fb9e944398a3687fa0e49bf9d)