commit 000d2ff926b28aac50388ae0cca790b5dcb384cd
author Ivan Berezovskiy <iberezovskiy@mirantis.com> Thu Aug 29 13:32:01 2019 +0400
committer Ivan Berezovskiy <iberezovskiy@mirantis.com> Thu Aug 29 13:34:37 2019 +0400
tree d3341707d2dee61b6658f35b7dbd9f605637cf3f
parent cc9a8c70a7acc2e62a32b895269655532c6ed050

Set service_token_roles params for nova, glance and cinder

PROD-32906

Change-Id: I2ad3d6d05c70d998c868419ffd588be7ab3ae8b0

nova/compute/cluster.yml

diff --git a/nova/compute/cluster.yml b/nova/compute/cluster.yml
index 94e4157..8a7b362 100644
--- a/nova/compute/cluster.yml
+++ b/nova/compute/cluster.yml
@@ -43,6 +43,8 @@
         password: ${_param:keystone_nova_password}
         tenant: service
         protocol: ${_param:cluster_internal_protocol}
+        service_token_roles: admin
+        service_token_roles_required: true
       service_user:
         enabled: ${_param:nova_service_user_enabled}
       barbican:

nova/compute/single.yml

diff --git a/nova/compute/single.yml b/nova/compute/single.yml
index 287442e..44077a8 100644
--- a/nova/compute/single.yml
+++ b/nova/compute/single.yml
@@ -42,6 +42,8 @@
         tenant: service
         protocol: ${_param:cluster_internal_protocol}
         region: ${_param:openstack_region}
+        service_token_roles: admin
+        service_token_roles_required: true
       barbican:
         enabled: ${_param:barbican_integration_enabled}
       service_user: