From 232ef11a9d42ce4b5d5fa1ccb68aafe61934d249 Mon Sep 17 00:00:00 2001
From: caoyuan <cao.yuan@99cloud.net>
Date: Wed, 1 Nov 2017 20:22:02 +0800
Subject: [PATCH] Update the service_token_roles_required to True for watcher
AuthToken middleware is set with
keystone_authtoken.service_token_roles_required set to False.
This is backwards compatible but deprecated behaviour.
This patch set it to True.
Change-Id: Id7df0b74a44753cd90359fd79caafd7acce9adb8
---
ansible/roles/watcher/templates/watcher.conf.j2 | 1 +
1 file changed, 1 insertion(+)
diff --git a/ansible/roles/watcher/templates/watcher.conf.j2 b/ansible/roles/watcher/templates/watcher.conf.j2
index d45edbbfe9..5dfff4c4a6 100644
--- a/ansible/roles/watcher/templates/watcher.conf.j2
+++ b/ansible/roles/watcher/templates/watcher.conf.j2
@@ -25,6 +25,7 @@ user_domain_id = {{ default_user_domain_id }}
project_name = service
username = {{ watcher_keystone_user }}
password = {{ watcher_keystone_password }}
+service_token_roles_required = True
memcache_security_strategy = ENCRYPT
memcache_secret_key = {{ memcache_secret_key }}
--
GitLab