> According to "/etc/contrail/contrail-keystone-auth.conf" contrail > authenticates against keystone as "neutron" user, > BUT, checking "keystone user-list", "keystone tenant-list" and "keystone > user-role-list", I see no relation between neutron user and tenant admin. >Is there any USER/ROLE relationship missing in my config?
Hi, You need to make sure the user that you specified in the config has the admin role in the specified tenant. So if the contrail-keystone-auth.conf contains something like this: admin_user=neutron admin_tenant_name=admin Then you will need to give the neutron user the admin role in the admin tenant. E.g. keystone user-role-add --user neutron --tenant admin --role admin Note that this fully user-configurable so it can be any user you want as long as it has the appropriate permissions. Cheers, Robert van Leeuwen
_______________________________________________ Users mailing list [email protected] http://lists.opencontrail.org/mailman/listinfo/users_lists.opencontrail.org
