---
# Copyright 2014, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# Create the swiftoperator role
- name: Ensure swiftoperator role
  keystone: >
    command=ensure_role
    login_tenant_name="{{ auth_admin_tenant }}"
    login_user="{{ auth_admin_username }}"
    login_password="{{ auth_admin_password }}"
    endpoint="{{ auth_admin_uri }}"
    role_name="swiftoperator"

# Ensure glance user has the swiftoperator role when glance is using swift
- name: Ensure Glance User has swiftoperator Role
  keystone: >
    command=ensure_user_role
    login_tenant_name="{{ auth_admin_tenant }}"
    login_user="{{ auth_admin_username }}"
    login_password="{{ auth_admin_password }}"
    endpoint="{{ auth_admin_uri }}"
    user_name="glance"
    tenant_name="{{ auth_admin_tenant }}"
    role_name="swiftoperator"
  when: glance_default_store is defined and glance_default_store == "swift"

---
# Copyright 2014, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# Create the swiftoperator role
- name: Ensure swiftoperator role
  keystone: >
    command=ensure_role
    login_tenant_name="{{ auth_admin_tenant }}"
    login_user="{{ auth_admin_username }}"
    login_password="{{ auth_admin_password }}"
    endpoint="{{ auth_admin_uri }}"
    role_name="swiftoperator"

Remove swiftoperator role from glance user
Remove swiftoperator role from glance user

* This is redundant and not required
* service:glance already has the "admin" role
* The glance user can already access swift by default

Fixes #638
