From f0b1bffe839e7b9b83caed071862b0d3e0250913 Mon Sep 17 00:00:00 2001 From: Felix Kronlage-Dammers Date: Thu, 26 Feb 2026 16:47:49 +0100 Subject: [PATCH 1/2] be a bit more explicit about the admin rights needed. Found out the hard way by @mauhau Signed-off-by: Felix Kronlage-Dammers --- Standards/scs-0302-v1-domain-manager-role.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Standards/scs-0302-v1-domain-manager-role.md b/Standards/scs-0302-v1-domain-manager-role.md index a418a23b7..c960ba2a6 100644 --- a/Standards/scs-0302-v1-domain-manager-role.md +++ b/Standards/scs-0302-v1-domain-manager-role.md @@ -161,6 +161,8 @@ There is a test suite in [`domain-manager-check.py`](https://github.com/Sovereig The test suite connects to the OpenStack API using two sample domains and corresponding Domain Manager accounts. It verifies the compliance to the standard and the proper domain-scoping as defined by the Keystone policy. Please consult the associated [README.md](https://github.com/SovereignCloudStack/standards/blob/main/Tests/iam/domain-manager/README.md) for detailed setup and testing instructions. +The test suite, [`domain-manager-check.py`](https://github.com/SovereignCloudStack/standards/blob/main/Tests/iam/domain-manager/domain-manager-check.py), +needs to be run with admin credentials for the corresponding OpenStack environment. ## Appendix From be1cb7a9f73f935b4a193e97fa38d8266e3c7e8a Mon Sep 17 00:00:00 2001 From: Felix Kronlage-Dammers Date: Thu, 26 Feb 2026 20:07:02 +0100 Subject: [PATCH 2/2] correct this, admin access is not required ...but not that app creds don't work. Thanks @berendt for clarification. Signed-off-by: Felix Kronlage-Dammers --- Standards/scs-0302-v1-domain-manager-role.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Standards/scs-0302-v1-domain-manager-role.md b/Standards/scs-0302-v1-domain-manager-role.md index c960ba2a6..90ec91466 100644 --- a/Standards/scs-0302-v1-domain-manager-role.md +++ b/Standards/scs-0302-v1-domain-manager-role.md @@ -162,7 +162,7 @@ The test suite connects to the OpenStack API using two sample domains and corres It verifies the compliance to the standard and the proper domain-scoping as defined by the Keystone policy. Please consult the associated [README.md](https://github.com/SovereignCloudStack/standards/blob/main/Tests/iam/domain-manager/README.md) for detailed setup and testing instructions. The test suite, [`domain-manager-check.py`](https://github.com/SovereignCloudStack/standards/blob/main/Tests/iam/domain-manager/domain-manager-check.py), -needs to be run with admin credentials for the corresponding OpenStack environment. +does not currently work with application credentials, authentication with username and password is required. ## Appendix