Identity service authentication for adoption

If you have custom policies enabled, understand the steps to complete to ensure that your environment is prepared for adoption.

Complete the following steps:

  1. Remove custom policies.
  2. Run the adoption.
  3. Re-add custom policies by using the new SRBAC syntax.
Important
Red Hat does not support customized roles or policies. Syntax errors or misapplied authorization can negatively impact security or usability. If you need customized roles or policies in your production environment, contact Red Hat support for a support exception before you begin the adoption.

After you adopt a director-based OpenStack deployment to a Red Hat OpenStack Services on OpenShift deployment, the Identity service performs user authentication and authorization by using Secure RBAC (SRBAC). If SRBAC is already enabled, then there is no change to how you perform operations. If SRBAC is disabled, then adopting a director-based OpenStack deployment might change how you perform operations due to changes in API access policies.