overcloud: openstack-config: identity: make SEAL subproject of LSE and add...

overcloud: openstack-config: identity: make SEAL subproject of LSE and add member role to labo-lse-roots

Signed-off-by: Charles Decoux <charles@cri.epita.fr>

overcloud/openstack-config/identity/seal.tf

@@ -2,6 +2,7 @@
 resource "openstack_identity_project_v3" "SEAL" {
   name      = "SEAL"
   domain_id = data.openstack_identity_project_v3.CRI_domain.id
+  parent_id = resource.openstack_identity_project_v3.LSE.id
 }
 
 # Groups
@@ -9,6 +10,10 @@ data "openstack_identity_group_v3" "CRI_labo-seal-permanents" {
   name      = "labo-seal-permanents"
   domain_id = data.openstack_identity_project_v3.CRI_domain.id
 }
+data "openstack_identity_group_v3" "CRI_labo-lse-roots" {
+  name      = "labo-lse-roots"
+  domain_id = data.openstack_identity_project_v3.CRI_domain.id
+}
 
 # Groups assignments
 resource "openstack_identity_role_assignment_v3" "SEAL_labo-seal-permanents_member" {
@@ -27,6 +32,19 @@ resource "openstack_identity_role_assignment_v3" "SEAL_cri-roots_admin" {
   role_id    = data.openstack_identity_role_v3.admin.id
 }
 
+# Groups assignments inherited from LSE
+resource "openstack_identity_role_assignment_v3" "SEAL_labo-lse-roots_member" {
+  project_id = openstack_identity_project_v3.SEAL.id
+  group_id   = data.openstack_identity_group_v3.CRI_labo-lse-roots.id
+  role_id    = data.openstack_identity_role_v3.member.id
+}
+resource "openstack_identity_role_assignment_v3" "SEAL_labo-lse-roots_load-balancer_member" {
+  project_id = openstack_identity_project_v3.SEAL.id
+  group_id   = data.openstack_identity_group_v3.CRI_labo-lse-roots.id
+  role_id    = data.openstack_identity_role_v3.load-balancer_member.id
+}
+
+
 # Quotas
 resource "openstack_compute_quotaset_v2" "SEAL_quotaset_compute" {
   project_id = openstack_identity_project_v3.SEAL.id