)]}'
{"tempest/config.py":[{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"352400613a3917ff45fadd0fb58eee6863b2e507","unresolved":true,"context_lines":[{"line_number":65,"context_line":"                help\u003d\"Roles to assign to all users created by tempest\","},{"line_number":66,"context_line":"                default\u003d[]),"},{"line_number":67,"context_line":"    cfg.ListOpt(\u0027tempest_admin_roles\u0027,"},{"line_number":68,"context_line":"                help\u003d\"Additional roles to assign to admin created by Tempest\","},{"line_number":69,"context_line":"                default\u003d[]),"},{"line_number":70,"context_line":"    cfg.StrOpt(\u0027default_credentials_domain_name\u0027,"},{"line_number":71,"context_line":"               default\u003d\u0027Default\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"4ae93a0c_471a46dc","line":68,"range":{"start_line":68,"start_character":22,"end_line":68,"end_character":48},"updated":"2026-01-27 15:30:41.000000000","message":"we have \u0027tempest_roles\u0027 L64 for that, is that enough?","commit_id":"1d377ac540e4f7effdc7fe7d3d1ed4ef83b80b44"},{"author":{"_account_id":38080,"name":"Hanna","display_name":"harhipova","email":"harhipova@mirantis.com","username":"harhipova"},"change_message_id":"5d3de3d9f0d91859c52096229dc66560781cfd38","unresolved":true,"context_lines":[{"line_number":65,"context_line":"                help\u003d\"Roles to assign to all users created by tempest\","},{"line_number":66,"context_line":"                default\u003d[]),"},{"line_number":67,"context_line":"    cfg.ListOpt(\u0027tempest_admin_roles\u0027,"},{"line_number":68,"context_line":"                help\u003d\"Additional roles to assign to admin created by Tempest\","},{"line_number":69,"context_line":"                default\u003d[]),"},{"line_number":70,"context_line":"    cfg.StrOpt(\u0027default_credentials_domain_name\u0027,"},{"line_number":71,"context_line":"               default\u003d\u0027Default\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"308923c5_0ff7b722","line":68,"range":{"start_line":68,"start_character":22,"end_line":68,"end_character":48},"in_reply_to":"4ae93a0c_471a46dc","updated":"2026-01-27 17:20:18.000000000","message":"Partially, yes — tempest_roles could be used. However, assigning\nadditional roles to all Tempest users may hide or bypass potential\nauthorization issues that other tests are meant to catch.\n\nIntroducing a separate option for admin users keeps the default user\nrole model strict, while allowing additional flexibility where it is\nactually needed. This is particularly useful for production-like\ndeployments, where admin users may legitimately require extra roles.\n\nHaving a dedicated tempest_admin_roles option makes this distinction\nexplicit and avoids over-privileging non-admin Tempest users.","commit_id":"1d377ac540e4f7effdc7fe7d3d1ed4ef83b80b44"}]}