diff options
author | Jenkins <jenkins@review.openstack.org> | 2017-03-30 05:29:22 +0000 |
---|---|---|
committer | Gerrit Code Review <review@openstack.org> | 2017-03-30 05:29:22 +0000 |
commit | 313ece74cd7dd7a715f345038dbe78ec107a9afd (patch) | |
tree | 51676d6121f238f1a0886a7fe4e6c1eacc2e30f4 /releasenotes | |
parent | 0ae9d9b346f1c5d7e29b8f281474577eca260670 (diff) | |
parent | 91053af09dace8dba65c9e5b72eb7de15fd69522 (diff) |
Merge "Allow to configure policy.json for OpenStack projects"
Diffstat (limited to 'releasenotes')
-rw-r--r-- | releasenotes/notes/api-policy-4ca739519537f6f4.yaml | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/releasenotes/notes/api-policy-4ca739519537f6f4.yaml b/releasenotes/notes/api-policy-4ca739519537f6f4.yaml new file mode 100644 index 00000000..54beb305 --- /dev/null +++ b/releasenotes/notes/api-policy-4ca739519537f6f4.yaml @@ -0,0 +1,13 @@ +--- +features: + - | + TripleO is now able to configure role-based access API policies with new + parameters for each API service. + For example, Nova API service has now NovaApiPolicies and the value + could be { nova-context_is_admin: { key: context_is_admin, value: 'role:admin' } } + It will configure /etc/nova/policy.json file and configure context_is_admin + to true. Puppet will take care of this configuration and API services are + restarted when the file is touched. + We're also adding augeas resource to the list of Puppet providers that + container deployments grab in the catalog to generate configurations, so + this feature can be used when deploying TripleO in containers. |