summaryrefslogtreecommitdiffstats
path: root/releasenotes
diff options
context:
space:
mode:
authorJenkins <jenkins@review.openstack.org>2017-03-30 05:29:22 +0000
committerGerrit Code Review <review@openstack.org>2017-03-30 05:29:22 +0000
commit313ece74cd7dd7a715f345038dbe78ec107a9afd (patch)
tree51676d6121f238f1a0886a7fe4e6c1eacc2e30f4 /releasenotes
parent0ae9d9b346f1c5d7e29b8f281474577eca260670 (diff)
parent91053af09dace8dba65c9e5b72eb7de15fd69522 (diff)
Merge "Allow to configure policy.json for OpenStack projects"
Diffstat (limited to 'releasenotes')
-rw-r--r--releasenotes/notes/api-policy-4ca739519537f6f4.yaml13
1 files changed, 13 insertions, 0 deletions
diff --git a/releasenotes/notes/api-policy-4ca739519537f6f4.yaml b/releasenotes/notes/api-policy-4ca739519537f6f4.yaml
new file mode 100644
index 00000000..54beb305
--- /dev/null
+++ b/releasenotes/notes/api-policy-4ca739519537f6f4.yaml
@@ -0,0 +1,13 @@
+---
+features:
+ - |
+ TripleO is now able to configure role-based access API policies with new
+ parameters for each API service.
+ For example, Nova API service has now NovaApiPolicies and the value
+ could be { nova-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
+ It will configure /etc/nova/policy.json file and configure context_is_admin
+ to true. Puppet will take care of this configuration and API services are
+ restarted when the file is touched.
+ We're also adding augeas resource to the list of Puppet providers that
+ container deployments grab in the catalog to generate configurations, so
+ this feature can be used when deploying TripleO in containers.