aboutsummaryrefslogtreecommitdiffstats
path: root/releasenotes
diff options
context:
space:
mode:
authorEmilien Macchi <emilien@redhat.com>2017-03-14 21:09:11 -0400
committerEmilien Macchi <emilien@redhat.com>2017-03-28 22:21:28 +0000
commit91053af09dace8dba65c9e5b72eb7de15fd69522 (patch)
treea6f588badd22243d0079b7db01bd0f629ea89881 /releasenotes
parent06ec138699b0658b8d005ed900d24c9d72ac8ec7 (diff)
Allow to configure policy.json for OpenStack projects
For both containers and classic deployments, allow to configure policy.json for all OpenStack APIs with new parameters (hash, empty by default). Example of new parameter: NovaApiPolicies. See environments/nova-api-policy.yaml for how the feature can be used. Note: use it with extreme caution. Partial-implement: blueprint modify-policy-json Change-Id: I1144f339da3836c3e8c8ae4e5567afc4d1a83e95
Diffstat (limited to 'releasenotes')
-rw-r--r--releasenotes/notes/api-policy-4ca739519537f6f4.yaml13
1 files changed, 13 insertions, 0 deletions
diff --git a/releasenotes/notes/api-policy-4ca739519537f6f4.yaml b/releasenotes/notes/api-policy-4ca739519537f6f4.yaml
new file mode 100644
index 00000000..54beb305
--- /dev/null
+++ b/releasenotes/notes/api-policy-4ca739519537f6f4.yaml
@@ -0,0 +1,13 @@
+---
+features:
+ - |
+ TripleO is now able to configure role-based access API policies with new
+ parameters for each API service.
+ For example, Nova API service has now NovaApiPolicies and the value
+ could be { nova-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
+ It will configure /etc/nova/policy.json file and configure context_is_admin
+ to true. Puppet will take care of this configuration and API services are
+ restarted when the file is touched.
+ We're also adding augeas resource to the list of Puppet providers that
+ container deployments grab in the catalog to generate configurations, so
+ this feature can be used when deploying TripleO in containers.