aboutsummaryrefslogtreecommitdiffstats
path: root/releasenotes/notes/api-policy-4ca739519537f6f4.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'releasenotes/notes/api-policy-4ca739519537f6f4.yaml')
-rw-r--r--releasenotes/notes/api-policy-4ca739519537f6f4.yaml13
1 files changed, 13 insertions, 0 deletions
diff --git a/releasenotes/notes/api-policy-4ca739519537f6f4.yaml b/releasenotes/notes/api-policy-4ca739519537f6f4.yaml
new file mode 100644
index 00000000..54beb305
--- /dev/null
+++ b/releasenotes/notes/api-policy-4ca739519537f6f4.yaml
@@ -0,0 +1,13 @@
+---
+features:
+ - |
+ TripleO is now able to configure role-based access API policies with new
+ parameters for each API service.
+ For example, Nova API service has now NovaApiPolicies and the value
+ could be { nova-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
+ It will configure /etc/nova/policy.json file and configure context_is_admin
+ to true. Puppet will take care of this configuration and API services are
+ restarted when the file is touched.
+ We're also adding augeas resource to the list of Puppet providers that
+ container deployments grab in the catalog to generate configurations, so
+ this feature can be used when deploying TripleO in containers.