summaryrefslogtreecommitdiffstats
path: root/releasenotes/notes/api-policy-4ca739519537f6f4.yaml
blob: 54beb3053dfa933c218102d7b834dea96d18cbb2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
---
features:
  - |
    TripleO is now able to configure role-based access API policies with new
    parameters for each API service.
    For example, Nova API service has now NovaApiPolicies and the value
    could be { nova-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
    It will configure /etc/nova/policy.json file and configure context_is_admin
    to true. Puppet will take care of this configuration and API services are
    restarted when the file is touched.
    We're also adding augeas resource to the list of Puppet providers that
    container deployments grab in the catalog to generate configurations, so
    this feature can be used when deploying TripleO in containers.