9d641cef18
oslo.policy has enabled the new RBAC config options enforce_scope and enforce_new_defaults by default[1][2]. Barbican new RBAC was disable by default. To give more time to operator, let's continue the same setting in this release also. Also, there are many test modification is needed for the new RBAC (using the new RBAC default role in tests) - https://ce83b06baa590a9f8123-eae5def07f653ed6fc0c0045180a6a87.ssl.cf2.rackcdn.com/925464/3/check/cross-barbican-py311/86af837/testr_results.html As oslo.policy enable them by default, we override the setting for the Barbican. NOTE: there is no change in behaviour, Barbican continue with the old RBAC as default. ref: https://review.opendev.org/c/openstack/requirements/+/925464 [1] https://review.opendev.org/c/openstack/oslo.policy/+/924283 [2] https://review.opendev.org/c/openstack/releases/+/925032 Change-Id: I8514969e12851d03f3dbee93b040d6c8763ebc5c |
||
---|---|---|
.. | ||
policies | ||
__init__.py | ||
accept.py | ||
config.py | ||
exception.py | ||
hrefs.py | ||
policy.py | ||
quota.py | ||
resources.py | ||
utils.py | ||
validators.py |