Enable GLANCE_ENFORCE_SCOPE to True by default
Glance antelope release has enabled the RBAC new defaults by default - https://review.opendev.org/c/openstack/glance/+/872522 With the latest release of Glance have new defaults enable, we should test the same by default in devstack. This change make GLANCE_ENFORCE_SCOPE flag to True by default so that every job will run with Glance new defaults. As old defaults are still supported (in deprecated way), we will keep GLANCE_ENFORCE_SCOPE flag so that we can have a single job can disable the new defaults and continue testing the old defaults. Depends-On: https://review.opendev.org/c/openstack/tempest/+/883701 Change-Id: Idde6f3cb766597575ca822f21b4bb3a465e5e753
This commit is contained in:
parent
bfa43975bc
commit
cb1ec1834d
@ -95,10 +95,10 @@ GLANCE_USE_IMPORT_WORKFLOW=$(trueorfalse False GLANCE_USE_IMPORT_WORKFLOW)
|
|||||||
GLANCE_ENABLE_QUOTAS=$(trueorfalse True GLANCE_ENABLE_QUOTAS)
|
GLANCE_ENABLE_QUOTAS=$(trueorfalse True GLANCE_ENABLE_QUOTAS)
|
||||||
|
|
||||||
# Flag to set the oslo_policy.enforce_scope. This is used to switch
|
# Flag to set the oslo_policy.enforce_scope. This is used to switch
|
||||||
# the Image API policies to start checking the scope of token. By Default,
|
# This is used to disable the Image API policies scope and new defaults.
|
||||||
# this flag is False.
|
# By Default, it is True.
|
||||||
# For more detail: https://docs.openstack.org/oslo.policy/latest/configuration/index.html#oslo_policy.enforce_scope
|
# For more detail: https://docs.openstack.org/oslo.policy/latest/configuration/index.html#oslo_policy.enforce_scope
|
||||||
GLANCE_ENFORCE_SCOPE=$(trueorfalse False GLANCE_ENFORCE_SCOPE)
|
GLANCE_ENFORCE_SCOPE=$(trueorfalse True GLANCE_ENFORCE_SCOPE)
|
||||||
|
|
||||||
GLANCE_CONF_DIR=${GLANCE_CONF_DIR:-/etc/glance}
|
GLANCE_CONF_DIR=${GLANCE_CONF_DIR:-/etc/glance}
|
||||||
GLANCE_METADEF_DIR=$GLANCE_CONF_DIR/metadefs
|
GLANCE_METADEF_DIR=$GLANCE_CONF_DIR/metadefs
|
||||||
|
Loading…
Reference in New Issue
Block a user