glance/releasenotes/notes/os-glance-injection-disallowed-5dad244dfb071938.yaml
Dan Smith 2e06864b2c Make inject_image_metadata use action wrapper
This makes the inject_image_metadata task use the ImportActionWrapper.
Because of the inbuilt rejection of internal os_glance_* property
manipulation, this also brings an operator-visible change to the
injection behavior. Specifically, os_glance_* keys can no longer be
injected via config (nor should they ever have been).

Change-Id: Ib1138ee2cd0383f14c710716f3c103a146b0c4dd
2021-02-10 07:36:24 -08:00

11 lines
432 B
YAML

---
upgrade:
- |
The ``inject_image_metadata`` task will no longer allow setting
properties in the reserved ``os_glance_*`` namespace, in line with
the blanket prohibition on such via the API. It has always been
dangerous to do this, so no operator should have any such
configuration in production. If any keys in this namespace are
set, they will be dropped (and logged) during the injection
process.