horizon/releasenotes/notes/policy-in-code-support-f79d559c25976215.yaml
Akihiro Motoki b7bb76eb20 Support policy-in-code and deprecated policy
This commit allows horizon to handle deprecated policy rules.
The approach is explained in the document updated by this change.

oslo.policy requirement is updated. oslo.policy 3.2.0 is chosen
just because it is the first release in Victoria cycle.
requirements.txt and lower-constraints.txt are updated accordingly
including oslo.policy dependencies.

Change-Id: If5059d03f6bd7e94796065aa1b51c0c23ac85f5e
2021-01-27 14:02:27 +00:00

23 lines
1.1 KiB
YAML

---
features:
- |
Horizon supports the registered default policies and operators now
only need to define policies which they would like to override in policy
files in ``POLICY_FILES`` setting. (Previously the policy files need to
contain all defined policies including default policies.)
The registered default policies are defined in files under
``DEFAULT_POLICY_FILES`` and they are synced with registered defaults
of back-end services before the horizon release.
issues:
- |
Policies with the system scoped token (``system_scope:all``) are not
supported in horizon yet. The horizon team recognizes it as an important
feature gap and would like to support it in near future.
upgrade:
- |
The format of the policy files under ``POLICY_FILES`` is changed to YAML
and all contents of these files are commented out now. You only need to
define policies which you would like to modify from the default.
You can still use policy files with JSON format. If you continue to use
JSON format, configure ``POLICY_FILES`` setting to point JSON files.