c3f397149a
Adds a configuration option and capability to automatically record the lessee for a deployment based upon the original auth_token information provided in the request context. Additional token information is now shared through the context which is extended in the same fashion as most other projects saving request token information to their RequestContext, instead of triggering excess API calls in the background to Keystone to try and figure out requestor's information. Change-Id: I42a2ceb9d2e7dfdc575eb37ed773a1bc682cec23
12 lines
605 B
YAML
12 lines
605 B
YAML
---
|
|
features:
|
|
- |
|
|
Adds a new feature to permit Ironic to automatically provide an instance
|
|
requestor's project, ``lessee`` rights to the Bare Metal machine under
|
|
the Role Based Access Control model implemented in Ironic. It does this
|
|
by saving the project ID of the requestor to the Node ``lessee`` field
|
|
automatically, and removing the rights when undeploying the machine.
|
|
This feature, is normally disabled, but can be enabled using the
|
|
``[conductor]automatic_lessee`` configuration option. This option will not
|
|
work in a mixed-version upgrade with older API services.
|