d4a6023de5
We've make all the default policies keystone supports better by incorporating default roles and scope types. These changes have made the ``policy.v3cloudsample.json`` file obsolete. Let's simply things for users, operators, and develpers by removing it. A follow-on patch will remove the test_v3_protection.py file since those behaviors are passing all the protection tests with the default policies in code. Related-Bug: 1805880 Closes-Bug: 1630434 Closes-Bug: 1806762 Change-Id: Ie45955f5cc54563cc9704d7cb2b656b5544ae030
22 lines
1.2 KiB
YAML
22 lines
1.2 KiB
YAML
---
|
|
upgrade:
|
|
- |
|
|
[`bug 1806762 <https://bugs.launchpad.net/keystone/+bug/1806762>`_]
|
|
[`bug 1630434 <https://bugs.launchpad.net/keystone/+bug/1630434>`_]
|
|
The entire ``policy.v3cloudsample.json`` file has been removed. If you
|
|
were using this policy file to supply overrides in your deployment, you
|
|
should consider using the defaults in code and setting ``keystone.conf
|
|
[oslo_policy] enforce_scope=True``. The new policy defaults are more
|
|
flexible, they're tested extensively, and they solve all the problems the
|
|
``policy.v3cloudsample.json`` file was trying to solve.
|
|
fixes:
|
|
- |
|
|
[`bug 1806762 <https://bugs.launchpad.net/keystone/+bug/1806762>`_]
|
|
[`bug 1630434 <https://bugs.launchpad.net/keystone/+bug/1630434>`_]
|
|
The entire ``policy.v3cloudsample.json`` file has been removed. If you
|
|
were using this policy file to supply overrides in your deployment, you
|
|
should consider using the defaults in code and setting ``keystone.conf
|
|
[oslo_policy] enforce_scope=True``. The new policy defaults are more
|
|
flexible, they're tested extensively, and they solve all the problems the
|
|
``policy.v3cloudsample.json`` file was trying to solve.
|