keystone/releasenotes/notes/bug-1804517-a351aec088fee066.yaml
Lance Bragstad c0e6d4498a Remove idp policies from policy.v3cloudsample.json
By incorporating system-scope and default roles, we've effectively
made these policies obsolete. We can simplify what we maintain and
provide a more consistent, unified view of default idp behavior
by removing them.

Change-Id: I6091d1cdbc4e1fa3a3d5f83a707f003416a43ea0
Closes-Bug: 1804517
2019-02-25 22:03:35 +00:00

17 lines
666 B
YAML

---
upgrade:
- |
[`bug 1804517 <https://bugs.launchpad.net/keystone/+bug/1804517>`_]
The federated identity provider policies defined in
``policy.v3cloudsample.json`` have been removed. These policies
are now obsolete after incorporating system-scope into the
identity provider API and implementing default roles.
fixes:
- |
[`bug 1804517 <https://bugs.launchpad.net/keystone/+bug/1804517>`_]
The federated identity provider policies in
``policy.v3cloudsample.json`` policy file have been removed in
favor of better defaults in code. These policies weren't tested
exhaustively and were misleading to users and operators.