openstack/kolla-ansible
Code Issues Proposed changes
600e912400
kolla-ansible/ansible
History
Bartosz Bezak 600e912400 Add service role to ironic service users 
Add the service role to ironic service users. Ironic recently enforced
new policy validation as part of the RBAC efforts. [1][2]
Service user support was also added to Ironic. [3]
Admin role needs to stay as not all services added service role support. [4][5]

[1] https://review.opendev.org/c/openstack/ironic/+/902009
[2] e2a47de10a/goals/selected/consistent-and-secure-rbac.rst (phase-2)
[3] https://review.opendev.org/c/openstack/ironic/+/907148
[4] https://review.opendev.org/q/topic:bp%252Fpolicy-service-role-default
[5] https://review.opendev.org/q/topic:%22New-Location-Apis%22

Related-Bug: #2051837
Change-Id: I048402c2247188cf57f35437f557f84ac25d4ff2
2024-02-15 14:05:52 +00:00
..
action_plugins Fix maximum width of the DIB Multiline-YAML 2023-04-14 16:36:22 +03:00
filter_plugins haproxy: support single external frontend 2023-06-29 01:44:00 +02:00
group_vars Merge "Update keystone service user passwords" 2024-02-07 10:07:30 +00:00
inventory Enable HAProxy Prometheus metrics endpoint 2024-01-05 10:36:31 +00:00
library Rename kolla_docker to kolla_container 2023-11-15 13:54:57 +01:00
module_utils Fix long service restarts while using systemd 2024-01-05 10:06:56 +01:00
roles Add service role to ironic service users 2024-02-15 14:05:52 +00:00
bifrost.yml Update "openstack_release" variable to static brach name 2019-09-16 12:42:44 +00:00
certificates.yml certificates: generate libvirt TLS certificates 2022-02-03 14:32:38 +00:00
destroy.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
gather-facts.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
kolla-host.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
mariadb_backup.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
mariadb_recovery.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
mariadb.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
nova-libvirt-cleanup.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
nova.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
octavia-certificates.yml octavia: generate certificates automatically 2020-10-08 16:50:30 +02:00
post-deploy.yml post-deploy: add public-openrc.sh 2022-10-20 17:29:12 +02:00
prune-images.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
rabbitmq-reset-state.yml Add command to force reset the state of RabbitMQ 2023-08-25 10:09:58 +00:00
rabbitmq.yml Support Ansible max_fail_percentage 2023-12-05 11:49:42 +01:00
site.yml Enable HAProxy Prometheus metrics endpoint 2024-01-05 10:36:31 +00:00