kolla-ansible/ansible/roles/ironic
Bartosz Bezak 600e912400 Add service role to ironic service users
Add the service role to ironic service users. Ironic recently enforced
new policy validation as part of the RBAC efforts. [1][2]
Service user support was also added to Ironic. [3]
Admin role needs to stay as not all services added service role support. [4][5]

[1] https://review.opendev.org/c/openstack/ironic/+/902009
[2] e2a47de10a/goals/selected/consistent-and-secure-rbac.rst (phase-2)
[3] https://review.opendev.org/c/openstack/ironic/+/907148
[4] https://review.opendev.org/q/topic:bp%252Fpolicy-service-role-default
[5] https://review.opendev.org/q/topic:%22New-Location-Apis%22

Related-Bug: #2051837
Change-Id: I048402c2247188cf57f35437f557f84ac25d4ff2
2024-02-15 14:05:52 +00:00
..
defaults Add service role to ironic service users 2024-02-15 14:05:52 +00:00
handlers Rename kolla_docker to kolla_container 2023-11-15 13:54:57 +01:00
tasks Add service role to ironic service users 2024-02-15 14:05:52 +00:00
templates Ironic: enable elevated access for project scoped service role 2024-02-15 15:04:06 +01:00
vars Move project_name and kolla_role_name to role vars 2021-12-31 09:26:25 +00:00