openstack
/
magnum
Code Issues Proposed changes
magnum/devstack
History
ricolin 23efb30d39 Support enables rbac policies new defaults 
The Magnum service allow enables policies (RBAC) new defaults and scope by
default. The Default value of config options ``[oslo_policy] enforce_scope``
and ``[oslo_policy] oslo_policy.enforce_new_defaults`` are both to
``False``, but will change to ``True`` in following cycles.

To enable them then modify the below config options value in
``magnum.conf`` file::

  [oslo_policy]
  enforce_new_defaults=True
  enforce_scope=True

reference tc goal for more detail:
https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html

Related blueprint secure-rbac

Change-Id: I249942a355577c4f1ef51b3988f0cc4979959d0b
 		2023-06-01 02:15:15 +08:00
..
files/debs CI: Install debianutils and vim 2020-11-27 12:45:59 +00:00
lib Support enables rbac policies new defaults 2023-06-01 02:15:15 +08:00
README.rst fix the devstack_neutron's url 2017-05-19 16:43:52 +08:00
plugin.sh fcos-k8s: Update to v1.22 2022-02-03 13:59:32 +00:00
settings Support enables rbac policies new defaults 2023-06-01 02:15:15 +08:00

README.rst

DevStack Integration

This directory contains the files necessary to integrate magnum with devstack.

Refer the quickstart guide at http://docs.openstack.org/developer/magnum/dev/quickstart.html for more information on using devstack and magnum.

Running devstack with magnum for the first time may take a long time as it needs to download the Fedora Atomic qcow2 image (see http://www.projectatomic.io/download/).

To install magnum into devstack, add the following settings to enable the magnum plugin:

cat > /opt/stack/devstack/local.conf << END
[[local|localrc]]
enable_plugin heat https://github.com/openstack/heat master
enable_plugin magnum https://github.com/openstack/magnum master
END

Additionally, you might need additional Neutron configurations for your environment. Please refer to the devstack documentation1 for details.

Then run devstack normally:

cd /opt/stack/devstack
./stack.sh

  1. https://docs.openstack.org/developer/devstack/guides/neutron.html↩︎