fcf5863662
This patch changes the volume update policy to be 'rule:system_admin_or_owner' to allow instance owners to update attachment details like delete_on_termination. It creates a new volume swap policy element with the old admin-only behavior, and makes the volume update code check the appropriate policy based on what action is being performed. Co-Authored-By: Dan Smith <dansmith@redhat.com> Partial implement blueprint destroy-instance-with-datavolume Change-Id: I2cbe37b65ceac2efb3b252460dc01d17474e6343
9 lines
377 B
YAML
9 lines
377 B
YAML
---
|
|
features:
|
|
- |
|
|
With microversion 2.85, existing policy ``os-volumes-attachments:update``
|
|
is used for updating the resources with the change in its default value
|
|
from ``SYSTEM_ADMIN`` to ``PROJECT_MEMBER_OR_SYSTEM_ADMIN``.
|
|
New policy ``os-volumes-attachments:swap`` is introduced for swapping
|
|
the attachment of servers with default to ``SYSTEM_ADMIN``.
|