f914cb185c
RBAC community wide goal phase-2[1] is to add 'service' role for the service APIs policy rule. This commit defaults the service APIs to 'service' role. This way service APIs will be allowed for service user only. Tempest tests also modified to simulate the service-to-service communication. Tempest tests send the user with service role to nova API. - https://review.opendev.org/c/openstack/tempest/+/892639> Partial implement blueprint policy-service-role-default [1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#phase-2 Change-Id: I1565ea163fa2c8212f71c9ba375654d2aab28330 Signed-off-by: Ghanshyam Maan <gmaan@ghanshyammann.com>
3.2 KiB
3.2 KiB
- tocdepth
-
2
Compute API
This is a reference for the OpenStack Compute API which is provided by the Nova project. To learn more about the OpenStack Compute API concepts, please refer to the API guide.
Internal Service APIs
Warning
The below Nova APIs are meant to communicate to OpenStack services. Those APIs are not supposed to be used by any users because they can make deployment or resources in unwanted state.
Deprecated APIs
This section contains references for APIs which are deprecated and usually limited to some maximum microversion.
Obsolete APIs
This section contains the reference for APIs that were part of the OpenStack Compute API in the past, but no longer exist.