Browse Source
This change is the first step to support secure RBAC and allows usage of system scope credentials for Keystone API request. This change covers the following two items. - assignment of system scope roles to system user - credential parameters for authtoken middleware Depends-on: https://review.opendev.org/804325 Change-Id: Ifbe407233c0739038f23c645f2bd544a409bb1cdchanges/80/819280/4
5 changed files with 56 additions and 0 deletions
@ -0,0 +1,13 @@
|
||||
--- |
||||
features: |
||||
- | |
||||
The ``system_scope`` parameter has been added to |
||||
the ``gnocchi::keystone::authtoken`` class. |
||||
|
||||
- | |
||||
The ``gnocchi::keystone::auth`` class now supports customizing roles |
||||
assigned to the gnocchi service user. |
||||
|
||||
- | |
||||
The ``gnocchi::keystone::auth`` class now supports defining assignmet of |
||||
system-scoped roles to the gnocchi service user. |
Loading…
Reference in new issue