2757d7d333
This change is the first step to support secure RBAC and allows usage of system scope credentials for Keystone API request. This change covers the following two items. - assignment of system scope roles to system user - credential parameters for authtoken middleware Depends-on: https://review.opendev.org/804325 Change-Id: I95a20233f16d652131f398b50ba0da3146e8129e
20 lines
599 B
YAML
20 lines
599 B
YAML
---
|
|
features:
|
|
- |
|
|
The ``system_scope`` parameter has been added to the following classes.
|
|
|
|
- ``ironic::api::authtoken``
|
|
- ``ironic::inspector::authtoken``
|
|
|
|
- |
|
|
The ``ironic::keystone::auth_inspector`` class now supports customizing
|
|
roles assigned to the ironic-inspector service user.
|
|
|
|
- |
|
|
The ``ironic::keystone::auth`` class now supports defining assignmet of
|
|
system-scoped roles to the ironic service user.
|
|
|
|
- |
|
|
The ``ironic::keystone::auth_inspector`` class now supports defining
|
|
assignmet of system-scoped roles to the ironic-inspector service user.
|