puppet-magnum/releasenotes/notes/system_scope-keystone-37d2fccb7ab5e983.yaml
Takashi Kajinami a61b3585f1 Accept system scope credentials for Keystone API request
This change is the first step to support secure RBAC and allows usage
of system scope credentials for Keystone API request.

This change covers the following two items.
 - assignment of system scope roles to system user
 - credential parameters for authtoken middleware

Depends-on: https://review.opendev.org/804325
Change-Id: Ibdbc7668658cc5eac032b7bbf94da596d3c522f2
2022-01-24 14:14:46 +09:00

14 lines
375 B
YAML

---
features:
- |
The ``system_scope`` parameter has been added to
the ``magnum::keystone::authtoken`` class.
- |
The ``magnum::keystone::auth`` class now supports customizing roles assigned
to the magnum service user.
- |
The ``magnum::keystone::auth`` class now supports defining assignmet of
system-scoped roles to the magnum service user.