puppet-nova/releasenotes/notes/system_scope-novajoin-keystone-5be4c7f5240e74d9.yaml
Takashi Kajinami e082614f11 novajoin: Accept system scope credentials for Keystone API request
This change is the first step to support secure RBAC and allows usage
of system scope credentials for Keystone API request.

This change covers the following two items.
 - assignment of system scope roles to system user
 - credential parameters for authtoken middleware

Depends-on: https://review.opendev.org/804325
Change-Id: Id1e235f792e1690454874718d6e83e7ff4ff313b
2022-01-25 21:16:19 +09:00

14 lines
411 B
YAML

---
features:
- |
The ``system_scope`` parameter has been added to
the ``nova::metadata::novajoin::authtoken`` class.
- |
The ``nova::metadata::novajoin::auth`` class now supports customizing roles
assigned to the novajoin service user.
- |
The ``nova::metadata::novajoinkeystone::auth`` class now supports defining
assignmet of system-scoped roles to the novajoin service user.