diff --git a/deployment/placement/placement-api-container-puppet.yaml b/deployment/placement/placement-api-container-puppet.yaml index 03e4d5c14c..7f7f1f7ca1 100644 --- a/deployment/placement/placement-api-container-puppet.yaml +++ b/deployment/placement/placement-api-container-puppet.yaml @@ -100,6 +100,12 @@ parameters: default: false description: Set to True to enable debugging Placement services. type: boolean + PlacementPolicies: + description: | + A hash of policies to configure for Placement API. + e.g. { nova-context_is_admin: { key: context_is_admin, value: 'role:admin' } } + default: {} + type: json conditions: placement_workers_zero: {equals : [{get_param: PlacementWorkers}, 0]} @@ -173,6 +179,7 @@ outputs: - {get_param: Debug} placement::policy::enforce_new_defaults: {get_param: EnforceSecureRbac} placement::policy::enforce_scope: {get_param: EnforceSecureRbac} + placement::policy::policies: {get_param: PlacementPolicies} placement::wsgi::apache::api_port: '8778' placement::wsgi::apache::ssl: {get_param: EnableInternalTLS} # NOTE: bind IP is found in hiera replacing the network name with the local node IP diff --git a/releasenotes/notes/placement-policies-db2704ea63d0bdad.yaml b/releasenotes/notes/placement-policies-db2704ea63d0bdad.yaml new file mode 100644 index 0000000000..51f030597d --- /dev/null +++ b/releasenotes/notes/placement-policies-db2704ea63d0bdad.yaml @@ -0,0 +1,4 @@ +--- +features: + - | + The new ``PlacementPolicies`` parameter has been added.