4f0ad599b8
This updates the neutron api container to set the appropriate
configuration options when EnforceSecureRbac is True. This will be
needed when more OpenStack services support system-scope and deployers
want to enable those personas.
Conflicts:
deployment/neutron/neutron-api-container-puppet.yaml
Change-Id: I6dc238c2b59c5c1d89d54a2dd1fbf7cef0d16313
(cherry picked from commit 8e28fde39c)
9 lines
316 B
YAML
9 lines
316 B
YAML
---
|
|
features:
|
|
- |
|
|
Neutron can now be configured to support secure RBAC using
|
|
`EnforceSecureRbac`. Note, you may not be able to use this until Neutron
|
|
upstream has support for common RBAC `personas
|
|
<https://docs.openstack.org/keystone/latest/admin/service-api-protection.html#roles-definitions>`_.
|
|
|