91053af09d
For both containers and classic deployments, allow to configure policy.json for all OpenStack APIs with new parameters (hash, empty by default). Example of new parameter: NovaApiPolicies. See environments/nova-api-policy.yaml for how the feature can be used. Note: use it with extreme caution. Partial-implement: blueprint modify-policy-json Change-Id: I1144f339da3836c3e8c8ae4e5567afc4d1a83e95
14 lines
710 B
YAML
14 lines
710 B
YAML
---
|
|
features:
|
|
- |
|
|
TripleO is now able to configure role-based access API policies with new
|
|
parameters for each API service.
|
|
For example, Nova API service has now NovaApiPolicies and the value
|
|
could be { nova-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
|
|
It will configure /etc/nova/policy.json file and configure context_is_admin
|
|
to true. Puppet will take care of this configuration and API services are
|
|
restarted when the file is touched.
|
|
We're also adding augeas resource to the list of Puppet providers that
|
|
container deployments grab in the catalog to generate configurations, so
|
|
this feature can be used when deploying TripleO in containers.
|