tripleo-heat-templates/releasenotes/notes/enable-secure-rbac-for-neutron-842bd41339a48f26.yaml
Slawek Kaplonski 8e28fde39c Allow neutron to configure secure RBAC options
This updates the neutron api container to set the appropriate
configuration options when EnforceSecureRbac is True. This will be
needed when more OpenStack services support system-scope and deployers
want to enable those personas.

Change-Id: I6dc238c2b59c5c1d89d54a2dd1fbf7cef0d16313
2022-01-25 09:19:41 +01:00

9 lines
316 B
YAML

---
features:
- |
Neutron can now be configured to support secure RBAC using
`EnforceSecureRbac`. Note, you may not be able to use this until Neutron
upstream has support for common RBAC `personas
<https://docs.openstack.org/keystone/latest/admin/service-api-protection.html#roles-definitions>`_.