Container Infrastructure Management Service for OpenStack
Go to file
ricolin 5971243169 Support enables rbac policies new defaults
The Magnum service allow enables policies (RBAC) new defaults and scope by
default. The Default value of config options ``[oslo_policy] enforce_scope``
and ``[oslo_policy] oslo_policy.enforce_new_defaults`` are both to
``False``, but will change to ``True`` in following cycles.

To enable them then modify the below config options value in
``magnum.conf`` file::

  [oslo_policy]
  enforce_new_defaults=True
  enforce_scope=True

reference tc goal for more detail:
https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html

Related blueprint secure-rbac

Change-Id: I249942a355577c4f1ef51b3988f0cc4979959d0b
2023-08-30 00:35:24 +08:00
api-ref/source Drop bay and baymodel from magnum 2023-05-09 13:59:57 +00:00
contrib Drop bay and baymodel from magnum 2023-05-09 13:59:57 +00:00
devstack Support enables rbac policies new defaults 2023-08-30 00:35:24 +08:00
doc Drop bay and baymodel from magnum 2023-05-09 13:59:57 +00:00
dockerfiles Update cluster autoscaler build to v1.23 2022-02-25 12:03:33 +01:00
etc/magnum Deploy healthcheck middleware as app instead of filter 2021-08-19 10:21:15 +09:00
magnum Support enables rbac policies new defaults 2023-08-30 00:35:24 +08:00
playbooks Update cluster autoscaler build to v1.23 2022-02-25 12:03:33 +01:00
releasenotes Support enables rbac policies new defaults 2023-08-30 00:35:24 +08:00
specs Document use of kube_tag label 2018-02-13 13:40:34 +00:00
tools Adapt Cinder CSI to upstream manifest 2022-09-26 13:28:37 +00:00
.coveragerc Cleanup coverage configuration 2016-08-28 21:11:07 +01:00
.gitignore Add fedora coreos cluster template to contributor docs 2020-07-30 12:20:39 +12:00
.gitreview OpenDev Migration Patch 2019-04-19 19:44:16 +00:00
.mailmap Initial commit from github (squashed) 2014-11-18 09:23:37 -05:00
.stestr.conf Switch to stestr 2018-07-13 13:05:52 +07:00
.zuul.yaml Switch to 2023.1 Python3 unit tests and generic template name 2022-09-26 13:27:19 +00:00
CONTRIBUTING.rst Ussuri contributor docs community goal 2020-04-21 00:42:46 +00:00
HACKING.rst Add a hacking rule for string interpolation at logging 2017-07-15 14:49:45 +08:00
LICENSE Initial commit from github (squashed) 2014-11-18 09:23:37 -05:00
README.rst Add wiki Admin guide and Contributing notes link to README 2019-10-04 17:28:36 +08:00
bindep.txt Make code compatible with SQLAlchemy 1.4.18 2021-06-28 12:26:19 +00:00
functional_creds.conf.sample Use keystone v3 for functional tests 2016-12-05 15:21:09 +01:00
requirements.txt Support enables rbac policies new defaults 2023-08-30 00:35:24 +08:00
setup.cfg Drop mesos driver 2022-11-11 23:01:43 +11:00
setup.py Cleanup py27 support 2020-04-05 09:45:17 +02:00
test-requirements.txt Add back pep8 test 2022-07-19 12:35:14 +00:00
tox.ini Support tox4 2022-12-28 10:42:54 +00:00

README.rst

Team and repository tags

image

Magnum

Magnum is an OpenStack project which offers container orchestration engines for deploying and managing containers as first class resources in OpenStack.

For more information, please refer to the following resources: