openstack
/
nova
Code Issues Proposed changes

Merge "Update newton release notes for default API policy" into stable/newton

This commit is contained in:
Jenkins 2016-09-28 13:18:46 +00:00 committed by Gerrit Code Review
parent d83c2772da 625f203610
commit cbdc91cfd1
2 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
releasenotes/notes/empty-sample-policy-abfb7d467d2ebd4c.yaml Normal file
View File

@ -0,0 +1,9 @@
---
other:
- |
The API policy defaults are now defined in code like configuration options.
Because of this, the sample policy.json file that is shipped with Nova is
empty and should only be necessary if you want to override the API policy
from the defaults in the code. To generate the policy file you can run::
oslopolicy-sample-generator --config-file=etc/nova/nova-policy-generator.conf

6
releasenotes/notes/policy-sample-defaults-changed-b5eea1daeb305251.yaml
View File

@ -1,7 +1,7 @@
---
other:
- The sample policy file shipped with Nova contained many policies set to
- The default API policy shipped with Nova contained many policies set to
""(allow all) which was not the proper default for many of those checks. It
was also a source of confusion as some people thought "" meant to use the
default rule. These empty policies have been updated to be explicit in all
@ -12,5 +12,5 @@ other:
restrictiveness of the API calls overall because there are similar checks
in the database already.
This does not affect any existing deployment, just the sample file included
for use by new deployments.
This does not affect any existing deployment, just the default policy used
by new deployments.