openstack
/
kolla-ansible
Code Issues Proposed changes

Merge "Disable new defaults and scope for Ironic (RBAC)"

This commit is contained in:
Zuul 2024-02-01 08:05:49 +00:00 committed by Gerrit Code Review
parent f0b7bf33ab d77372e86a
commit c9737d2446
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ansible/roles/ironic/templates/ironic.conf.j2
View File

@ -48,8 +48,14 @@ amqp_durable_queues = true
rabbit_quorum_queue = true
{% endif %}
{% if ironic_policy_file is defined %}
[oslo_policy]
{% if openstack_release == 'master' %}
# TODO(bbezak): Remove enforce_* once secure RBAC is supported
# https://bugs.launchpad.net/kolla-ansible/+bug/2051837
enforce_scope=False
enforce_new_defaults=False
{% endif %}
{% if ironic_policy_file is defined %}
policy_file = {{ ironic_policy_file }}
{% endif %}