openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update kolla-ansible from branch 'master'
  to a6fa56449943411e986b44d524a521b24a6b442c
  - Merge "Ironic: enable elevated access for project scoped service role"
  - Ironic: enable elevated access for project scoped service role
    
    Ironic recently started to enforce new policies and scope [1].
    And Ironic is one of the sole openstack project which need
    system scope for some admin related api calls [2].
    However Ironic also started to allow project-scope behaviour
    for service role with setting
    ``rbac_service_role_elevated_access``[3] [4]. This change enables
    this setting to get similar behaviour of service role as other
    openstack projects.
    
    [1] https://review.opendev.org/c/openstack/ironic/+/902009
    [2] e2a47de10a/goals/selected/consistent-and-secure-rbac.rst?display=source#L261
    [3] https://review.opendev.org/c/openstack/ironic/+/907148
    [4] 8ec5606622/releasenotes/notes/service-project-service-role-fix-e4d1a8c23856926a.yaml
    
    Related-Bug: #2051837
    
    Change-Id: If8d7cf1663145d0398a2e936486e2b316d4df5e0
This commit is contained in:
Zuul 2024-02-19 12:40:01 +00:00 committed by Gerrit Code Review
parent 43fba8269e
commit 085420fd12
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
kolla-ansible

@ -1 +1 @@
Subproject commit a3f3dc7ab5e1bed82bee9a0a8563e0e812e90b6c
Subproject commit a6fa56449943411e986b44d524a521b24a6b442c