Files
puppet-cloudkitty/releasenotes/notes/system_scope-all-e10d75a9bb941df6.yaml
Takashi Kajinami 0b08499e20 Globally support system scope credentials
After spending huge effort to understand the exact requirements to
enforce SRBAC, we learned it's very difficult to find the required
scope in each credential. This requires understanding implementation of
client-side as well as server-side, and requirement might be different
according to the deployment architecture or features used.

Instead of implementing support based on the actual implementation,
this introduces support for system scope credentials to all places
where keystone user credential is defined, and make all credential
configurations consistent.

Change-Id: I50c029b07a30c201b4d9bd4821265d4bf465ba9f
2022-03-04 02:11:11 +09:00

6 lines
105 B
YAML

---
features:
- |
The `cloudkitty::fetcher::keystone::system_scope`` parameter has been
added.