Files
puppet-gnocchi/releasenotes/notes/system_scope-keystone-dfb7566a1f8b1eab.yaml
Takashi Kajinami f3c8731fcd Accept system scope credentials for Keystone API request
This change is the first step to support secure RBAC and allows usage
of system scope credentials for Keystone API request.

This change covers the following two items.
 - assignment of system scope roles to system user
 - credential parameters for authtoken middleware

Depends-on: https://review.opendev.org/804325
Change-Id: Ifbe407233c0739038f23c645f2bd544a409bb1cd
2021-11-25 21:14:45 +09:00

14 lines
380 B
YAML

---
features:
- |
The ``system_scope`` parameter has been added to
the ``gnocchi::keystone::authtoken`` class.
- |
The ``gnocchi::keystone::auth`` class now supports customizing roles
assigned to the gnocchi service user.
- |
The ``gnocchi::keystone::auth`` class now supports defining assignmet of
system-scoped roles to the gnocchi service user.