d3a63122cb
This change is the first step to support secure RBAC and allows usage of system scope credentials for Keystone API request. This change covers the following two items. - assignment of system scope roles to system user - credential parameters for authtoken middleware Depends-on: https://review.opendev.org/804325 Change-Id: I1429b2cc6f3c01c07ec26b1a7242e451072be368
22 lines
620 B
YAML
22 lines
620 B
YAML
---
|
|
features:
|
|
- |
|
|
The ``system_scope`` parameter has been added to
|
|
the ``heat::keystone::authtoken`` class.
|
|
|
|
- |
|
|
The ``heat::keystone::auth`` class now supports customizing roles assigned
|
|
to the heat service user.
|
|
|
|
- |
|
|
The ``heat::keystone::auth_cfn`` class now supports customizing roles
|
|
assigned to the heat service user.
|
|
|
|
- |
|
|
The ``heat::keystone::auth`` class now supports defining assignmet of
|
|
system-scoped roles to the heat service user.
|
|
|
|
- |
|
|
The ``heat::keystone::auth_cfn`` class now supports defining assignmet of
|
|
system-scoped roles to the heat service user.
|