openstack/kolla-ansible
Code Issues Proposed changes

Revert "Disable new defaults and scope for Ironic (RBAC)"

Browse Source 
This reverts commit d77372e86ab078711d48dbe2917714f338842ca5.

Reason for revert: service role support has been fixed in Ironic [1]
and added to Kolla-Ansible.

[1] https://review.opendev.org/c/openstack/ironic/+/907148

Closes-Bug: #2051837

Change-Id: I49664e3a353f54e0d51f454c552a78846ba64101
This commit is contained in:
Bartosz Bezak 2024-02-02 08:22:20 +00:00
parent 6e835ae758
commit c51fbfdd8b
1 changed files with 1 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ansible/roles/ironic/templates/ironic.conf.j2
View File

@ -50,14 +50,8 @@ amqp_durable_queues = true
rabbit_quorum_queue = true rabbit_quorum_queue = true
{% endif %} {% endif %}
[oslo_policy]
{% if openstack_release == 'master' %}
# TODO(bbezak): Remove enforce_* once secure RBAC is supported
# https://bugs.launchpad.net/kolla-ansible/+bug/2051837
enforce_scope=False
enforce_new_defaults=False
{% endif %}
{% if ironic_policy_file is defined %} {% if ironic_policy_file is defined %}
[oslo_policy]
policy_file = {{ ironic_policy_file }} policy_file = {{ ironic_policy_file }}
{% endif %} {% endif %}