aboutsummaryrefslogtreecommitdiff
path: root/releasenotes/notes/ironic-rbac-elevated-6804dab4061ab236.yaml
blob: 3289b58e178652e07f1542ccdddc75d57b694dec (plain)
1
2
3
4
5
6
7
8
9
10
---
features:
  - |
    Elevated access for project-scoped service role in Ironic has been
    enabled. Ironic recently started to enforce new policies and scopes,
    and it is one of the few OpenStack projects that require system scope
    for some admin-related API calls. However, Ironic has also begun to
    allow project-scoped behavior for service roles by setting
    ``rbac_service_role_elevated_access``. This change enables this setting
    to achieve similar behavior for service role as other OpenStack projects.