summaryrefslogtreecommitdiff
path: root/releasenotes
diff options
context:
space:
mode:
authorZuul <zuul@review.opendev.org>2023-01-31 21:54:19 +0000
committerGerrit Code Review <review@openstack.org>2023-01-31 21:54:19 +0000
commitc9c595f235cec04e1fa67f52680f6f698229ddef (patch)
tree4c11aef74a12102ac3d4531d3f2bfacfba910fbd /releasenotes
parentf2ebea05f246a4ded34bb9778b3f51de4980bddd (diff)
parentbad3790e8a877a418666c5d4608f0a1a39acd67f (diff)
downloadironic-c9c595f235cec04e1fa67f52680f6f698229ddef.tar.gz
Merge "Add `service` role RBAC policy support"
Diffstat (limited to 'releasenotes')
-rw-r--r--releasenotes/notes/add-service-role-support-8e9390769508ca99.yaml13
1 files changed, 13 insertions, 0 deletions
diff --git a/releasenotes/notes/add-service-role-support-8e9390769508ca99.yaml b/releasenotes/notes/add-service-role-support-8e9390769508ca99.yaml
new file mode 100644
index 000000000..7a2aa7b95
--- /dev/null
+++ b/releasenotes/notes/add-service-role-support-8e9390769508ca99.yaml
@@ -0,0 +1,13 @@
+---
+features:
+ - |
+ Adds support for the ``service`` role, which is intended for service to
+ service communication, such as for those where ``ironic-inspector``,
+ ``nova-compute``, or ``networking-baremetal`` needs to communicate with
+ Ironic's API.
+upgrade:
+ - |
+ Ironic now has support for the ``service`` role, which is available in the
+ ``system`` scope as well as the ``project`` scope. This functionality
+ is for service to service communication, if desired. Effective access rights
+ are similar to the ``manager`` or the ``owner`` scoped admin privileges.