diff options
| author | Zuul <zuul@review.opendev.org> | 2022-10-25 23:31:48 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2022-10-25 23:31:48 +0000 |
| commit | dcc1c9194a2cfaa7d4cf03ed72c7dcda115fb0c0 (patch) | |
| tree | cf009e167a45cfcd3ffd808cc09d3c8755967307 /releasenotes | |
| parent | 411a7d0902c23d0e9dcba7502dea25fadad9d9a1 (diff) | |
| parent | 3a0eaa1ffea1a32d4f11864485f2883194a99354 (diff) | |
| download | zuul-dcc1c9194a2cfaa7d4cf03ed72c7dcda115fb0c0.tar.gz | |
Merge "Rename admin-rule to authorization-rule"
Diffstat (limited to 'releasenotes')
| -rw-r--r-- | releasenotes/notes/authz-rule-55a6db54340f2e08.yaml | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/releasenotes/notes/authz-rule-55a6db54340f2e08.yaml b/releasenotes/notes/authz-rule-55a6db54340f2e08.yaml new file mode 100644 index 000000000..d3b3fa5f1 --- /dev/null +++ b/releasenotes/notes/authz-rule-55a6db54340f2e08.yaml @@ -0,0 +1,24 @@ +--- +upgrade: + - | + In preparation for expanded access control features in the web + interface, and REST API, the ``admin-rule`` tenant configuration + object has been renamed to ``authorization-rule``. When applied + to a tenant, the tenant attribute is still ``admin-rules`` since + it determines admin access to that tenant. This change will allow + similar rules to be applied to non-admin level access in the + future. + + Tenant configs should now follow this example: + + .. code-block:: yaml + + - authorization-rule: + name: example-rule + - tenant: + name: example-tenant + admin-rules: + - example-rule + + The old form is still permitted for backwards compatability, but + will be removed in a later version of Zuul. |