Policy Default Refresh-2
We moved the nova API policies to new defaults and scope types in https:/
Based on the initial discussions of how system-scope would be used, we decided
to allow operators to interact with project-owned resources using system-scoped
tokens. In summary, we mixed up the system and project scope in the APIs.
To solve these issues and make the new policy more useable in a better way, we discussed the new design a lot during the Yoga PTG - https:/
Complete direction can be seen in - https:/
In nova, we will audit all the policies and make sure everything is as per the new direction defined in the community-wide goal.
Nova policy Audit: https:/
Blueprint information
- Status:
- Complete
- Approver:
- Sylvain Bauza
- Priority:
- Undefined
- Drafter:
- Ghanshyam Maan
- Direction:
- Approved
- Assignee:
- Ghanshyam Maan
- Definition:
- Approved
- Series goal:
- Accepted for yoga
- Implementation:
-
Implemented
- Milestone target:
- None
- Started by
- Sylvain Bauza
- Completed by
- Sylvain Bauza
Related branches
Related bugs
Sprints
Whiteboard
[20211130 bauzas] Approved during today's nova meeting as a specless BP