| Felipe Monteiro | 3ab2c35 | 2017-07-05 22:25:34 +0100 | [diff] [blame] | 1 | --- |
| 2 | features: |
| 3 | - | |
| 4 | Add new configuration option ``[rbac] custom_policy_files``, |
| 5 | allowing users to specify list of the paths to search for custom |
| 6 | policy files. Each policy path assumes that the service name is |
| 7 | included in the path once. Also assumes Patrole is on the same host |
| 8 | as the policy files. The paths should be ordered by precedence, with |
| 9 | high-priority paths before low-priority paths. The first path that |
| 10 | is found to contain the service's policy file will be used. |
| 11 | deprecations: |
| 12 | - | |
| 13 | Deprecate the following configuration options from ``[rbac]`` group: |
| 14 | |
| 15 | * cinder_policy_file |
| 16 | * glance_policy_file |
| 17 | * keystone_policy_file |
| 18 | * neutron_policy_file |
| 19 | * nova_policy_file |
| 20 | |
| 21 | It is better to use ``[rbac] custom_policy_files`` which supports |
| 22 | any OpenStack service. |