Merge pull request #377 from juliakreger/enforce-srbac-by-default

force rbac policy to only leverage the new policy
openstack-k8s-operators · Feb 6, 2024 · c4a3b15 · c4a3b15
2 parents 8b6a4ca + 227b9bc
commit c4a3b15
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/templates/common/config/ironic.conf b/templates/common/config/ironic.conf
@@ -106,6 +106,9 @@ user_domain_name=Default
 project_name=service
 project_domain_name=Default
 
+[oslo_policy]
+enforce_scope=True
+enforce_new_defaults=True
 {{end}}
 
 [conductor]

diff --git a/templates/ironicinspector/config/inspector.conf b/templates/ironicinspector/config/inspector.conf
@@ -56,6 +56,9 @@ project_domain_name=Default
 project_name=services
 user_domain_name=Default
 
+[oslo_policy]
+enforce_scope=True
+enforce_new_defaults=True
 {{end}}
 
 [processing]