diff options
| author | Pranali Deore <pdeore@redhat.com> | 2023-02-10 13:48:13 +0000 |
|---|---|---|
| committer | Pranali Deore <pdeore@redhat.com> | 2023-02-16 11:12:59 +0000 |
| commit | b20cc91e6f5c0a84965b0498c75b2ad40f361361 (patch) | |
| tree | 10cea9790695cde0f380c7331db520aeb8bec0d6 /glance/api/policy.py | |
| parent | 8c04d19e8858594fe687f555c9be99ce6b16dc16 (diff) | |
| download | glance-b20cc91e6f5c0a84965b0498c75b2ad40f361361.tar.gz | |
Remove deprecated ``enforce_secure_rbac`` option
As per the revised SRBAC community goals, glance service is now
switching to new defaults by default hence removing the deprecated
``enforce_secure_rbac`` option which is no longer needed.
The ``enforce_secure_rbac`` option was introduced EXPERIMENTAL in
Wallaby release for operators to opt into enforcing authorization
based on common RBAC personas.
Related blueprint secure-rbac
Change-Id: I273527c85d30c1c09c086c73c892aaa6d127df6b
Diffstat (limited to 'glance/api/policy.py')
| -rw-r--r-- | glance/api/policy.py | 10 |
1 files changed, 0 insertions, 10 deletions
diff --git a/glance/api/policy.py b/glance/api/policy.py index d92d4df6d..17043eb41 100644 --- a/glance/api/policy.py +++ b/glance/api/policy.py @@ -25,7 +25,6 @@ from oslo_policy import policy from glance.common import exception from glance.domain import proxy -from glance.i18n import _LW from glance import policies @@ -64,15 +63,6 @@ class Enforcer(policy.Enforcer): if suppress_deprecation_warnings: self.suppress_deprecation_warnings = True self.register_defaults(policies.list_rules()) - if CONF.enforce_secure_rbac and CONF.oslo_policy.enforce_new_defaults: - LOG.warning(_LW( - "Deploying glance with secure RBAC personas enabled via " - "`glance-api.conf [DEFAULT] enforce_secure_rbac=True` and " - "`glance-api.conf [oslo_policy] enforce_new_defaults=True` " - "is marked as EXPERIMENTAL in Wallaby. The status of this " - "feature will graduate to SUPPORTED as glance adopts more " - "personas, specifically for system-scope." - )) def add_rules(self, rules): """Add new rules to the Rules object""" |