commit 8615563df47261d9c6dab7c5badbceb399d0e14d
author Grzegorz Grasza <xek@redhat.com> Mon Oct 18 16:52:06 2021 +0200
committer Grzegorz Grasza <xek@redhat.com> Tue Apr 26 14:17:20 2022 +0200
tree afd9108fd082d0bc88762e04b99235bb2be00a04
parent 8339df03993daed2334c7086241d8fdc935b05f6

Global option for enforcing scope (ENFORCE_SCOPE)

This updates each devstack service library, to use it as the
default value for service-specific RBAC configuration.

Change-Id: I41061d042206c411ee3dd94ce91098e612af7ae7

lib/glance

diff --git a/lib/glance b/lib/glance
index 9bba938..04b9011 100644
--- a/lib/glance
+++ b/lib/glance
@@ -432,7 +432,7 @@
         iniset $GLANCE_API_CONF DEFAULT workers "$API_WORKERS"
     fi
 
-    if [[ "$GLANCE_ENFORCE_SCOPE" == True ]] ; then
+    if [[ "$GLANCE_ENFORCE_SCOPE" == True || "$ENFORCE_SCOPE" == True ]] ; then
         iniset $GLANCE_API_CONF oslo_policy enforce_scope true
         iniset $GLANCE_API_CONF oslo_policy enforce_new_defaults true
         iniset $GLANCE_API_CONF DEFAULT enforce_secure_rbac true