Merge pull request #1369 from stackhpc/ironic-allow-admins-to-list-bms

Allow admins to list all baremetal nodes
stackhpc · Nov 12, 2024 · f5ce385 · f5ce385
2 parents fc5dc49 + d49856b
commit f5ce385
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/etc/kayobe/kolla/config/ironic/policy.yaml b/etc/kayobe/kolla/config/ironic/policy.yaml
@@ -0,0 +1,6 @@
+# Retrieve multiple Node records
+# GET  /nodes
+# GET  /nodes/detail
+# Intended scope(s): system, project
+# Overridden: added role:admin
+"baremetal:node:list_all": "role:admin or (role:reader and system_scope:all) or (role:service and system_scope:all) or rule:service_role"
diff --git a/releasenotes/notes/allow-admins-to-list-bms-ff0bc40d605d4ca2.yaml b/releasenotes/notes/allow-admins-to-list-bms-ff0bc40d605d4ca2.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - |
+    Added a custom policy to Ironic that allows users with the `admin` role to
+    list all baremetal nodes. This is required at sites where baremetal
+    provisioning targets a specific node, as we need to look up the node's uuid
+    to pass as the hypervisor hostname.