Merge pull request #1369 from stackhpc/ironic-allow-admins-to-list-bms

Allow admins to list all baremetal nodes

Author: Alex-Welsh

etc/kayobe/kolla/config/ironic/policy.yaml

@@ -0,0 +1,6 @@
+# Retrieve multiple Node records
+# GET  /nodes
+# GET  /nodes/detail
+# Intended scope(s): system, project
+# Overridden: added role:admin
+"baremetal:node:list_all": "role:admin or (role:reader and system_scope:all) or (role:service and system_scope:all) or rule:service_role"

releasenotes/notes/allow-admins-to-list-bms-ff0bc40d605d4ca2.yaml

@@ -0,0 +1,7 @@
+---
+features:
+  - |
+    Added a custom policy to Ironic that allows users with the `admin` role to
+    list all baremetal nodes. This is required at sites where baremetal
+    provisioning targets a specific node, as we need to look up the node's uuid
+    to pass as the hypervisor hostname.