Browse Source

Mark the default policy usage for neutron resource

The default policy usage of some neutron resources
is limited to administrators only. This change will
add the docstring and resource type policy for
the resources:
OS::Neutron::ProviderNet
OS::Neutron::Segment

Change-Id: Ia8c0bf1d0ceaf92416539ffba7ee85c6aa50e256
Closes-Bug: #1690328
changes/10/465210/2
huangtianhua 5 years ago
parent
commit
e65d4e8475
  1. 2
      etc/heat/policy.json
  2. 3
      heat/engine/resources/openstack/neutron/provider_net.py
  3. 3
      heat/engine/resources/openstack/neutron/segment.py

2
etc/heat/policy.json

@ -91,8 +91,10 @@
"resource_types:OS::Neutron::Quota": "rule:project_admin",
"resource_types:OS::Nova::Quota": "rule:project_admin",
"resource_types:OS::Manila::ShareType": "rule:project_admin",
"resource_types:OS::Neutron::ProviderNet": "rule:project_admin",
"resource_types:OS::Neutron::QoSPolicy": "rule:project_admin",
"resource_types:OS::Neutron::QoSBandwidthLimitRule": "rule:project_admin",
"resource_types:OS::Neutron::Segment": "rule:project_admin",
"resource_types:OS::Nova::HostAggregate": "rule:project_admin",
"resource_types:OS::Cinder::QoSSpecs": "rule:project_admin",
"resource_types:OS::Cinder::QoSAssociation": "rule:project_admin",

3
heat/engine/resources/openstack/neutron/provider_net.py

@ -25,6 +25,9 @@ class ProviderNet(net.Net):
Provider networks specify details of physical realisation of the existing
network.
The default policy usage of this resource is limited to
administrators only.
"""
required_service_extension = 'provider'

3
heat/engine/resources/openstack/neutron/segment.py

@ -26,6 +26,9 @@ class Segment(neutron.NeutronResource):
This requires enabling the segments service plug-in by appending
'segments' to the list of service_plugins in the neutron.conf.
The default policy usage of this resource is limited to
administrators only.
"""
required_service_extension = 'segment'

Loading…
Cancel
Save