openstack
/
heat
Code Issues Proposed changes

Mark the default policy usage for neutron resource 

The default policy usage of some neutron resources
is limited to administrators only. This change will
add the docstring and resource type policy for
the resources:
OS::Neutron::ProviderNet
OS::Neutron::Segment

Change-Id: Ia8c0bf1d0ceaf92416539ffba7ee85c6aa50e256
Closes-Bug: #1690328
This commit is contained in:
huangtianhua 2017-05-17 09:55:16 +08:00
parent 97d236062c
commit e65d4e8475
3 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/heat/policy.json
View File

@ -91,8 +91,10 @@
"resource_types:OS::Neutron::Quota": "rule:project_admin",
"resource_types:OS::Nova::Quota": "rule:project_admin",
"resource_types:OS::Manila::ShareType": "rule:project_admin",
"resource_types:OS::Neutron::ProviderNet": "rule:project_admin",
"resource_types:OS::Neutron::QoSPolicy": "rule:project_admin",
"resource_types:OS::Neutron::QoSBandwidthLimitRule": "rule:project_admin",
"resource_types:OS::Neutron::Segment": "rule:project_admin",
"resource_types:OS::Nova::HostAggregate": "rule:project_admin",
"resource_types:OS::Cinder::QoSSpecs": "rule:project_admin",
"resource_types:OS::Cinder::QoSAssociation": "rule:project_admin",

3
heat/engine/resources/openstack/neutron/provider_net.py
View File

@ -25,6 +25,9 @@ class ProviderNet(net.Net):
Provider networks specify details of physical realisation of the existing
network.
The default policy usage of this resource is limited to
administrators only.
"""
required_service_extension = 'provider'

3
heat/engine/resources/openstack/neutron/segment.py
View File

@ -26,6 +26,9 @@ class Segment(neutron.NeutronResource):
This requires enabling the segments service plug-in by appending
'segments' to the list of service_plugins in the neutron.conf.
The default policy usage of this resource is limited to
administrators only.
"""
required_service_extension = 'segment'