198ef70c2b
this patch introduces an oslo.policy-based API access policy
enforcement engine to ironic-inspector.
As part of implementation, a proper oslo.context-based request
context is also generated and assigned to each request.
Short overview of changes:
- added custom RequestContext class
- extends oslo.context to handle of "is_public_api" flag
(False by default)
- added context to request in each API route
- '/continue' api sets the "is_public_api" flag to True
- added documented definitions for API access policies and their
defaults
- added enforcement of these policies on API requests
- added oslo.policy-specific entry points to setup.cfg
- added autogenerated policy sample file with defaults
- added documentation with autogenerated policies
Change-Id: Iff6f98fa9950d78608f0a7c325d132c11a1383b3
Closes-Bug: #1719812
14 lines
486 B
ReStructuredText
14 lines
486 B
ReStructuredText
=======================
|
|
Ironic Inspector Policy
|
|
=======================
|
|
|
|
The following is a sample **ironic-inspector** policy file, autogenerated from
|
|
Ironic Inspector when this documentation is built.
|
|
To avoid issues, make sure your version of **ironic-inspector**
|
|
matches that of the example policy file.
|
|
|
|
The sample policy can also be downloaded as a :download:`file
|
|
</_static/ironic-inspector.policy.yaml.sample>`.
|
|
|
|
.. literalinclude:: /_static/ironic-inspector.policy.yaml.sample
|