342e83f033
The node object represents either a bare metal or virtual machine node that is provisioned with an OS to run the containers, or alternatively, run kubernetes. Magnum use Heat to deploy the nodes, so it is unnecessary to maintain node object in Magnum. Heat can do the work for us. The code about node object is useless now, so let's remove it from Magnum. Closes-Bug: #1540790 Change-Id: If8761b06a364127683099afb4dc51ea551be6f89
55 lines
1.6 KiB
JSON
55 lines
1.6 KiB
JSON
{
|
|
"context_is_admin": "role:admin",
|
|
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
|
|
"default": "rule:admin_or_owner",
|
|
"admin_api": "rule:context_is_admin",
|
|
|
|
"bay:create": "rule:default",
|
|
"bay:delete": "rule:default",
|
|
"bay:detail": "rule:default",
|
|
"bay:get": "rule:default",
|
|
"bay:get_all": "rule:default",
|
|
"bay:update": "rule:default",
|
|
|
|
"baymodel:create": "rule:default",
|
|
"baymodel:delete": "rule:default",
|
|
"baymodel:detail": "rule:default",
|
|
"baymodel:get": "rule:default",
|
|
"baymodel:get_all": "rule:default",
|
|
"baymodel:update": "rule:default",
|
|
"baymodel:publish": "rule:admin_or_owner",
|
|
|
|
"pod:create": "rule:default",
|
|
"pod:delete": "rule:default",
|
|
"pod:detail": "rule:default",
|
|
"pod:get": "rule:default",
|
|
"pod:get_all": "rule:default",
|
|
"pod:update": "rule:default",
|
|
|
|
"rc:create": "rule:default",
|
|
"rc:delete": "rule:default",
|
|
"rc:detail": "rule:default",
|
|
"rc:get": "rule:default",
|
|
"rc:get_all": "rule:default",
|
|
"rc:update": "rule:default",
|
|
|
|
"service:create": "rule:default",
|
|
"service:delete": "rule:default",
|
|
"service:detail": "rule:default",
|
|
"service:get": "rule:default",
|
|
"service:get_all": "rule:default",
|
|
"service:update": "rule:default",
|
|
|
|
"container:create": "rule:default",
|
|
"container:delete": "rule:default",
|
|
"container:detail": "rule:default",
|
|
"container:get": "rule:default",
|
|
"container:get_all": "rule:default",
|
|
"container:update": "rule:default",
|
|
|
|
"certificate:create": "rule:default",
|
|
"certificate:get": "rule:default",
|
|
|
|
"magnum-service:get_all": "rule:admin_api"
|
|
}
|