Fix devstack policy overrides

This patch fixes the OCTAVIA_USE_LEGACY_RBAC devstack plugin setting to
apply the policy file setting in the octavia.conf.
It also creates a OCTAVIA_USE_KEYSTONE_DEFAULT_ROLES setting to enable
the keystone default roles ONLY policy override if the setting is True.

Change-Id: If10638bd9da463d6bb6932a5598156d56a9fcd97
This commit is contained in:
Michael Johnson 2023-03-14 23:04:33 +00:00
parent 5ed6f37519
commit 70b1aeacf6

@ -425,6 +425,11 @@ function octavia_configure {
if [[ "$OCTAVIA_USE_LEGACY_RBAC" == "True" ]]; then
cp $OCTAVIA_DIR/etc/policy/admin_or_owner-policy.yaml $OCTAVIA_CONF_DIR/policy.yaml
iniset $OCTAVIA_CONF oslo_policy policy_file $OCTAVIA_CONF_DIR/policy.yaml
fi
if [[ "$OCTAVIA_USE_KEYSTONE_DEFAULT_ROLES" == "True" ]]; then
cp $OCTAVIA_DIR/etc/policy/keystone_default_roles-policy.yaml $OCTAVIA_CONF_DIR/policy.yaml
iniset $OCTAVIA_CONF oslo_policy policy_file $OCTAVIA_CONF_DIR/policy.yaml
fi
# create dhclient.conf file for dhclient