openstack/octavia
Code Issues Proposed changes
57d653cc63
octavia/etc/policy
History
Erik Olof Gunnar Andersson cfae79cfee Fixing Octavia generating json named file containing yaml 
Currently when the command to generate a policy file is used, it will
generate a yaml based file, but call it json.sample.policy. This patch
forces it to generate a json file, and changes the default name to
policy.json.sample.

Change-Id: I4d04f4f37385bd4601f566238aaba43dcbe74780
2018-07-24 13:06:55 +00:00
..
admin_or_owner-policy.json Add RBAC enforcement to quotas v2 API 2017-06-20 18:52:05 -07:00
octavia-policy-generator.conf Fixing Octavia generating json named file containing yaml 2018-07-24 13:06:55 +00:00
README.rst Add RBAC enforcement to Octavia v2 API 2017-06-20 13:43:47 +03:00

README.rst

Octavia Sample Policy Files

The sample policy.json files described here can be copied into /etc/octavia/policy.json to override the default RBAC policy for Octavia.

admin_or_owner-policy.json

This policy file disables the requirement for load-balancer service users to have one of the load-balancer:* roles. It provides a similar policy to legacy OpenStack policies where any user or admin has access to load-balancer resources that they own. Users with the admin role has access to all load-balancer resources, whether they own them or not.