openstack/octavia
Code Issues Proposed changes
a6a4001f57
octavia/etc/policy
History
Michael Johnson fafabad042 Switch oslo.policy over to yaml 
Oslo.policy is moving away from using json format policy files[1].

This patch updates the Octavia documentation, policy configuration file, and
legacy admin-or-owner policy file to be in yaml format.

Octavia will continue to honor and support the json format file as long
as oslo.policy does, but this patch will encourage new deployments
to use the yaml format.

[1] https://docs.openstack.org/oslo.policy/latest/admin/policy-json-file.html

Change-Id: I925cc05981e677c0552b18f845fdbc512d2af22c
2020-06-08 08:54:07 -07:00
..
admin_or_owner-policy.yaml Switch oslo.policy over to yaml 2020-06-08 08:54:07 -07:00
octavia-policy-generator.conf Switch oslo.policy over to yaml 2020-06-08 08:54:07 -07:00
README.rst Switch oslo.policy over to yaml 2020-06-08 08:54:07 -07:00

README.rst

Octavia Sample Policy Files

The sample policy.yaml files described here can be copied into /etc/octavia/policy.yaml to override the default RBAC policy for Octavia.

admin_or_owner-policy.yaml

This policy file disables the requirement for load-balancer service users to have one of the load-balancer:* roles. It provides a similar policy to legacy OpenStack policies where any user or admin has access to load-balancer resources that they own. Users with the admin role has access to all load-balancer resources, whether they own them or not.