Make JSON files more readable
JSON formatting can be optimized for size or for readability. The JSON files in openstack-manuals favor readability (for obvious reasons). Unlike typical JSON formatted for reading (see Wikipedia article on JSON, or Python's JSON output), however, the files have no space after the name-separator, making them somewhat harder to read. This changeset adds the missing space after the name-separator. It also changes indenting from 3 to 4 spaces (matching our conventions for Python and shell code). The order of keys (which doesn't matter for the software parser) has been preserved, because the order may be intentional (to help human readers). For instance: "uuid":"d8e02d56-2648-49a3-bf97-6be8f1204f38", becomes: "uuid": "d8e02d56-2648-49a3-bf97-6be8f1204f38", It also changes a few overly long empty sets. For instance: "volume:create":[ ], becomes: "volume:create": [], Change-Id: I559907e72578e6fb1a1a6895bd005ad9b22210d7
This commit is contained in:
parent
67e48a1420
commit
37ad5d3ebe
doc
common/samples
authentication.jsondashboard-keystone_policy.jsondashboard-nova_policy.jsonlist_metadata.jsonnetworking_auth.jsonrestrict_roles.jsonrestrict_roles2.jsonserver-scheduler-hints.jsonserver-scheduler-hints2.jsonserver-scheduler-hints3.jsonserver-scheduler-hints4.jsontoken.json
config-reference/compute/samples
user-guide/samples
@ -1,55 +1,45 @@
|
||||
{
|
||||
"context_is_admin":[
|
||||
[
|
||||
"role:admin"
|
||||
]
|
||||
],
|
||||
"admin_or_owner":[
|
||||
[
|
||||
"is_admin:True"
|
||||
],
|
||||
[
|
||||
"project_id:%(project_id)s"
|
||||
]
|
||||
],
|
||||
"default":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"admin_api":[
|
||||
[
|
||||
"is_admin:True"
|
||||
]
|
||||
],
|
||||
"volume:create":[
|
||||
|
||||
],
|
||||
"volume:get_all":[
|
||||
|
||||
],
|
||||
"volume:get_volume_metadata":[
|
||||
|
||||
],
|
||||
"volume:get_snapshot":[
|
||||
|
||||
],
|
||||
"volume:get_all_snapshots":[
|
||||
|
||||
],
|
||||
"volume_extension:types_manage":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"volume_extension:types_extra_specs":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"...":[
|
||||
[
|
||||
"...:..."
|
||||
]
|
||||
]
|
||||
"context_is_admin": [
|
||||
[
|
||||
"role:admin"
|
||||
]
|
||||
],
|
||||
"admin_or_owner": [
|
||||
[
|
||||
"is_admin:True"
|
||||
],
|
||||
[
|
||||
"project_id:%(project_id)s"
|
||||
]
|
||||
],
|
||||
"default": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"admin_api": [
|
||||
[
|
||||
"is_admin:True"
|
||||
]
|
||||
],
|
||||
"volume:create": [],
|
||||
"volume:get_all": [],
|
||||
"volume:get_volume_metadata": [],
|
||||
"volume:get_snapshot": [],
|
||||
"volume:get_all_snapshots": [],
|
||||
"volume_extension:types_manage": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"volume_extension:types_extra_specs": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"...": [
|
||||
[
|
||||
"...:..."
|
||||
]
|
||||
]
|
||||
}
|
@ -1,381 +1,381 @@
|
||||
{
|
||||
"admin_required":[
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"is_admin:1"
|
||||
]
|
||||
],
|
||||
"service_role":[
|
||||
[
|
||||
"role:service"
|
||||
]
|
||||
],
|
||||
"service_or_admin":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
],
|
||||
[
|
||||
"rule:service_role"
|
||||
]
|
||||
],
|
||||
"owner":[
|
||||
[
|
||||
"user_id:%(user_id)s"
|
||||
]
|
||||
],
|
||||
"admin_or_owner":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
],
|
||||
[
|
||||
"rule:owner"
|
||||
]
|
||||
],
|
||||
"default":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_service":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_services":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_service":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_service":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_service":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_endpoint":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_endpoints":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_endpoint":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_endpoint":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_endpoint":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_domain":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_domains":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_domain":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_domain":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_domain":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_project":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_projects":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_user_projects":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:create_project":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_project":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_project":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_user":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_users":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_user":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_user":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:delete_user":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_group":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_groups":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_groups_for_user":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:create_group":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_group":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_group":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_users_in_group":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:remove_user_from_group":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:check_user_in_group":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:add_user_to_group":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_credential":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_credentials":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_credential":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_credential":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_credential":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_role":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_roles":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_role":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_role":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_role":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:check_grant":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_grants":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_grant":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:revoke_grant":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_role_assignments":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_policy":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_policies":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_policy":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_policy":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_policy":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:check_token":[
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:validate_token":[
|
||||
[
|
||||
"rule:service_or_admin"
|
||||
]
|
||||
],
|
||||
"identity:validate_token_head":[
|
||||
[
|
||||
"rule:service_or_admin"
|
||||
]
|
||||
],
|
||||
"identity:revocation_list":[
|
||||
[
|
||||
"rule:service_or_admin"
|
||||
]
|
||||
],
|
||||
"identity:revoke_token":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:create_trust":[
|
||||
[
|
||||
"user_id:%(trust.trustor_user_id)s"
|
||||
]
|
||||
],
|
||||
"identity:get_trust":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:list_trusts":[
|
||||
[
|
||||
"@"
|
||||
]
|
||||
],
|
||||
"identity:list_roles_for_trust":[
|
||||
[
|
||||
"@"
|
||||
]
|
||||
],
|
||||
"identity:check_role_for_trust":[
|
||||
[
|
||||
"@"
|
||||
]
|
||||
],
|
||||
"identity:get_role_for_trust":[
|
||||
[
|
||||
"@"
|
||||
]
|
||||
],
|
||||
"identity:delete_trust":[
|
||||
[
|
||||
"@"
|
||||
]
|
||||
]
|
||||
"admin_required": [
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"is_admin:1"
|
||||
]
|
||||
],
|
||||
"service_role": [
|
||||
[
|
||||
"role:service"
|
||||
]
|
||||
],
|
||||
"service_or_admin": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
],
|
||||
[
|
||||
"rule:service_role"
|
||||
]
|
||||
],
|
||||
"owner": [
|
||||
[
|
||||
"user_id:%(user_id)s"
|
||||
]
|
||||
],
|
||||
"admin_or_owner": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
],
|
||||
[
|
||||
"rule:owner"
|
||||
]
|
||||
],
|
||||
"default": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_service": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_services": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_service": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_service": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_service": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_endpoint": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_endpoints": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_endpoint": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_endpoint": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_endpoint": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_domain": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_domains": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_domain": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_domain": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_domain": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_project": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_projects": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_user_projects": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:create_project": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_project": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_project": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_user": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_users": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_user": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_user": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:delete_user": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_group": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_groups": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_groups_for_user": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:create_group": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_group": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_group": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_users_in_group": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:remove_user_from_group": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:check_user_in_group": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:add_user_to_group": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_credential": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_credentials": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_credential": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_credential": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_credential": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_role": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_roles": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_role": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_role": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_role": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:check_grant": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_grants": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_grant": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:revoke_grant": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_role_assignments": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:get_policy": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:list_policies": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:create_policy": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:update_policy": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:delete_policy": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:check_token": [
|
||||
[
|
||||
"rule:admin_required"
|
||||
]
|
||||
],
|
||||
"identity:validate_token": [
|
||||
[
|
||||
"rule:service_or_admin"
|
||||
]
|
||||
],
|
||||
"identity:validate_token_head": [
|
||||
[
|
||||
"rule:service_or_admin"
|
||||
]
|
||||
],
|
||||
"identity:revocation_list": [
|
||||
[
|
||||
"rule:service_or_admin"
|
||||
]
|
||||
],
|
||||
"identity:revoke_token": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:create_trust": [
|
||||
[
|
||||
"user_id:%(trust.trustor_user_id)s"
|
||||
]
|
||||
],
|
||||
"identity:get_trust": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"identity:list_trusts": [
|
||||
[
|
||||
"@"
|
||||
]
|
||||
],
|
||||
"identity:list_roles_for_trust": [
|
||||
[
|
||||
"@"
|
||||
]
|
||||
],
|
||||
"identity:check_role_for_trust": [
|
||||
[
|
||||
"@"
|
||||
]
|
||||
],
|
||||
"identity:get_role_for_trust": [
|
||||
[
|
||||
"@"
|
||||
]
|
||||
],
|
||||
"identity:delete_trust": [
|
||||
[
|
||||
"@"
|
||||
]
|
||||
]
|
||||
}
|
@ -1,248 +1,248 @@
|
||||
{
|
||||
"context_is_admin":"role:admin",
|
||||
"admin_or_owner":"is_admin:True or project_id:%(project_id)s",
|
||||
"default":"rule:admin_or_owner",
|
||||
"cells_scheduler_filter:TargetCellFilter":"is_admin:True",
|
||||
"compute:create":"",
|
||||
"compute:create:attach_network":"",
|
||||
"compute:create:attach_volume":"",
|
||||
"compute:create:forced_host":"is_admin:True",
|
||||
"compute:get_all":"",
|
||||
"compute:get_all_tenants":"",
|
||||
"compute:unlock_override":"rule:admin_api",
|
||||
"compute:shelve":"",
|
||||
"compute:shelve_offload":"",
|
||||
"compute:unshelve":"",
|
||||
"admin_api":"is_admin:True",
|
||||
"compute_extension:accounts":"rule:admin_api",
|
||||
"compute_extension:admin_actions":"rule:admin_api",
|
||||
"compute_extension:admin_actions:pause":"rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:unpause":"rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:suspend":"rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:resume":"rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:lock":"rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:unlock":"rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:resetNetwork":"rule:admin_api",
|
||||
"compute_extension:admin_actions:injectNetworkInfo":"rule:admin_api",
|
||||
"compute_extension:admin_actions:createBackup":"rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:migrateLive":"rule:admin_api",
|
||||
"compute_extension:admin_actions:resetState":"rule:admin_api",
|
||||
"compute_extension:admin_actions:migrate":"rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions":"rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:pause":"rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:unpause":"rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:suspend":"rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:resume":"rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:lock":"rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:unlock":"rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:reset_network":"rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:inject_network_info":"rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:create_backup":"rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:migrate_live":"rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:reset_state":"rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:migrate":"rule:admin_api",
|
||||
"compute_extension:v3:os-admin-password":"",
|
||||
"compute_extension:aggregates":"rule:admin_api",
|
||||
"compute_extension:v3:os-aggregates":"rule:admin_api",
|
||||
"compute_extension:agents":"rule:admin_api",
|
||||
"compute_extension:v3:os-agents":"rule:admin_api",
|
||||
"compute_extension:attach_interfaces":"",
|
||||
"compute_extension:v3:os-attach-interfaces":"",
|
||||
"compute_extension:baremetal_nodes":"rule:admin_api",
|
||||
"compute_extension:v3:os-baremetal-nodes":"rule:admin_api",
|
||||
"compute_extension:cells":"rule:admin_api",
|
||||
"compute_extension:v3:os-cells":"rule:admin_api",
|
||||
"compute_extension:certificates":"",
|
||||
"compute_extension:v3:os-certificates":"",
|
||||
"compute_extension:cloudpipe":"rule:admin_api",
|
||||
"compute_extension:cloudpipe_update":"rule:admin_api",
|
||||
"compute_extension:console_output":"",
|
||||
"compute_extension:v3:consoles:discoverable":"",
|
||||
"compute_extension:v3:os-console-output":"",
|
||||
"compute_extension:consoles":"",
|
||||
"compute_extension:v3:os-remote-consoles":"",
|
||||
"compute_extension:coverage_ext":"rule:admin_api",
|
||||
"compute_extension:v3:os-coverage":"rule:admin_api",
|
||||
"compute_extension:createserverext":"",
|
||||
"compute_extension:deferred_delete":"",
|
||||
"compute_extension:v3:os-deferred-delete":"",
|
||||
"compute_extension:disk_config":"",
|
||||
"compute_extension:evacuate":"rule:admin_api",
|
||||
"compute_extension:v3:os-evacuate":"rule:admin_api",
|
||||
"compute_extension:extended_server_attributes":"rule:admin_api",
|
||||
"compute_extension:v3:os-extended-server-attributes":"rule:admin_api",
|
||||
"compute_extension:extended_status":"",
|
||||
"compute_extension:v3:os-extended-status":"",
|
||||
"compute_extension:extended_availability_zone":"",
|
||||
"compute_extension:v3:os-extended-availability-zone":"",
|
||||
"compute_extension:extended_ips":"",
|
||||
"compute_extension:extended_ips_mac":"",
|
||||
"compute_extension:extended_vif_net":"",
|
||||
"compute_extension:v3:extension_info:discoverable":"",
|
||||
"compute_extension:extended_volumes":"",
|
||||
"compute_extension:v3:os-extended-volumes":"",
|
||||
"compute_extension:v3:os-extended-volumes:attach":"",
|
||||
"compute_extension:v3:os-extended-volumes:detach":"",
|
||||
"compute_extension:fixed_ips":"rule:admin_api",
|
||||
"compute_extension:v3:os-fixed-ips:discoverable":"",
|
||||
"compute_extension:v3:os-fixed-ips":"rule:admin_api",
|
||||
"compute_extension:flavor_access":"",
|
||||
"compute_extension:v3:os-flavor-access":"",
|
||||
"compute_extension:flavor_disabled":"",
|
||||
"compute_extension:v3:os-flavor-disabled":"",
|
||||
"compute_extension:flavor_rxtx":"",
|
||||
"compute_extension:v3:os-flavor-rxtx":"",
|
||||
"compute_extension:flavor_swap":"",
|
||||
"compute_extension:flavorextradata":"",
|
||||
"compute_extension:flavorextraspecs:index":"",
|
||||
"compute_extension:flavorextraspecs:show":"",
|
||||
"compute_extension:flavorextraspecs:create":"rule:admin_api",
|
||||
"compute_extension:flavorextraspecs:update":"rule:admin_api",
|
||||
"compute_extension:flavorextraspecs:delete":"rule:admin_api",
|
||||
"compute_extension:v3:flavor-extra-specs:index":"",
|
||||
"compute_extension:v3:flavor-extra-specs:show":"",
|
||||
"compute_extension:v3:flavor-extra-specs:create":"rule:admin_api",
|
||||
"compute_extension:v3:flavor-extra-specs:update":"rule:admin_api",
|
||||
"compute_extension:v3:flavor-extra-specs:delete":"rule:admin_api",
|
||||
"compute_extension:flavormanage":"rule:admin_api",
|
||||
"compute_extension:floating_ip_dns":"",
|
||||
"compute_extension:floating_ip_pools":"",
|
||||
"compute_extension:floating_ips":"",
|
||||
"compute_extension:floating_ips_bulk":"rule:admin_api",
|
||||
"compute_extension:fping":"",
|
||||
"compute_extension:fping:all_tenants":"rule:admin_api",
|
||||
"compute_extension:hide_server_addresses":"is_admin:False",
|
||||
"compute_extension:v3:os-hide-server-addresses":"is_admin:False",
|
||||
"compute_extension:hosts":"rule:admin_api",
|
||||
"compute_extension:v3:os-hosts":"rule:admin_api",
|
||||
"compute_extension:hypervisors":"rule:admin_api",
|
||||
"compute_extension:v3:os-hypervisors":"rule:admin_api",
|
||||
"compute_extension:image_size":"",
|
||||
"compute_extension:v3:os-image-metadata":"",
|
||||
"compute_extension:v3:os-images":"",
|
||||
"compute_extension:instance_actions":"",
|
||||
"compute_extension:v3:os-instance-actions":"",
|
||||
"compute_extension:instance_actions:events":"rule:admin_api",
|
||||
"compute_extension:v3:os-instance-actions:events":"rule:admin_api",
|
||||
"compute_extension:instance_usage_audit_log":"rule:admin_api",
|
||||
"compute_extension:v3:os-instance-usage-audit-log":"rule:admin_api",
|
||||
"compute_extension:v3:ips:discoverable":"",
|
||||
"compute_extension:keypairs":"",
|
||||
"compute_extension:keypairs:index":"",
|
||||
"compute_extension:keypairs:show":"",
|
||||
"compute_extension:keypairs:create":"",
|
||||
"compute_extension:keypairs:delete":"",
|
||||
"compute_extension:v3:os-keypairs:discoverable":"",
|
||||
"compute_extension:v3:os-keypairs":"",
|
||||
"compute_extension:v3:os-keypairs:index":"",
|
||||
"compute_extension:v3:os-keypairs:show":"",
|
||||
"compute_extension:v3:os-keypairs:create":"",
|
||||
"compute_extension:v3:os-keypairs:delete":"",
|
||||
"compute_extension:multinic":"",
|
||||
"compute_extension:v3:os-multinic":"",
|
||||
"compute_extension:networks":"rule:admin_api",
|
||||
"compute_extension:networks:view":"",
|
||||
"compute_extension:networks_associate":"rule:admin_api",
|
||||
"compute_extension:quotas:show":"",
|
||||
"compute_extension:quotas:update":"rule:admin_api",
|
||||
"compute_extension:quotas:delete":"rule:admin_api",
|
||||
"compute_extension:v3:os-quota-sets:show":"",
|
||||
"compute_extension:v3:os-quota-sets:update":"rule:admin_api",
|
||||
"compute_extension:v3:os-quota-sets:delete":"rule:admin_api",
|
||||
"compute_extension:quota_classes":"",
|
||||
"compute_extension:v3:os-quota-class-sets":"",
|
||||
"compute_extension:rescue":"",
|
||||
"compute_extension:v3:os-rescue":"",
|
||||
"compute_extension:security_group_default_rules":"rule:admin_api",
|
||||
"compute_extension:security_groups":"",
|
||||
"compute_extension:v3:os-security-groups":"",
|
||||
"compute_extension:server_diagnostics":"rule:admin_api",
|
||||
"compute_extension:v3:os-server-diagnostics":"rule:admin_api",
|
||||
"compute_extension:server_password":"",
|
||||
"compute_extension:v3:os-server-password":"",
|
||||
"compute_extension:server_usage":"",
|
||||
"compute_extension:v3:os-server-usage":"",
|
||||
"compute_extension:services":"rule:admin_api",
|
||||
"compute_extension:v3:os-services":"rule:admin_api",
|
||||
"compute_extension:v3:servers:discoverable":"",
|
||||
"compute_extension:shelve":"",
|
||||
"compute_extension:shelveOffload":"rule:admin_api",
|
||||
"compute_extension:v3:os-shelve:shelve":"",
|
||||
"compute_extension:v3:os-shelve:shelve_offload":"rule:admin_api",
|
||||
"compute_extension:simple_tenant_usage:show":"rule:admin_or_owner",
|
||||
"compute_extension:v3:os-simple-tenant-usage:show":"rule:admin_or_owner",
|
||||
"compute_extension:simple_tenant_usage:list":"rule:admin_api",
|
||||
"compute_extension:v3:os-simple-tenant-usage:list":"rule:admin_api",
|
||||
"compute_extension:unshelve":"",
|
||||
"compute_extension:v3:os-shelve:unshelve":"",
|
||||
"compute_extension:users":"rule:admin_api",
|
||||
"compute_extension:virtual_interfaces":"",
|
||||
"compute_extension:virtual_storage_arrays":"",
|
||||
"compute_extension:volumes":"",
|
||||
"compute_extension:volume_attachments:index":"",
|
||||
"compute_extension:volume_attachments:show":"",
|
||||
"compute_extension:volume_attachments:create":"",
|
||||
"compute_extension:volume_attachments:update":"",
|
||||
"compute_extension:volume_attachments:delete":"",
|
||||
"compute_extension:volumetypes":"",
|
||||
"compute_extension:availability_zone:list":"",
|
||||
"compute_extension:v3:os-availability-zone:list":"",
|
||||
"compute_extension:availability_zone:detail":"rule:admin_api",
|
||||
"compute_extension:v3:os-availability-zone:detail":"rule:admin_api",
|
||||
"compute_extension:used_limits_for_admin":"rule:admin_api",
|
||||
"compute_extension:v3:os-used-limits":"",
|
||||
"compute_extension:v3:os-used-limits:tenant":"rule:admin_api",
|
||||
"compute_extension:migrations:index":"rule:admin_api",
|
||||
"compute_extension:v3:os-migrations:index":"rule:admin_api",
|
||||
"volume:create":"",
|
||||
"volume:get_all":"",
|
||||
"volume:get_volume_metadata":"",
|
||||
"volume:get_snapshot":"",
|
||||
"volume:get_all_snapshots":"",
|
||||
"volume_extension:types_manage":"rule:admin_api",
|
||||
"volume_extension:types_extra_specs":"rule:admin_api",
|
||||
"volume_extension:volume_admin_actions:reset_status":"rule:admin_api",
|
||||
"volume_extension:snapshot_admin_actions:reset_status":"rule:admin_api",
|
||||
"volume_extension:volume_admin_actions:force_delete":"rule:admin_api",
|
||||
"network:get_all":"",
|
||||
"network:get":"",
|
||||
"network:create":"",
|
||||
"network:delete":"",
|
||||
"network:associate":"",
|
||||
"network:disassociate":"",
|
||||
"network:get_vifs_by_instance":"",
|
||||
"network:allocate_for_instance":"",
|
||||
"network:deallocate_for_instance":"",
|
||||
"network:validate_networks":"",
|
||||
"network:get_instance_uuids_by_ip_filter":"",
|
||||
"network:get_instance_id_by_floating_address":"",
|
||||
"network:setup_networks_on_host":"",
|
||||
"network:get_backdoor_port":"",
|
||||
"network:get_floating_ip":"",
|
||||
"network:get_floating_ip_pools":"",
|
||||
"network:get_floating_ip_by_address":"",
|
||||
"network:get_floating_ips_by_project":"",
|
||||
"network:get_floating_ips_by_fixed_address":"",
|
||||
"network:allocate_floating_ip":"",
|
||||
"network:deallocate_floating_ip":"",
|
||||
"network:associate_floating_ip":"",
|
||||
"network:disassociate_floating_ip":"",
|
||||
"network:release_floating_ip":"",
|
||||
"network:migrate_instance_start":"",
|
||||
"network:migrate_instance_finish":"",
|
||||
"network:get_fixed_ip":"",
|
||||
"network:get_fixed_ip_by_address":"",
|
||||
"network:add_fixed_ip_to_instance":"",
|
||||
"network:remove_fixed_ip_from_instance":"",
|
||||
"network:add_network_to_project":"",
|
||||
"network:get_instance_nw_info":"",
|
||||
"network:get_dns_domains":"",
|
||||
"network:add_dns_entry":"",
|
||||
"network:modify_dns_entry":"",
|
||||
"network:delete_dns_entry":"",
|
||||
"network:get_dns_entries_by_address":"",
|
||||
"network:get_dns_entries_by_name":"",
|
||||
"network:create_private_dns_domain":"",
|
||||
"network:create_public_dns_domain":"",
|
||||
"network:delete_dns_domain":""
|
||||
"context_is_admin": "role:admin",
|
||||
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
|
||||
"default": "rule:admin_or_owner",
|
||||
"cells_scheduler_filter:TargetCellFilter": "is_admin:True",
|
||||
"compute:create": "",
|
||||
"compute:create:attach_network": "",
|
||||
"compute:create:attach_volume": "",
|
||||
"compute:create:forced_host": "is_admin:True",
|
||||
"compute:get_all": "",
|
||||
"compute:get_all_tenants": "",
|
||||
"compute:unlock_override": "rule:admin_api",
|
||||
"compute:shelve": "",
|
||||
"compute:shelve_offload": "",
|
||||
"compute:unshelve": "",
|
||||
"admin_api": "is_admin:True",
|
||||
"compute_extension:accounts": "rule:admin_api",
|
||||
"compute_extension:admin_actions": "rule:admin_api",
|
||||
"compute_extension:admin_actions:pause": "rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:unpause": "rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:suspend": "rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:resume": "rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:lock": "rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:unlock": "rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:resetNetwork": "rule:admin_api",
|
||||
"compute_extension:admin_actions:injectNetworkInfo": "rule:admin_api",
|
||||
"compute_extension:admin_actions:createBackup": "rule:admin_or_owner",
|
||||
"compute_extension:admin_actions:migrateLive": "rule:admin_api",
|
||||
"compute_extension:admin_actions:resetState": "rule:admin_api",
|
||||
"compute_extension:admin_actions:migrate": "rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions": "rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:pause": "rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:unpause": "rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:suspend": "rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:resume": "rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:lock": "rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:unlock": "rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:reset_network": "rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:inject_network_info": "rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:create_backup": "rule:admin_or_owner",
|
||||
"compute_extension:v3:os-admin-actions:migrate_live": "rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:reset_state": "rule:admin_api",
|
||||
"compute_extension:v3:os-admin-actions:migrate": "rule:admin_api",
|
||||
"compute_extension:v3:os-admin-password": "",
|
||||
"compute_extension:aggregates": "rule:admin_api",
|
||||
"compute_extension:v3:os-aggregates": "rule:admin_api",
|
||||
"compute_extension:agents": "rule:admin_api",
|
||||
"compute_extension:v3:os-agents": "rule:admin_api",
|
||||
"compute_extension:attach_interfaces": "",
|
||||
"compute_extension:v3:os-attach-interfaces": "",
|
||||
"compute_extension:baremetal_nodes": "rule:admin_api",
|
||||
"compute_extension:v3:os-baremetal-nodes": "rule:admin_api",
|
||||
"compute_extension:cells": "rule:admin_api",
|
||||
"compute_extension:v3:os-cells": "rule:admin_api",
|
||||
"compute_extension:certificates": "",
|
||||
"compute_extension:v3:os-certificates": "",
|
||||
"compute_extension:cloudpipe": "rule:admin_api",
|
||||
"compute_extension:cloudpipe_update": "rule:admin_api",
|
||||
"compute_extension:console_output": "",
|
||||
"compute_extension:v3:consoles:discoverable": "",
|
||||
"compute_extension:v3:os-console-output": "",
|
||||
"compute_extension:consoles": "",
|
||||
"compute_extension:v3:os-remote-consoles": "",
|
||||
"compute_extension:coverage_ext": "rule:admin_api",
|
||||
"compute_extension:v3:os-coverage": "rule:admin_api",
|
||||
"compute_extension:createserverext": "",
|
||||
"compute_extension:deferred_delete": "",
|
||||
"compute_extension:v3:os-deferred-delete": "",
|
||||
"compute_extension:disk_config": "",
|
||||
"compute_extension:evacuate": "rule:admin_api",
|
||||
"compute_extension:v3:os-evacuate": "rule:admin_api",
|
||||
"compute_extension:extended_server_attributes": "rule:admin_api",
|
||||
"compute_extension:v3:os-extended-server-attributes": "rule:admin_api",
|
||||
"compute_extension:extended_status": "",
|
||||
"compute_extension:v3:os-extended-status": "",
|
||||
"compute_extension:extended_availability_zone": "",
|
||||
"compute_extension:v3:os-extended-availability-zone": "",
|
||||
"compute_extension:extended_ips": "",
|
||||
"compute_extension:extended_ips_mac": "",
|
||||
"compute_extension:extended_vif_net": "",
|
||||
"compute_extension:v3:extension_info:discoverable": "",
|
||||
"compute_extension:extended_volumes": "",
|
||||
"compute_extension:v3:os-extended-volumes": "",
|
||||
"compute_extension:v3:os-extended-volumes:attach": "",
|
||||
"compute_extension:v3:os-extended-volumes:detach": "",
|
||||
"compute_extension:fixed_ips": "rule:admin_api",
|
||||
"compute_extension:v3:os-fixed-ips:discoverable": "",
|
||||
"compute_extension:v3:os-fixed-ips": "rule:admin_api",
|
||||
"compute_extension:flavor_access": "",
|
||||
"compute_extension:v3:os-flavor-access": "",
|
||||
"compute_extension:flavor_disabled": "",
|
||||
"compute_extension:v3:os-flavor-disabled": "",
|
||||
"compute_extension:flavor_rxtx": "",
|
||||
"compute_extension:v3:os-flavor-rxtx": "",
|
||||
"compute_extension:flavor_swap": "",
|
||||
"compute_extension:flavorextradata": "",
|
||||
"compute_extension:flavorextraspecs:index": "",
|
||||
"compute_extension:flavorextraspecs:show": "",
|
||||
"compute_extension:flavorextraspecs:create": "rule:admin_api",
|
||||
"compute_extension:flavorextraspecs:update": "rule:admin_api",
|
||||
"compute_extension:flavorextraspecs:delete": "rule:admin_api",
|
||||
"compute_extension:v3:flavor-extra-specs:index": "",
|
||||
"compute_extension:v3:flavor-extra-specs:show": "",
|
||||
"compute_extension:v3:flavor-extra-specs:create": "rule:admin_api",
|
||||
"compute_extension:v3:flavor-extra-specs:update": "rule:admin_api",
|
||||
"compute_extension:v3:flavor-extra-specs:delete": "rule:admin_api",
|
||||
"compute_extension:flavormanage": "rule:admin_api",
|
||||
"compute_extension:floating_ip_dns": "",
|
||||
"compute_extension:floating_ip_pools": "",
|
||||
"compute_extension:floating_ips": "",
|
||||
"compute_extension:floating_ips_bulk": "rule:admin_api",
|
||||
"compute_extension:fping": "",
|
||||
"compute_extension:fping:all_tenants": "rule:admin_api",
|
||||
"compute_extension:hide_server_addresses": "is_admin:False",
|
||||
"compute_extension:v3:os-hide-server-addresses": "is_admin:False",
|
||||
"compute_extension:hosts": "rule:admin_api",
|
||||
"compute_extension:v3:os-hosts": "rule:admin_api",
|
||||
"compute_extension:hypervisors": "rule:admin_api",
|
||||
"compute_extension:v3:os-hypervisors": "rule:admin_api",
|
||||
"compute_extension:image_size": "",
|
||||
"compute_extension:v3:os-image-metadata": "",
|
||||
"compute_extension:v3:os-images": "",
|
||||
"compute_extension:instance_actions": "",
|
||||
"compute_extension:v3:os-instance-actions": "",
|
||||
"compute_extension:instance_actions:events": "rule:admin_api",
|
||||
"compute_extension:v3:os-instance-actions:events": "rule:admin_api",
|
||||
"compute_extension:instance_usage_audit_log": "rule:admin_api",
|
||||
"compute_extension:v3:os-instance-usage-audit-log": "rule:admin_api",
|
||||
"compute_extension:v3:ips:discoverable": "",
|
||||
"compute_extension:keypairs": "",
|
||||
"compute_extension:keypairs:index": "",
|
||||
"compute_extension:keypairs:show": "",
|
||||
"compute_extension:keypairs:create": "",
|
||||
"compute_extension:keypairs:delete": "",
|
||||
"compute_extension:v3:os-keypairs:discoverable": "",
|
||||
"compute_extension:v3:os-keypairs": "",
|
||||
"compute_extension:v3:os-keypairs:index": "",
|
||||
"compute_extension:v3:os-keypairs:show": "",
|
||||
"compute_extension:v3:os-keypairs:create": "",
|
||||
"compute_extension:v3:os-keypairs:delete": "",
|
||||
"compute_extension:multinic": "",
|
||||
"compute_extension:v3:os-multinic": "",
|
||||
"compute_extension:networks": "rule:admin_api",
|
||||
"compute_extension:networks:view": "",
|
||||
"compute_extension:networks_associate": "rule:admin_api",
|
||||
"compute_extension:quotas:show": "",
|
||||
"compute_extension:quotas:update": "rule:admin_api",
|
||||
"compute_extension:quotas:delete": "rule:admin_api",
|
||||
"compute_extension:v3:os-quota-sets:show": "",
|
||||
"compute_extension:v3:os-quota-sets:update": "rule:admin_api",
|
||||
"compute_extension:v3:os-quota-sets:delete": "rule:admin_api",
|
||||
"compute_extension:quota_classes": "",
|
||||
"compute_extension:v3:os-quota-class-sets": "",
|
||||
"compute_extension:rescue": "",
|
||||
"compute_extension:v3:os-rescue": "",
|
||||
"compute_extension:security_group_default_rules": "rule:admin_api",
|
||||
"compute_extension:security_groups": "",
|
||||
"compute_extension:v3:os-security-groups": "",
|
||||
"compute_extension:server_diagnostics": "rule:admin_api",
|
||||
"compute_extension:v3:os-server-diagnostics": "rule:admin_api",
|
||||
"compute_extension:server_password": "",
|
||||
"compute_extension:v3:os-server-password": "",
|
||||
"compute_extension:server_usage": "",
|
||||
"compute_extension:v3:os-server-usage": "",
|
||||
"compute_extension:services": "rule:admin_api",
|
||||
"compute_extension:v3:os-services": "rule:admin_api",
|
||||
"compute_extension:v3:servers:discoverable": "",
|
||||
"compute_extension:shelve": "",
|
||||
"compute_extension:shelveOffload": "rule:admin_api",
|
||||
"compute_extension:v3:os-shelve:shelve": "",
|
||||
"compute_extension:v3:os-shelve:shelve_offload": "rule:admin_api",
|
||||
"compute_extension:simple_tenant_usage:show": "rule:admin_or_owner",
|
||||
"compute_extension:v3:os-simple-tenant-usage:show": "rule:admin_or_owner",
|
||||
"compute_extension:simple_tenant_usage:list": "rule:admin_api",
|
||||
"compute_extension:v3:os-simple-tenant-usage:list": "rule:admin_api",
|
||||
"compute_extension:unshelve": "",
|
||||
"compute_extension:v3:os-shelve:unshelve": "",
|
||||
"compute_extension:users": "rule:admin_api",
|
||||
"compute_extension:virtual_interfaces": "",
|
||||
"compute_extension:virtual_storage_arrays": "",
|
||||
"compute_extension:volumes": "",
|
||||
"compute_extension:volume_attachments:index": "",
|
||||
"compute_extension:volume_attachments:show": "",
|
||||
"compute_extension:volume_attachments:create": "",
|
||||
"compute_extension:volume_attachments:update": "",
|
||||
"compute_extension:volume_attachments:delete": "",
|
||||
"compute_extension:volumetypes": "",
|
||||
"compute_extension:availability_zone:list": "",
|
||||
"compute_extension:v3:os-availability-zone:list": "",
|
||||
"compute_extension:availability_zone:detail": "rule:admin_api",
|
||||
"compute_extension:v3:os-availability-zone:detail": "rule:admin_api",
|
||||
"compute_extension:used_limits_for_admin": "rule:admin_api",
|
||||
"compute_extension:v3:os-used-limits": "",
|
||||
"compute_extension:v3:os-used-limits:tenant": "rule:admin_api",
|
||||
"compute_extension:migrations:index": "rule:admin_api",
|
||||
"compute_extension:v3:os-migrations:index": "rule:admin_api",
|
||||
"volume:create": "",
|
||||
"volume:get_all": "",
|
||||
"volume:get_volume_metadata": "",
|
||||
"volume:get_snapshot": "",
|
||||
"volume:get_all_snapshots": "",
|
||||
"volume_extension:types_manage": "rule:admin_api",
|
||||
"volume_extension:types_extra_specs": "rule:admin_api",
|
||||
"volume_extension:volume_admin_actions:reset_status": "rule:admin_api",
|
||||
"volume_extension:snapshot_admin_actions:reset_status": "rule:admin_api",
|
||||
"volume_extension:volume_admin_actions:force_delete": "rule:admin_api",
|
||||
"network:get_all": "",
|
||||
"network:get": "",
|
||||
"network:create": "",
|
||||
"network:delete": "",
|
||||
"network:associate": "",
|
||||
"network:disassociate": "",
|
||||
"network:get_vifs_by_instance": "",
|
||||
"network:allocate_for_instance": "",
|
||||
"network:deallocate_for_instance": "",
|
||||
"network:validate_networks": "",
|
||||
"network:get_instance_uuids_by_ip_filter": "",
|
||||
"network:get_instance_id_by_floating_address": "",
|
||||
"network:setup_networks_on_host": "",
|
||||
"network:get_backdoor_port": "",
|
||||
"network:get_floating_ip": "",
|
||||
"network:get_floating_ip_pools": "",
|
||||
"network:get_floating_ip_by_address": "",
|
||||
"network:get_floating_ips_by_project": "",
|
||||
"network:get_floating_ips_by_fixed_address": "",
|
||||
"network:allocate_floating_ip": "",
|
||||
"network:deallocate_floating_ip": "",
|
||||
"network:associate_floating_ip": "",
|
||||
"network:disassociate_floating_ip": "",
|
||||
"network:release_floating_ip": "",
|
||||
"network:migrate_instance_start": "",
|
||||
"network:migrate_instance_finish": "",
|
||||
"network:get_fixed_ip": "",
|
||||
"network:get_fixed_ip_by_address": "",
|
||||
"network:add_fixed_ip_to_instance": "",
|
||||
"network:remove_fixed_ip_from_instance": "",
|
||||
"network:add_network_to_project": "",
|
||||
"network:get_instance_nw_info": "",
|
||||
"network:get_dns_domains": "",
|
||||
"network:add_dns_entry": "",
|
||||
"network:modify_dns_entry": "",
|
||||
"network:delete_dns_entry": "",
|
||||
"network:get_dns_entries_by_address": "",
|
||||
"network:get_dns_entries_by_name": "",
|
||||
"network:create_private_dns_domain": "",
|
||||
"network:create_public_dns_domain": "",
|
||||
"network:delete_dns_domain": ""
|
||||
}
|
@ -1,14 +1,14 @@
|
||||
{
|
||||
"uuid":"d8e02d56-2648-49a3-bf97-6be8f1204f38",
|
||||
"availability_zone":"nova",
|
||||
"hostname":"test.novalocal",
|
||||
"launch_index":0,
|
||||
"meta":{
|
||||
"priority":"low",
|
||||
"role":"webserver"
|
||||
},
|
||||
"public_keys":{
|
||||
"mykey":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDYVEprvtYJXVOBN0XNKVVRNCRX6BlnNbI+USLGais1sUWPwtSg7z9K9vhbYAPUZcq8c/s5S9dg5vTHbsiyPCIDOKyeHba4MUJq8Oh5b2i71/3BISpyxTBH/uZDHdslW2a+SrPDCeuMMoss9NFhBdKtDkdG9zyi0ibmCP6yMdEX8Q== Generated by Nova\n"
|
||||
},
|
||||
"name":"test"
|
||||
"uuid": "d8e02d56-2648-49a3-bf97-6be8f1204f38",
|
||||
"availability_zone": "nova",
|
||||
"hostname": "test.novalocal",
|
||||
"launch_index": 0,
|
||||
"meta": {
|
||||
"priority": "low",
|
||||
"role": "webserver"
|
||||
},
|
||||
"public_keys": {
|
||||
"mykey": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDYVEprvtYJXVOBN0XNKVVRNCRX6BlnNbI+USLGais1sUWPwtSg7z9K9vhbYAPUZcq8c/s5S9dg5vTHbsiyPCIDOKyeHba4MUJq8Oh5b2i71/3BISpyxTBH/uZDHdslW2a+SrPDCeuMMoss9NFhBdKtDkdG9zyi0ibmCP6yMdEX8Q== Generated by Nova\n"
|
||||
},
|
||||
"name": "test"
|
||||
}
|
@ -1,113 +1,107 @@
|
||||
{
|
||||
"admin_or_owner":[
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"tenant_id:%(tenant_id)s"
|
||||
]
|
||||
],
|
||||
"admin_or_network_owner":[
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"tenant_id:%(network_tenant_id)s"
|
||||
]
|
||||
],
|
||||
"admin_only":[
|
||||
[
|
||||
"role:admin"
|
||||
]
|
||||
],
|
||||
"regular_user":[
|
||||
|
||||
],
|
||||
"shared":[
|
||||
[
|
||||
"field:networks:shared=True"
|
||||
]
|
||||
],
|
||||
"default":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"create_subnet":[
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"get_subnet":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
],
|
||||
[
|
||||
"rule:shared"
|
||||
]
|
||||
],
|
||||
"update_subnet":[
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"delete_subnet":[
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"create_network":[
|
||||
|
||||
],
|
||||
"get_network":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
],
|
||||
[
|
||||
"rule:shared"
|
||||
]
|
||||
],
|
||||
"create_network:shared":[
|
||||
[
|
||||
"rule:admin_only"
|
||||
]
|
||||
],
|
||||
"update_network":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"delete_network":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"create_port":[
|
||||
|
||||
],
|
||||
"create_port:mac_address":[
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"create_port:fixed_ips":[
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"get_port":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"update_port":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"delete_port":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
]
|
||||
"admin_or_owner": [
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"tenant_id:%(tenant_id)s"
|
||||
]
|
||||
],
|
||||
"admin_or_network_owner": [
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"tenant_id:%(network_tenant_id)s"
|
||||
]
|
||||
],
|
||||
"admin_only": [
|
||||
[
|
||||
"role:admin"
|
||||
]
|
||||
],
|
||||
"regular_user": [],
|
||||
"shared": [
|
||||
[
|
||||
"field:networks:shared=True"
|
||||
]
|
||||
],
|
||||
"default": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"create_subnet": [
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"get_subnet": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
],
|
||||
[
|
||||
"rule:shared"
|
||||
]
|
||||
],
|
||||
"update_subnet": [
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"delete_subnet": [
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"create_network": [],
|
||||
"get_network": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
],
|
||||
[
|
||||
"rule:shared"
|
||||
]
|
||||
],
|
||||
"create_network:shared": [
|
||||
[
|
||||
"rule:admin_only"
|
||||
]
|
||||
],
|
||||
"update_network": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"delete_network": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"create_port": [],
|
||||
"create_port:mac_address": [
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"create_port:fixed_ips": [
|
||||
[
|
||||
"rule:admin_or_network_owner"
|
||||
]
|
||||
],
|
||||
"get_port": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"update_port": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"delete_port": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
]
|
||||
}
|
@ -1,346 +1,346 @@
|
||||
{
|
||||
"admin_or_owner":[
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"project_id:%(project_id)s"
|
||||
]
|
||||
],
|
||||
"default":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute:create":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:create:attach_network":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:create:attach_volume":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:get_all":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:unlock_override":[
|
||||
"rule:admin_api"
|
||||
],
|
||||
"admin_api":[
|
||||
[
|
||||
"role:admin"
|
||||
]
|
||||
],
|
||||
"compute_extension:accounts":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:pause":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:unpause":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:suspend":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:resume":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:lock":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:unlock":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:resetNetwork":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:injectNetworkInfo":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:createBackup":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:migrateLive":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:migrate":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:aggregates":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:certificates":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:cloudpipe":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:console_output":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:consoles":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:createserverext":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:deferred_delete":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:disk_config":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:evacuate":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:extended_server_attributes":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:extended_status":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavorextradata":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavorextraspecs":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavormanage":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:floating_ip_dns":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:floating_ip_pools":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:floating_ips":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:hosts":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:keypairs":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:multinic":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:networks":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:quotas":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:rescue":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:security_groups":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:server_action_list":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:server_diagnostics":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:simple_tenant_usage:show":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:simple_tenant_usage:list":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:users":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:virtual_interfaces":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:virtual_storage_arrays":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volumes":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:index":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:show":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:create":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:delete":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volumetypes":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:create":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_all":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_volume_metadata":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_snapshot":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_all_snapshots":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_all_networks":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_network":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_network":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:disassociate_network":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_vifs_by_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:allocate_for_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:deallocate_for_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:validate_networks":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_instance_uuids_by_ip_filter":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip_pools":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip_by_address":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ips_by_project":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ips_by_fixed_address":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:allocate_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:deallocate_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:associate_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:disassociate_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_fixed_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_fixed_ip_to_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:remove_fixed_ip_from_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_network_to_project":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_instance_nw_info":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_domains":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_dns_entry":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:modify_dns_entry":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_dns_entry":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_entries_by_address":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_entries_by_name":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:create_private_dns_domain":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:create_public_dns_domain":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_dns_domain":[
|
||||
"role:compute-user"
|
||||
]
|
||||
"admin_or_owner": [
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"project_id:%(project_id)s"
|
||||
]
|
||||
],
|
||||
"default": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute:create": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:create:attach_network": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:create:attach_volume": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:get_all": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:unlock_override": [
|
||||
"rule:admin_api"
|
||||
],
|
||||
"admin_api": [
|
||||
[
|
||||
"role:admin"
|
||||
]
|
||||
],
|
||||
"compute_extension:accounts": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:pause": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:unpause": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:suspend": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:resume": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:lock": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:unlock": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:resetNetwork": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:injectNetworkInfo": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:createBackup": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:migrateLive": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:migrate": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:aggregates": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:certificates": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:cloudpipe": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:console_output": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:consoles": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:createserverext": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:deferred_delete": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:disk_config": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:evacuate": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:extended_server_attributes": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:extended_status": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavorextradata": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavorextraspecs": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavormanage": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:floating_ip_dns": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:floating_ip_pools": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:floating_ips": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:hosts": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:keypairs": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:multinic": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:networks": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:quotas": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:rescue": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:security_groups": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:server_action_list": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:server_diagnostics": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:simple_tenant_usage:show": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:simple_tenant_usage:list": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:users": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:virtual_interfaces": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:virtual_storage_arrays": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volumes": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:index": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:show": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:create": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:delete": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volumetypes": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:create": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_all": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_volume_metadata": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_snapshot": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_all_snapshots": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_all_networks": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_network": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_network": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:disassociate_network": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_vifs_by_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:allocate_for_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:deallocate_for_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:validate_networks": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_instance_uuids_by_ip_filter": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip_pools": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip_by_address": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ips_by_project": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ips_by_fixed_address": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:allocate_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:deallocate_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:associate_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:disassociate_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_fixed_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_fixed_ip_to_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:remove_fixed_ip_from_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_network_to_project": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_instance_nw_info": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_domains": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_dns_entry": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:modify_dns_entry": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_dns_entry": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_entries_by_address": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_entries_by_name": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:create_private_dns_domain": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:create_public_dns_domain": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_dns_domain": [
|
||||
"role:compute-user"
|
||||
]
|
||||
}
|
@ -1,346 +1,346 @@
|
||||
{
|
||||
"admin_or_owner":[
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"project_id:%(project_id)s"
|
||||
]
|
||||
],
|
||||
"default":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute:create":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:create:attach_network":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:create:attach_volume":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:get_all":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:unlock_override":[
|
||||
"rule:admin_api"
|
||||
],
|
||||
"admin_api":[
|
||||
[
|
||||
"role:admin"
|
||||
]
|
||||
],
|
||||
"compute_extension:accounts":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:pause":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:unpause":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:suspend":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:resume":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:lock":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:unlock":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:resetNetwork":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:injectNetworkInfo":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:createBackup":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:migrateLive":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:migrate":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:aggregates":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:certificates":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:cloudpipe":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:console_output":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:consoles":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:createserverext":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:deferred_delete":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:disk_config":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:evacuate":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:extended_server_attributes":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:extended_status":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavorextradata":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavorextraspecs":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavormanage":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:floating_ip_dns":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:floating_ip_pools":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:floating_ips":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:hosts":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:keypairs":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:multinic":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:networks":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:quotas":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:rescue":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:security_groups":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:server_action_list":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:server_diagnostics":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:simple_tenant_usage:show":[
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:simple_tenant_usage:list":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:users":[
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:virtual_interfaces":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:virtual_storage_arrays":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volumes":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:index":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:show":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:create":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:delete":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volumetypes":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:create":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_all":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_volume_metadata":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_snapshot":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_all_snapshots":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_all_networks":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_network":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_network":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:disassociate_network":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_vifs_by_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:allocate_for_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:deallocate_for_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:validate_networks":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_instance_uuids_by_ip_filter":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip_pools":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip_by_address":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ips_by_project":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ips_by_fixed_address":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:allocate_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:deallocate_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:associate_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:disassociate_floating_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_fixed_ip":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_fixed_ip_to_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:remove_fixed_ip_from_instance":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_network_to_project":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_instance_nw_info":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_domains":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_dns_entry":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:modify_dns_entry":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_dns_entry":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_entries_by_address":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_entries_by_name":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:create_private_dns_domain":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:create_public_dns_domain":[
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_dns_domain":[
|
||||
"role:compute-user"
|
||||
]
|
||||
"admin_or_owner": [
|
||||
[
|
||||
"role:admin"
|
||||
],
|
||||
[
|
||||
"project_id:%(project_id)s"
|
||||
]
|
||||
],
|
||||
"default": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute:create": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:create:attach_network": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:create:attach_volume": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:get_all": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute:unlock_override": [
|
||||
"rule:admin_api"
|
||||
],
|
||||
"admin_api": [
|
||||
[
|
||||
"role:admin"
|
||||
]
|
||||
],
|
||||
"compute_extension:accounts": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:pause": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:unpause": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:suspend": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:resume": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:lock": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:unlock": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:resetNetwork": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:injectNetworkInfo": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:createBackup": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:migrateLive": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:admin_actions:migrate": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:aggregates": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:certificates": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:cloudpipe": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:console_output": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:consoles": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:createserverext": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:deferred_delete": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:disk_config": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:evacuate": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:extended_server_attributes": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:extended_status": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavorextradata": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavorextraspecs": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:flavormanage": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:floating_ip_dns": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:floating_ip_pools": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:floating_ips": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:hosts": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:keypairs": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:multinic": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:networks": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:quotas": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:rescue": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:security_groups": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:server_action_list": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:server_diagnostics": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:simple_tenant_usage:show": [
|
||||
[
|
||||
"rule:admin_or_owner"
|
||||
]
|
||||
],
|
||||
"compute_extension:simple_tenant_usage:list": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:users": [
|
||||
[
|
||||
"rule:admin_api"
|
||||
]
|
||||
],
|
||||
"compute_extension:virtual_interfaces": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:virtual_storage_arrays": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volumes": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:index": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:show": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:create": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volume_attachments:delete": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"compute_extension:volumetypes": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:create": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_all": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_volume_metadata": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_snapshot": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"volume:get_all_snapshots": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_all_networks": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_network": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_network": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:disassociate_network": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_vifs_by_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:allocate_for_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:deallocate_for_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:validate_networks": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_instance_uuids_by_ip_filter": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip_pools": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ip_by_address": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ips_by_project": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_floating_ips_by_fixed_address": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:allocate_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:deallocate_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:associate_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:disassociate_floating_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_fixed_ip": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_fixed_ip_to_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:remove_fixed_ip_from_instance": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_network_to_project": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_instance_nw_info": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_domains": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:add_dns_entry": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:modify_dns_entry": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_dns_entry": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_entries_by_address": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:get_dns_entries_by_name": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:create_private_dns_domain": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:create_public_dns_domain": [
|
||||
"role:compute-user"
|
||||
],
|
||||
"network:delete_dns_domain": [
|
||||
"role:compute-user"
|
||||
]
|
||||
}
|
@ -1,13 +1,13 @@
|
||||
{
|
||||
"server":{
|
||||
"name":"server-1",
|
||||
"imageRef":"cedef40a-ed67-4d10-800e-17455edce175",
|
||||
"flavorRef":"1"
|
||||
},
|
||||
"os:scheduler_hints":{
|
||||
"different_host":[
|
||||
"a0cf03a5-d921-4877-bb5c-86d26cf818e1",
|
||||
"8c19174f-4220-44f0-824a-cd1eeef10287"
|
||||
]
|
||||
}
|
||||
"server": {
|
||||
"name": "server-1",
|
||||
"imageRef": "cedef40a-ed67-4d10-800e-17455edce175",
|
||||
"flavorRef": "1"
|
||||
},
|
||||
"os:scheduler_hints": {
|
||||
"different_host": [
|
||||
"a0cf03a5-d921-4877-bb5c-86d26cf818e1",
|
||||
"8c19174f-4220-44f0-824a-cd1eeef10287"
|
||||
]
|
||||
}
|
||||
}
|
@ -1,10 +1,10 @@
|
||||
{
|
||||
"server":{
|
||||
"name":"server-1",
|
||||
"imageRef":"cedef40a-ed67-4d10-800e-17455edce175",
|
||||
"flavorRef":"1"
|
||||
},
|
||||
"os:scheduler_hints":{
|
||||
"query":"[>=,$free_ram_mb,1024]"
|
||||
}
|
||||
"server": {
|
||||
"name": "server-1",
|
||||
"imageRef": "cedef40a-ed67-4d10-800e-17455edce175",
|
||||
"flavorRef": "1"
|
||||
},
|
||||
"os:scheduler_hints": {
|
||||
"query": "[>=,$free_ram_mb,1024]"
|
||||
}
|
||||
}
|
@ -1,13 +1,13 @@
|
||||
{
|
||||
"server":{
|
||||
"name":"server-1",
|
||||
"imageRef":"cedef40a-ed67-4d10-800e-17455edce175",
|
||||
"flavorRef":"1"
|
||||
},
|
||||
"os:scheduler_hints":{
|
||||
"same_host":[
|
||||
"a0cf03a5-d921-4877-bb5c-86d26cf818e1",
|
||||
"8c19174f-4220-44f0-824a-cd1eeef10287"
|
||||
]
|
||||
}
|
||||
"server": {
|
||||
"name": "server-1",
|
||||
"imageRef": "cedef40a-ed67-4d10-800e-17455edce175",
|
||||
"flavorRef": "1"
|
||||
},
|
||||
"os:scheduler_hints": {
|
||||
"same_host": [
|
||||
"a0cf03a5-d921-4877-bb5c-86d26cf818e1",
|
||||
"8c19174f-4220-44f0-824a-cd1eeef10287"
|
||||
]
|
||||
}
|
||||
}
|
@ -1,11 +1,11 @@
|
||||
{
|
||||
"server":{
|
||||
"name":"server-1",
|
||||
"imageRef":"cedef40a-ed67-4d10-800e-17455edce175",
|
||||
"flavorRef":"1"
|
||||
},
|
||||
"os:scheduler_hints":{
|
||||
"build_near_host_ip":"192.168.1.1",
|
||||
"cidr":"24"
|
||||
}
|
||||
"server": {
|
||||
"name": "server-1",
|
||||
"imageRef": "cedef40a-ed67-4d10-800e-17455edce175",
|
||||
"flavorRef": "1"
|
||||
},
|
||||
"os:scheduler_hints": {
|
||||
"build_near_host_ip": "192.168.1.1",
|
||||
"cidr": "24"
|
||||
}
|
||||
}
|
@ -1,13 +1,13 @@
|
||||
{
|
||||
"token":{
|
||||
"expires":"2013-06-26T16:52:50Z",
|
||||
"id":"MIIKXAY...",
|
||||
"issued_at":"2013-06-25T16:52:50.622502",
|
||||
"tenant":{
|
||||
"description":null,
|
||||
"enabled":true,
|
||||
"id":"912426c8f4c04fb0a07d2547b0704185",
|
||||
"name":"demo"
|
||||
}
|
||||
}
|
||||
"token": {
|
||||
"expires": "2013-06-26T16:52:50Z",
|
||||
"id": "MIIKXAY...",
|
||||
"issued_at": "2013-06-25T16:52:50.622502",
|
||||
"tenant": {
|
||||
"description": null,
|
||||
"enabled": true,
|
||||
"id": "912426c8f4c04fb0a07d2547b0704185",
|
||||
"name": "demo"
|
||||
}
|
||||
}
|
||||
}
|
@ -1,26 +1,26 @@
|
||||
{
|
||||
"parent":{
|
||||
"name":"parent",
|
||||
"api_url":"http://api.example.com:8774",
|
||||
"transport_url":"rabbit://rabbit.example.com",
|
||||
"weight_offset":0.0,
|
||||
"weight_scale":1.0,
|
||||
"is_parent":true
|
||||
},
|
||||
"cell1":{
|
||||
"name":"cell1",
|
||||
"api_url":"http://api.example.com:8774",
|
||||
"transport_url":"rabbit://rabbit1.example.com",
|
||||
"weight_offset":0.0,
|
||||
"weight_scale":1.0,
|
||||
"is_parent":false
|
||||
},
|
||||
"cell2":{
|
||||
"name":"cell2",
|
||||
"api_url":"http://api.example.com:8774",
|
||||
"transport_url":"rabbit://rabbit2.example.com",
|
||||
"weight_offset":0.0,
|
||||
"weight_scale":1.0,
|
||||
"is_parent":false
|
||||
}
|
||||
}
|
||||
"parent": {
|
||||
"name": "parent",
|
||||
"api_url": "http://api.example.com:8774",
|
||||
"transport_url": "rabbit://rabbit.example.com",
|
||||
"weight_offset": 0.0,
|
||||
"weight_scale": 1.0,
|
||||
"is_parent": true
|
||||
},
|
||||
"cell1": {
|
||||
"name": "cell1",
|
||||
"api_url": "http://api.example.com:8774",
|
||||
"transport_url": "rabbit://rabbit1.example.com",
|
||||
"weight_offset": 0.0,
|
||||
"weight_scale": 1.0,
|
||||
"is_parent": false
|
||||
},
|
||||
"cell2": {
|
||||
"name": "cell2",
|
||||
"api_url": "http://api.example.com:8774",
|
||||
"transport_url": "rabbit://rabbit2.example.com",
|
||||
"weight_offset": 0.0,
|
||||
"weight_scale": 1.0,
|
||||
"is_parent": false
|
||||
}
|
||||
}
|
@ -1,24 +1,24 @@
|
||||
{
|
||||
"availability_zone":"nova",
|
||||
"files":[
|
||||
{
|
||||
"content_path":"/content/0000",
|
||||
"path":"/etc/network/interfaces"
|
||||
},
|
||||
{
|
||||
"content_path":"/content/0001",
|
||||
"path":"known_hosts"
|
||||
}
|
||||
],
|
||||
"hostname":"test.novalocal",
|
||||
"launch_index":0,
|
||||
"name":"test",
|
||||
"meta":{
|
||||
"role":"webservers",
|
||||
"essential":"false"
|
||||
},
|
||||
"public_keys":{
|
||||
"mykey":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDBqUfVvCSez0/Wfpd8dLLgZXV9GtXQ7hnMN+Z0OWQUyebVEHey1CXuin0uY1cAJMhUq8j98SiW+cU0sU4J3x5l2+xi1bodDm1BtFWVeLIOQINpfV1n8fKjHB+ynPpe1F6tMDvrFGUlJs44t30BrujMXBe8Rq44cCk6wqyjATA3rQ== Generated by Nova\n"
|
||||
},
|
||||
"uuid":"83679162-1378-4288-a2d4-70e13ec132aa"
|
||||
"availability_zone": "nova",
|
||||
"files": [
|
||||
{
|
||||
"content_path": "/content/0000",
|
||||
"path": "/etc/network/interfaces"
|
||||
},
|
||||
{
|
||||
"content_path": "/content/0001",
|
||||
"path": "known_hosts"
|
||||
}
|
||||
],
|
||||
"hostname": "test.novalocal",
|
||||
"launch_index": 0,
|
||||
"name": "test",
|
||||
"meta": {
|
||||
"role": "webservers",
|
||||
"essential": "false"
|
||||
},
|
||||
"public_keys": {
|
||||
"mykey": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDBqUfVvCSez0/Wfpd8dLLgZXV9GtXQ7hnMN+Z0OWQUyebVEHey1CXuin0uY1cAJMhUq8j98SiW+cU0sU4J3x5l2+xi1bodDm1BtFWVeLIOQINpfV1n8fKjHB+ynPpe1F6tMDvrFGUlJs44t30BrujMXBe8Rq44cCk6wqyjATA3rQ== Generated by Nova\n"
|
||||
},
|
||||
"uuid": "83679162-1378-4288-a2d4-70e13ec132aa"
|
||||
}
|
@ -1,33 +1,33 @@
|
||||
{
|
||||
"ami-id":"ami-00000001",
|
||||
"ami-launch-index":0,
|
||||
"ami-manifest-path":"FIXME",
|
||||
"block-device-mapping":{
|
||||
"ami":"sda1",
|
||||
"ephemeral0":"sda2",
|
||||
"root":"/dev/sda1",
|
||||
"swap":"sda3"
|
||||
},
|
||||
"hostname":"test.novalocal",
|
||||
"instance-action":"none",
|
||||
"instance-id":"i-00000001",
|
||||
"instance-type":"m1.tiny",
|
||||
"kernel-id":"aki-00000002",
|
||||
"local-hostname":"test.novalocal",
|
||||
"local-ipv4":null,
|
||||
"placement":{
|
||||
"availability-zone":"nova"
|
||||
},
|
||||
"public-hostname":"test.novalocal",
|
||||
"public-ipv4":"",
|
||||
"public-keys":{
|
||||
"0":{
|
||||
"openssh-key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDBqUfVvCSez0/Wfpd8dLLgZXV9GtXQ7hnMN+Z0OWQUyebVEHey1CXuin0uY1cAJMhUq8j98SiW+cU0sU4J3x5l2+xi1bodDm1BtFWVeLIOQINpfV1n8fKjHB+ynPpe1F6tMDvrFGUlJs44t30BrujMXBe8Rq44cCk6wqyjATA3rQ== Generated by Nova\n"
|
||||
}
|
||||
},
|
||||
"ramdisk-id":"ari-00000003",
|
||||
"reservation-id":"r-7lfps8wj",
|
||||
"security-groups":[
|
||||
"default"
|
||||
]
|
||||
"ami-id": "ami-00000001",
|
||||
"ami-launch-index": 0,
|
||||
"ami-manifest-path": "FIXME",
|
||||
"block-device-mapping": {
|
||||
"ami": "sda1",
|
||||
"ephemeral0": "sda2",
|
||||
"root": "/dev/sda1",
|
||||
"swap": "sda3"
|
||||
},
|
||||
"hostname": "test.novalocal",
|
||||
"instance-action": "none",
|
||||
"instance-id": "i-00000001",
|
||||
"instance-type": "m1.tiny",
|
||||
"kernel-id": "aki-00000002",
|
||||
"local-hostname": "test.novalocal",
|
||||
"local-ipv4": null,
|
||||
"placement": {
|
||||
"availability-zone": "nova"
|
||||
},
|
||||
"public-hostname": "test.novalocal",
|
||||
"public-ipv4": "",
|
||||
"public-keys": {
|
||||
"0": {
|
||||
"openssh-key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDBqUfVvCSez0/Wfpd8dLLgZXV9GtXQ7hnMN+Z0OWQUyebVEHey1CXuin0uY1cAJMhUq8j98SiW+cU0sU4J3x5l2+xi1bodDm1BtFWVeLIOQINpfV1n8fKjHB+ynPpe1F6tMDvrFGUlJs44t30BrujMXBe8Rq44cCk6wqyjATA3rQ== Generated by Nova\n"
|
||||
}
|
||||
},
|
||||
"ramdisk-id": "ari-00000003",
|
||||
"reservation-id": "r-7lfps8wj",
|
||||
"security-groups": [
|
||||
"default"
|
||||
]
|
||||
}
|
Loading…
x
Reference in New Issue
Block a user