From 52b069636df438eee19e5a8351aedf2fb1eee7cc Mon Sep 17 00:00:00 2001 From: Zuul Date: Wed, 6 Oct 2021 08:48:58 +0000 Subject: [PATCH] Update git submodules * Update tripleo-heat-templates from branch 'master' to 5640a60086d3a0ba4a39a2663ae0699d7b7409db - Merge "Implement a tool for converting policy.yaml files to heat templates" - Implement a tool for converting policy.yaml files to heat templates This commit adds a tool that parses a directory of service.yaml policy files and then converts them to the appropriate THT structure, using the necessary service variables and templating. The enable-secure-rbac.yaml is simply the current defaults generated from code. First, generate all the policy files for each OpenStack service: $ oslopolicy-sample-generator --namespace $SERVICE --output-file $DEST/$SERVICE.yaml Next, uncomment all the default policies as a starting point for making policy changes: $ sed -i 's/^#"/"/g' $DEST/$SERVICE.yaml Next you can make changes to the policy files to reflect the changes you want in your deployment. Finally, you can generate the necessary heat template: $ ./convert_policy_yaml_to_heat_template.py -d $DEST The tool outputs to stdout. It's up to the user to redirect to a file if they wish to save results. The enable-secure-rbac.yaml environment will be updated in subsequent patches to implement project personas. Change-Id: I9957243d307758f56b84cde3a408006d8161fa41 --- tripleo-heat-templates | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tripleo-heat-templates b/tripleo-heat-templates index 5147e8b3fa..5640a60086 160000 --- a/tripleo-heat-templates +++ b/tripleo-heat-templates @@ -1 +1 @@ -Subproject commit 5147e8b3fa5f249459b65f672cb2d2c35dff5754 +Subproject commit 5640a60086d3a0ba4a39a2663ae0699d7b7409db