Merge "Add support for the oslo_policy/enforce_scope parameter"

manifests/policy.pp

@@ -4,6 +4,10 @@
 #
 # === Parameters
 #
+# [*enforce_scope*]
+#  (Optional) Whether or not to enforce scope when evaluating policies.
+#  Defaults to $::os_service_default.
+#
 # [*policies*]
 #   (Optional) Set of policies to configure for glance
 #   Example :
@@ -24,6 +28,7 @@
 #   Defaults to /etc/glance/policy.yaml
 #
 class glance::policy (
+  $enforce_scope = $::os_service_default,
   $policies      = {},
   $policy_path   = '/etc/glance/policy.yaml',
 ) {
@@ -38,12 +43,13 @@ class glance::policy (
     file_user   => 'root',
     file_group  => $::glance::params::group,
     file_format => 'yaml',
-    require     => Anchor['glance::config::begin'],
-    notify      => Anchor['glance::config::end'],
   }
 
   create_resources('openstacklib::policy::base', $policies)
 
-  oslo::policy { 'glance_api_config': policy_file => $policy_path }
+  oslo::policy { 'glance_api_config':
+    enforce_scope => $enforce_scope,
+    policy_file   => $policy_path
+  }
 
 }

releasenotes/notes/oslo_policy-enforce_scope-422b5bb6f96a7afe.yaml

@@ -0,0 +1,5 @@
+---
+features:
+  - |
+    The new ``glance::policy::enforce_scope`` parameter has been added to
+    support the corresponding parameter in oslo.policy library.

spec/classes/glance_policy_spec.rb

@@ -1,10 +1,10 @@
 require 'spec_helper'
 
 describe 'glance::policy' do
-
+  shared_examples 'glance::policy' do
-  shared_examples_for 'glance policies' do
     let :params do
       {
+        :enforce_scope => false,
         :policy_path   => '/etc/glance/policy.yaml',
         :policies      => {
           'context_is_admin' => {
@@ -24,6 +24,7 @@ describe 'glance::policy' do
         :file_format => 'yaml',
       })
       is_expected.to contain_oslo__policy('glance_api_config').with(
+        :enforce_scope => false,
         :policy_file   => '/etc/glance/policy.yaml',
       )
     end
@@ -37,7 +38,7 @@ describe 'glance::policy' do
         facts.merge!(OSDefaults.get_facts())
       end
 
-      it_configures 'glance policies'
+      it_behaves_like 'glance::policy'
     end
   end
 end