Allow to configure policy_dirs
This patch makes it possible to override the current service default, which is /etc/<service>/policy.d . Change-Id: I8ab033c275f29a34a89a5ea9c2560c9992fd06cf
This commit is contained in:
parent
c9e25d965a
commit
f64159bc87
@ -32,11 +32,16 @@
|
||||
# (Optional) Path to the magnum policy.yaml file
|
||||
# Defaults to /etc/magnum/policy.yaml
|
||||
#
|
||||
# [*policy_dirs*]
|
||||
# (Optional) Path to the keystone policy folder
|
||||
# Defaults to $::os_service_default
|
||||
#
|
||||
class magnum::policy (
|
||||
$enforce_scope = $::os_service_default,
|
||||
$enforce_new_defaults = $::os_service_default,
|
||||
$policies = {},
|
||||
$policy_path = '/etc/magnum/policy.yaml',
|
||||
$policy_dirs = $::os_service_default,
|
||||
) {
|
||||
|
||||
include magnum::deps
|
||||
@ -56,7 +61,8 @@ class magnum::policy (
|
||||
oslo::policy { 'magnum_config':
|
||||
enforce_scope => $enforce_scope,
|
||||
enforce_new_defaults => $enforce_new_defaults,
|
||||
policy_file => $policy_path
|
||||
policy_file => $policy_path,
|
||||
policy_dirs => $policy_dirs,
|
||||
}
|
||||
|
||||
}
|
||||
|
5
releasenotes/notes/policy-dirs-ff9e665292115ef5.yaml
Normal file
5
releasenotes/notes/policy-dirs-ff9e665292115ef5.yaml
Normal file
@ -0,0 +1,5 @@
|
||||
---
|
||||
features:
|
||||
- |
|
||||
There is now a new policy_dirs parameter in the magnum::policy class,
|
||||
so one can set a custom path.
|
@ -7,6 +7,7 @@ describe 'magnum::policy' do
|
||||
:enforce_scope => false,
|
||||
:enforce_new_defaults => false,
|
||||
:policy_path => '/etc/magnum/policy.yaml',
|
||||
:policy_dirs => '/etc/magnum/policy.d',
|
||||
:policies => {
|
||||
'context_is_admin' => {
|
||||
'key' => 'context_is_admin',
|
||||
@ -28,6 +29,7 @@ describe 'magnum::policy' do
|
||||
:enforce_scope => false,
|
||||
:enforce_new_defaults => false,
|
||||
:policy_file => '/etc/magnum/policy.yaml',
|
||||
:policy_dirs => '/etc/magnum/policy.d',
|
||||
)
|
||||
end
|
||||
end
|
||||
|
Loading…
Reference in New Issue
Block a user