Files
puppet-openstacklib/manifests/policy.pp
Takashi Kajinami a765cea047 Prepare for voxpupuli-puppet-lint-plugins
Fix new lint errors detected when full of the voxpupili lint plugins
are enabled.

Change-Id: I2bdb5c200f3937ae018a8c34485ef3bd4d833763
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2025-08-20 10:01:26 +09:00

86 lines
2.2 KiB
Puppet

# == Define: openstacklib::policies
#
# This resource is an helper to call the policy definition
#
# == Parameters:
#
# [*policy_path*]
# (Optional) Path to the policy file. This should be an asbolute path.
# Defaults to $name
#
# [*policies*]
# (Optional) Set of policies to configure. This parameter accepts a hash
# value and is used to define the openstacklib::policies::base defined-type
# resouces. For example
#
# {
# 'my-context_is_admin' => {
# 'key' => 'context_is_admin',
# 'value' => 'true'
# },
# 'default' => {
# 'value' => 'rule:admin_or_owner'
# }
# }
#
# adds the following rules to the policy file.
#
# context_is_admin: true
# default: rule:admin_or_owner
#
# Defaults to {}
#
# [*file_mode*]
# (Optional) Permission mode for the policy file
# Defaults to '0640'
#
# [*file_user*]
# (Optional) User for the policy file
# Defaults to undef
#
# [*file_group*]
# (Optional) Group for the policy file
# Defaults to undef
#
# [*file_format*]
# (Optional) Format for file contents. Valid value is 'yaml'.
# Defaults to 'yaml'.
#
# [*purge_config*]
# (Optional) Whether to set only the specified policy rules in the policy
# file.
# Defaults to false.
#
define openstacklib::policy (
Stdlib::Absolutepath $policy_path = $name,
Openstacklib::Policies $policies = {},
Stdlib::Filemode $file_mode = '0640',
$file_user = undef,
$file_group = undef,
Enum['yaml'] $file_format = 'yaml',
Boolean $purge_config = false,
) {
if empty($policies) {
create_resources('openstacklib::policy::default', {
$policy_path => {
file_mode => $file_mode,
file_user => $file_user,
file_group => $file_group,
file_format => $file_format,
purge_config => $purge_config,
},
})
} else {
$policy_defaults = {
file_path => $policy_path,
file_mode => $file_mode,
file_user => $file_user,
file_group => $file_group,
file_format => $file_format,
purge_config => $purge_config,
}
create_resources('openstacklib::policy::base', $policies, $policy_defaults)
}
}