40a15b5945
For fine-grained access control based on user and VNF information for API resources, this patch does the following things: 1.Add three comparison attributes of area, vendor, and tenant for the enhanced Tacker policy. 2.Convert special roles to API attributes in context. 3.Modify the API process to support Tacker policy authorize. 4.Add the Tacker policy filter to the list API processes. Implements: blueprint enhance-api-policy Change-Id: I5b4c39387860133a3bcf4544f18a6353c80773f6
26 lines
846 B
YAML
26 lines
846 B
YAML
- hosts: all
|
|
roles:
|
|
- ensure-db-cli-installed
|
|
- setup-k8s-nodes
|
|
- orchestrate-devstack
|
|
- modify-heat-policy
|
|
- setup-k8s-oidc
|
|
- setup-default-vim
|
|
- setup-helm
|
|
- role: setup-fake-prometheus-server
|
|
when: prometheus_setup is defined and prometheus_setup | bool
|
|
- role: setup-multi-tenant-vim
|
|
when: setup_multi_tenant is defined and setup_multi_tenant | bool
|
|
- role: setup-multi-az
|
|
when: setup_multi_az is defined and setup_multi_az | bool
|
|
- role: setup-fake-https-server
|
|
when: https_setup is defined and https_setup | bool
|
|
- role: config-enhanced-policy
|
|
when: config_enhanced_policy is defined and config_enhanced_policy | bool
|
|
- role: bindep
|
|
bindep_profile: test
|
|
bindep_dir: "{{ zuul_work_dir }}"
|
|
- ensure-tox
|
|
- ensure-java
|
|
- show-net-setup
|