Allow customizing policy rules for Placement Api
Conflicts:
deployment/placement/placement-api-container-puppet.yaml
Depends-on: https://review.opendev.org/801246
Change-Id: I3ec4703f61fbfd1133d28aa327b7f2374670b613
(cherry picked from commit cbd2842dbc
)
This commit is contained in:
parent
5a4ddb24a5
commit
08b3921d9f
@ -100,6 +100,12 @@ parameters:
|
|||||||
default: false
|
default: false
|
||||||
description: Set to True to enable debugging Placement services.
|
description: Set to True to enable debugging Placement services.
|
||||||
type: boolean
|
type: boolean
|
||||||
|
PlacementPolicies:
|
||||||
|
description: |
|
||||||
|
A hash of policies to configure for Placement API.
|
||||||
|
e.g. { nova-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
|
||||||
|
default: {}
|
||||||
|
type: json
|
||||||
|
|
||||||
conditions:
|
conditions:
|
||||||
placement_workers_zero: {equals : [{get_param: PlacementWorkers}, 0]}
|
placement_workers_zero: {equals : [{get_param: PlacementWorkers}, 0]}
|
||||||
@ -173,6 +179,7 @@ outputs:
|
|||||||
- {get_param: Debug}
|
- {get_param: Debug}
|
||||||
placement::policy::enforce_new_defaults: {get_param: EnforceSecureRbac}
|
placement::policy::enforce_new_defaults: {get_param: EnforceSecureRbac}
|
||||||
placement::policy::enforce_scope: {get_param: EnforceSecureRbac}
|
placement::policy::enforce_scope: {get_param: EnforceSecureRbac}
|
||||||
|
placement::policy::policies: {get_param: PlacementPolicies}
|
||||||
placement::wsgi::apache::api_port: '8778'
|
placement::wsgi::apache::api_port: '8778'
|
||||||
placement::wsgi::apache::ssl: {get_param: EnableInternalTLS}
|
placement::wsgi::apache::ssl: {get_param: EnableInternalTLS}
|
||||||
# NOTE: bind IP is found in hiera replacing the network name with the local node IP
|
# NOTE: bind IP is found in hiera replacing the network name with the local node IP
|
||||||
|
@ -0,0 +1,4 @@
|
|||||||
|
---
|
||||||
|
features:
|
||||||
|
- |
|
||||||
|
The new ``PlacementPolicies`` parameter has been added.
|
Loading…
Reference in New Issue
Block a user