openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Update Barbican Secure-RBAC policy 

Update some barbican policies that were recently changed in a bugfix for
the Barbican API.

Story: 2009664
Depends-On: I1724152839f0f5850f8d32d40b36d1670c0ad996
Change-Id: I9cfca53b3f9370ce86840cc717986cf127ff1119
This commit is contained in:
Douglas Mendizábal 2022-02-16 12:48:07 -06:00
parent a445fbd02b
commit 71ed741769
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
environments/enable-secure-rbac.yaml
View File

@ -3061,14 +3061,14 @@ parameter_defaults:
barbican-consumer_get:
key: "consumer:get"
value: "rule:container_project_member and (rule:container_owner or rule:container_is_not_private_read) or rule:container_project_admin"
barbican-consumers_get:
key: "consumers:get"
barbican-container_consumers_get:
key: "container_consumers:get"
value: "rule:container_project_member and (rule:container_owner or rule:container_is_not_private_read) or rule:container_project_admin"
barbican-consumers_post:
key: "consumers:post"
barbican-container_consumers_post:
key: "container_consumers:post"
value: "rule:container_project_member and (rule:container_owner or rule:container_is_not_private_read) or rule:container_project_admin"
barbican-consumers_delete:
key: "consumers:delete"
barbican-container_consumers_delete:
key: "container_consumers:delete"
value: "rule:container_project_member and (rule:container_owner or rule:container_is_not_private_read) or rule:container_project_admin"
barbican-containers_post:
key: "containers:post"