Merge "Allow customizing policy rules for Placement Api"

deployment/placement/placement-api-container-puppet.yaml

@@ -80,6 +80,12 @@ parameters:
     default: false
     description: Set to True to enable debugging Placement services.
     type: boolean
+  PlacementPolicies:
+    description: |
+      A hash of policies to configure for Placement API.
+      e.g. { nova-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
+    default: {}
+    type: json
 
 conditions:
   placement_workers_set:
@@ -143,6 +149,7 @@ outputs:
               - {get_param: PlacementDebug}
               - true
               - {get_param: Debug}
+            placement::policy::policies: {get_param: PlacementPolicies}
             placement::wsgi::apache::api_port: '8778'
             placement::wsgi::apache::ssl: {get_param: EnableInternalTLS}
             # NOTE: bind IP is found in hiera replacing the network name with the local node IP

releasenotes/notes/placement-policies-db2704ea63d0bdad.yaml

@@ -0,0 +1,4 @@
+---
+features:
+  - |
+    The new ``PlacementPolicies`` parameter has been added.