6861fb324b
This change fixes typos in comments, parameter descriptions and ansible task names. Change-Id: I82b67ca834077b66ebd71744face3bba0b43da2f
74 lines
2.5 KiB
Python
Executable File
74 lines
2.5 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
|
|
import argparse
|
|
import os
|
|
|
|
import ruamel.yaml
|
|
from ruamel.yaml import YAML
|
|
|
|
# Not all policy variables across services in THT are consistent. This mapping
|
|
# associates the service name to the right THT variable.
|
|
_SERVICE_MAP = {
|
|
'barbican': 'BarbicanPolicies',
|
|
'cinder': 'CinderApiPolicies',
|
|
'designate': 'DesignateApiPolicies',
|
|
'glance': 'GlanceApiPolicies',
|
|
'ironic': 'IronicApiPolicies',
|
|
'keystone': 'KeystonePolicies',
|
|
'manila': 'ManilaApiPolicies',
|
|
'neutron': 'NeutronApiPolicies',
|
|
'nova': 'NovaApiPolicies',
|
|
'octavia': 'OctaviaApiPolicies',
|
|
'placement': 'PlacementPolicies'
|
|
}
|
|
_SCALAR = ruamel.yaml.scalarstring.DoubleQuotedScalarString
|
|
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument(
|
|
'-d', '--policy-dir', required=True,
|
|
help=(
|
|
'Directory containing policy.yaml files for OpenStack services. '
|
|
'This script expects files to be named $SERVICE.yaml. For example '
|
|
'nova.yaml for nova\'s policies.'
|
|
)
|
|
)
|
|
args = parser.parse_args()
|
|
|
|
heat_template = {'parameter_defaults': {'EnforceSecureRbac': False}}
|
|
for filename in os.listdir(args.policy_dir):
|
|
service = filename.split('.')[0]
|
|
tht_var_name = _SERVICE_MAP.get(service)
|
|
filepath = os.path.join(args.policy_dir, filename)
|
|
with open(filepath, 'r') as f:
|
|
safe_handler = YAML(typ='safe')
|
|
# A lot of policy files have duplicate keys, which violates YAML. Allow
|
|
# duplicate keys for the time being.
|
|
safe_handler.allow_duplicate_keys = True
|
|
policies = safe_handler.load(f)
|
|
|
|
template = {}
|
|
for name, value in policies.items():
|
|
rule = name.split(':')[-1]
|
|
rule = name.replace(':', '_')
|
|
key = service + '-' + rule
|
|
template[key] = {'key': _SCALAR(name), 'value': _SCALAR(value)}
|
|
heat_template['parameter_defaults'][tht_var_name] = template
|
|
|
|
print(
|
|
ruamel.yaml.dump(
|
|
heat_template, Dumper=ruamel.yaml.RoundTripDumper, width=500
|
|
)
|
|
)
|