62e2c61de2
The new operator role will have the same access as existing reader role(see https://review.opendev.org/c/starlingx/distcloud/+/855084) and also be able to execute the following commands dcmanager subcloud manage <subcloud> dcmanager subcloud unmanage <subcloud> dcmanager subcloud-backup create --subcloud dcmanager subcloud-backup delete --subcloud the existing rules changed to accommodate the new operator role and admin access is provided for the API calls by checking the rules. Test Plan: PASS: Expect only admin,operator role users can execute the following commands dcmanager subcloud manage <subcloud> dcmanager subcloud unmanage <subcloud> dcmanager subcloud-backup create --subcloud dcmanager subcloud-backup delete --subcloud PASS: Verify reader role user is not allowed to execute the following dcmanager subcloud manage <subcloud> dcmanager subcloud unmanage <subcloud> dcmanager subcloud-backup create --subcloud dcmanager subcloud-backup delete --subcloud PASS: Expect admin,operator,reader role users allowed to execute the following command dcmanager alarm summary PASS: expect the following command is blocked for operator, reader role user dcmanager subcloud delete <subcloud> dcmanager patch-strategy create dcmanager patch-strategy apply dcmanager patch-strategy abort dcmanager patch-strategy delete dcmanager subcloud-group add dcmanager subcloud-group delete PASS: Verify only admin allowed to do the following dcmanager subcloud prestage dcmanager subcloud reconfigure dcmanager subcloud reinstall dcmanager subcloud redeploy dcmanager subcloud restore dcmanager subcloud update_status dcmanager subcloud update Story: 2011348 Task: 51863 Change-Id: Idb4da711d214dcb9228ce4bc00575140eb1fd0f8 Signed-off-by: amantri <ayyappa.mantri@windriver.com>
17 lines
558 B
Plaintext
17 lines
558 B
Plaintext
etc/dcorch/policy.yaml etc/dcorch
|
|
etc/dcorch/dcorch.conf
|
|
usr/bin/clean-dcorch
|
|
usr/bin/dcorch-api
|
|
usr/bin/dcorch-api-proxy
|
|
usr/bin/dcorch-engine
|
|
usr/bin/dcorch-engine-worker
|
|
usr/bin/dcorch-manage
|
|
usr/lib/ocf/resource.d/openstack/dcorch-*
|
|
usr/lib/python3/dist-packages/dcorch/*
|
|
usr/lib/systemd/system/dcorch-api.service
|
|
usr/lib/systemd/system/dcorch-engine.service
|
|
usr/lib/systemd/system/dcorch-engine-worker.service
|
|
usr/lib/systemd/system/dcorch-sysinv-api-proxy.service
|
|
usr/lib/systemd/system/dcorch-identity-api-proxy.service
|
|
usr/lib/tmpfiles.d/dcorch.conf
|