starlingx
/
openstack-armada-app
Code Issues Proposed changes

Update on enhanced-policies README 

This is a small update to include a message to
warn that these overrides should not be used
separately.

Also including the --reuse-values parameter.
This makes sure that it keeps the current
configuration, adding the new override values.

Closes-Bug: #1953056
Signed-off-by: Pedro Almeida <pedro.monteiroazevedodemouraalmeida@windriver.com>
Change-Id: I0e3595d4bc9839a3e4246a206192018b927f2c5a
This commit is contained in:
Pedro Almeida 2021-12-01 11:47:01 -03:00 committed by Pedro Monteiro Azevedo de Moura Almeida
parent 1eb9ea3d4a
commit 7b18c0ecbb
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
enhanced-policies/README.md
View File

@ -3,6 +3,7 @@ Enhanced Policies
This repository aims to provide enhanced policies for stx-openstack.
It's important that all the overrides files get applied, some of the rules present in a policy from one service might depend on other services to work (e.g. nova commands might depend on glance/cinder/neutron permissions). They should not be used separately.
|Design|Roles|Permissions summary|
|:-------------|-------------|:-----|
@ -73,12 +74,12 @@ Make sure you have access to the Openstack CLI, follow the instructions on [this
```
source /etc/platform/openrc
system helm-override-update stx-openstack keystone openstack --values=rbac/keystone-policy-overrides.yml
system helm-override-update stx-openstack cinder openstack --values=rbac/cinder-policy-overrides.yml
system helm-override-update stx-openstack nova openstack --values=rbac/nova-policy-overrides.yml
system helm-override-update stx-openstack neutron openstack --values=rbac/neutron-policy-overrides.yml
system helm-override-update stx-openstack glance openstack --values=rbac/glance-policy-overrides.yml
system helm-override-update stx-openstack horizon openstack --values=rbac/horizon-policy-overrides.yml
system helm-override-update stx-openstack keystone openstack --reuse-values --values=rbac/keystone-policy-overrides.yml
system helm-override-update stx-openstack cinder openstack --reuse-values --values=rbac/cinder-policy-overrides.yml
system helm-override-update stx-openstack nova openstack --reuse-values --values=rbac/nova-policy-overrides.yml
system helm-override-update stx-openstack neutron openstack --reuse-values --values=rbac/neutron-policy-overrides.yml
system helm-override-update stx-openstack glance openstack --reuse-values --values=rbac/glance-policy-overrides.yml
system helm-override-update stx-openstack horizon openstack --reuse-values --values=rbac/horizon-policy-overrides.yml
system application-apply stx-openstack
```