Commit Graph

18 Commits

Author SHA1 Message Date
yangshaoxue
1e4f72ca2b Add configurable policy files
Configurable policy files are added for services.

Change-Id: I53549fe80798bdd2e6ed3f92f548ed16393a269f
2023-10-31 13:58:22 +08:00
iauhsnaiq
fe56f82f19 support masakari and designate
add masakari and designate policies file and configs.

Change-Id: Ic2d3431df3cb8d33e74d061337514ea3d91bb7ac
2023-10-25 17:23:50 +08:00
yangshaoxue
87019798fa fix: Compatible with member and _member_
When the default role is _member_ instead of member, the Skyline API response 401

Bug: 2034976
Change-Id: I7c633728c8de9f300eb718f615bc9950e0c96411
2023-09-19 17:28:45 +08:00
Tobias Urdin
49259070ad Fix spelling for admin role in Barbican policy
See this patch fixing this [1].

[1] https://review.opendev.org/c/openstack/barbican/+/864226

Change-Id: I9ca2341a0d52d0516f77169783b47e194f16cb00
2022-12-15 01:14:12 +00:00
Boxiang Zhu
68e1a3cced fix: Update policy
Latest policy update for Zed RC2

manila:
  - https://review.opendev.org/c/openstack/manila/+/856394

Change-Id: I6d0c81354ca6b46d1e71bd0a7e44b9e8ab9cf094
2022-09-30 10:24:46 +08:00
Boxiang Zhu
c8e191b457 fix: Update policy
Latest policy update for Zed release(1.0.0).

Now no feature for openstack service.

nova:
  - https://review.opendev.org/c/openstack/nova/+/849209
ironic:
  - https://review.opendev.org/c/openstack/ironic/+/852794
glance:
  - https://review.opendev.org/c/openstack/glance/+/855435
barbican:
  - https://review.opendev.org/c/openstack/barbican/+/854656
  - https://review.opendev.org/c/openstack/barbican/+/854661
  - https://review.opendev.org/c/openstack/barbican/+/854655
  - https://review.opendev.org/c/openstack/barbican/+/854677
  - https://review.opendev.org/c/openstack/barbican/+/854786
manila:
  - https://review.opendev.org/c/openstack/manila/+/825008

Change-Id: I5d5940a0c15672aee4a0b4cdacab4460e69511a3
2022-09-13 09:55:04 +08:00
Boxiang Zhu
f3dacbcea7 chore: Add license for python file and update policy
1. Add license for python file
2. Update the policy for all services

Change-Id: I4bc6a68874afe1cc51da1a24d278165356d5dec3
2022-08-25 14:35:55 +08:00
Boxiang Zhu
eb59b2614d fix: Remove invalid panko policy
1. remove invalid panko policy
2. remove install panko from post_install.sh
3. update policy

Change-Id: Icb23e4ff34ff47952294f711ddabd36cc9df706e
2022-08-17 14:05:06 +08:00
Boxiang Zhu
88ef320dc6 feat: Support mypy check
1. support mypy check, tox -e mypy or tox -e pep8
2. fix error of mypy check

Change-Id: I41b0013d271f3c7d3a28e1ea6dd0b083893d8983
2022-07-28 16:09:31 +08:00
zhu.boxiang
08c6265d1e feat: Support system scope for policy list and check
1. support system scope for policy list and check
2. add target for check policy api
3. update version of requirements and test-requirements

Change-Id: If251d26bdb522b03a8fb94ae0034d8ca44be5b61
2022-07-18 14:47:12 +08:00
zhu.boxiang
4d9b577007 refactor: Refactor schemas
1. adjust setting schemas
2. adjust prometheus schemas
3. adjust policy schemas
4. adjust policy_manager schemas
5. adjust login schemas
6. remove some invalid model
7. update the swagger.json file

Change-Id: I6b513498999f1c56481107ca78df656e4c8b38cb
2022-07-13 15:21:51 +08:00
zhu.boxiang
e31e466f76 feat: Remove patch for barbican and update policy
1. remove patch for barbican
2. update heat policy
3. update requirements version

Depends-On: https://review.opendev.org/c/openstack/heat/+/812662
Depends-On: https://review.opendev.org/c/openstack/barbican/+/839147
Change-Id: I8f690c7c1e41cd78199de6386e986512edca9259
2022-06-22 21:54:39 +08:00
zhu.boxiang
fc547f8467 feat: Add barbican policy and service_mapping
1. add barbican related policy
2. add barbican into service_mapping
3. add releatenote for barbican
4. update releatenote for zun and magnum

Change-Id: I366e4482617654baab9091736e6f2b186aed6371
2022-06-07 14:05:47 +08:00
zhu.boxiang
10c910c6d5 refactor: Use source code instead of release packages
We install the service projects from opendev instead of
release packages. If the service projects are DEPRECATED,
then we will install them by latest release packages.

Update the neutron policy with the master branch.

Change-Id: I56a10452e731fd6e2597501659ce84e96c4c91ab
2022-06-07 13:29:04 +08:00
zhu.boxiang
32a00a6529 refactor: Register rule and apirule into enforcer
1. We register both apirule and rule into enforcer, so we can keep
the rule in the check_str
2. We re-generate all the services' policy, we just use the original
policy of them. If users want to change, they can change them by
themselves.
3. Adjust the post_install.sh, we install the service packages with
dependencies.
4. Split the ironic and ironic_inspector policy, they can not be in
the same policy file.

Change-Id: I9e152e33be4eef60432fb2030d388b3bec4c082e
2022-06-06 15:03:58 +08:00
Reşit Demir
7260c09fae feature: Add zun config and policy
1. add zun install into post_install.sh
2. add zun into SUPPORTED_SERVICE_EPS and PREFIX_MAPPINGS
3. add zun policy

Change-Id: I741922f06ad5103417a817ed0695f6b3d67fb926
2022-05-30 10:17:16 +00:00
Numan MENEKŞE
60144767cd feature: Add magnum config and policy
1. add magnum install into post_install.sh
2. add magnum into SUPPORTED_SERVICE_EPS and PREFIX_MAPPINGS
3. add magnum policy

Change-Id: I10d2d337331d8c4857f6e58331e545eead0bf26f
2022-05-25 15:59:28 +08:00
zhu.boxiang
8cb60f0833 chore: Move skyline_apiserver out of libs
1. move skyline_apiserver out of libs
2. remove libs folder
3. remove old skyline folder
4. adjust zull, devstack and dockerfile

Change-Id: I27a4babd3df077d1dfc7555f67a6ea618d4b2966
2022-05-18 17:21:00 +08:00