From 3105dfe1ecc660401ad5c8688946aac2430530d6 Mon Sep 17 00:00:00 2001 From: Daniel Badea Date: Thu, 2 Aug 2018 18:41:37 +0300 Subject: [PATCH] Custom cinder policy.json Enable consistency groups: Volumes can be assigned to consistency groups to ensure that snapshots of all volumes in the group are taken at the same point in time. Therefore everyone should benefit from them. Based on description at: http://docs.openstack.org/admin-guide/blockstorage-consistency-groups.html Cinder extensions authorization policy Add authorization policy for StarlingX extensions: 1. volume_extension:snapshot_export_attributes 2. volume_extension:snapshot_backup_status_attribute Story: 2003117 Task: 23236 Related-To: https://github.com/starlingx-staging/stx-cinder/pull/2 Change-Id: I5b1b8025f65d9b8c7209d97ccc19db93ab97693f Signed-off-by: Daniel Badea --- .../src/hieradata/controller.yaml | 34 +++++++++++++++++++ 1 file changed, 34 insertions(+) diff --git a/puppet-manifests/src/hieradata/controller.yaml b/puppet-manifests/src/hieradata/controller.yaml index ae0469db09..1d6e2e176d 100644 --- a/puppet-manifests/src/hieradata/controller.yaml +++ b/puppet-manifests/src/hieradata/controller.yaml @@ -367,6 +367,40 @@ cinder::volume::enabled: false cinder::backup::posix::backup_posix_path: '/opt/backups' +cinder::policy::policies: + enable_consistencygroup_create: + key: 'consistencygroup:create' + value: '' + enable_consistencygroup_delete: + key: 'consistencygroup:delete' + value: '' + enable_consistencygroup_update: + key: 'consistencygroup:update' + value: '' + enable_consistencygroup_get: + key: 'consistencygroup:get' + value: '' + enable_consistencygroup_get_all: + key: 'consistencygroup:get_all' + value: '' + enable_consistencygroup_create_cgsnapshot: + key: 'consistencygroup:create_cgsnapshot' + value: '' + enable_consistencygroup_delete_cgsnapshot: + key: 'consistencygroup:delete_cgsnapshot' + value: '' + enable_consistencygroup_get_cgsnapshot: + key: 'consistencygroup:get_cgsnapshot' + value: '' + enable_consistencygroup_get_all_cgsnapshots: + key: 'consistencygroup:get_all_cgsnapshots' + value: '' + enable_snapshot_export_attributes: + key: 'volume_extension:snapshot_export_attributes' + value: 'rule:admin_or_owner' + enable_snapshot_backup_status_attribute: + key: 'volume_extension:snapshot_backup_status_attribute' + value: 'rule:admin_or_owner' # heat heat::use_syslog: true