starlingx
/
config
Code Issues Proposed changes

Custom cinder policy.json 

Enable consistency groups:

    Volumes can be assigned to consistency groups to ensure that snapshots
    of all volumes in the group are taken at the same point in time.
    Therefore everyone should benefit from them.

    Based on description at:
    http://docs.openstack.org/admin-guide/blockstorage-consistency-groups.html

Cinder extensions authorization policy

  Add authorization policy for StarlingX extensions:
  1. volume_extension:snapshot_export_attributes
  2. volume_extension:snapshot_backup_status_attribute

Story: 2003117
Task: 23236
Related-To: https://github.com/starlingx-staging/stx-cinder/pull/2

Change-Id: I5b1b8025f65d9b8c7209d97ccc19db93ab97693f
Signed-off-by: Daniel Badea <daniel.badea@windriver.com>
This commit is contained in:
Daniel Badea 2018-08-02 18:41:37 +03:00
parent d5a4c71d8d
commit 3105dfe1ec
1 changed files with 34 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
puppet-manifests/src/hieradata/controller.yaml
View File

@ -367,6 +367,40 @@ cinder::volume::enabled: false
cinder::backup::posix::backup_posix_path: '/opt/backups'
cinder::policy::policies:
enable_consistencygroup_create:
key: 'consistencygroup:create'
value: ''
enable_consistencygroup_delete:
key: 'consistencygroup:delete'
value: ''
enable_consistencygroup_update:
key: 'consistencygroup:update'
value: ''
enable_consistencygroup_get:
key: 'consistencygroup:get'
value: ''
enable_consistencygroup_get_all:
key: 'consistencygroup:get_all'
value: ''
enable_consistencygroup_create_cgsnapshot:
key: 'consistencygroup:create_cgsnapshot'
value: ''
enable_consistencygroup_delete_cgsnapshot:
key: 'consistencygroup:delete_cgsnapshot'
value: ''
enable_consistencygroup_get_cgsnapshot:
key: 'consistencygroup:get_cgsnapshot'
value: ''
enable_consistencygroup_get_all_cgsnapshots:
key: 'consistencygroup:get_all_cgsnapshots'
value: ''
enable_snapshot_export_attributes:
key: 'volume_extension:snapshot_export_attributes'
value: 'rule:admin_or_owner'
enable_snapshot_backup_status_attribute:
key: 'volume_extension:snapshot_backup_status_attribute'
value: 'rule:admin_or_owner'
# heat
heat::use_syslog: true