91 lines
2.8 KiB
Python
91 lines
2.8 KiB
Python
#
|
|
# Copyright (c) 2023 Wind River Systems, Inc.
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
|
|
from dcmanager.api.policies import base
|
|
from oslo_policy import policy
|
|
|
|
POLICY_ROOT = 'dc_api:subcloud_peer_groups:%s'
|
|
|
|
|
|
_subcloud_peer_groups_rules = [
|
|
|
|
# CRUD of subcloud-peer-groups entity
|
|
policy.DocumentedRuleDefault(
|
|
name=POLICY_ROOT % 'create',
|
|
check_str='rule:' + base.ADMIN_IN_SYSTEM_PROJECTS,
|
|
description="Create subcloud peer group.",
|
|
operations=[
|
|
{
|
|
'method': 'POST',
|
|
'path': '/v1.0/subcloud-peer-groups'
|
|
}
|
|
]
|
|
),
|
|
policy.DocumentedRuleDefault(
|
|
name=POLICY_ROOT % 'delete',
|
|
check_str='rule:' + base.ADMIN_IN_SYSTEM_PROJECTS,
|
|
description="Delete subcloud peer group.",
|
|
operations=[
|
|
{
|
|
'method': 'DELETE',
|
|
'path': '/v1.0/subcloud-peer-groups/{subcloud_peer_group}'
|
|
}
|
|
]
|
|
),
|
|
policy.DocumentedRuleDefault(
|
|
name=POLICY_ROOT % 'get',
|
|
check_str='rule:' + base.ADMIN_IN_SYSTEM_PROJECTS,
|
|
description="Get Subcloud Peer Group data",
|
|
operations=[
|
|
{
|
|
'method': 'GET',
|
|
'path': '/v1.0/subcloud-peer-groups/'
|
|
},
|
|
# Show details of a specified Subcloud Peer Group
|
|
{
|
|
'method': 'GET',
|
|
'path': '/v1.0/subcloud-peer-groups/{subcloud_peer_group}'
|
|
},
|
|
# Show subclouds status of the subcloud-peer-group
|
|
{
|
|
'method': 'GET',
|
|
'path': '/v1.0/subcloud-peer-groups/{subcloud_peer_group}/status'
|
|
},
|
|
# List Subclouds assigned to the given Subcloud Peer Group
|
|
{
|
|
'method': 'GET',
|
|
'path': '/v1.0/subcloud-peer-groups/{subcloud_peer_group}/subclouds'
|
|
}
|
|
]
|
|
),
|
|
# Update a Subcloud Peer Group with specified configuration
|
|
policy.DocumentedRuleDefault(
|
|
name=POLICY_ROOT % 'modify',
|
|
check_str='rule:' + base.ADMIN_IN_SYSTEM_PROJECTS,
|
|
description="Update a Subcloud Peer Group with specified configuration",
|
|
operations=[
|
|
{
|
|
'method': 'PATCH',
|
|
'path': '/v1.0/subcloud-peer-groups/{subcloud_peer_group}'
|
|
},
|
|
# Migrate subclouds entity of the subcloud-peer-group
|
|
{
|
|
'method': 'PATCH',
|
|
'path': '/v1.0/subcloud-peer-groups/{subcloud_peer_group}/migrate'
|
|
},
|
|
# Trigger a peer group audit
|
|
{
|
|
'method': 'PATCH',
|
|
'path': '/v1.0/subcloud-peer-groups/{subcloud_peer_group}/audit'
|
|
}
|
|
]
|
|
)
|
|
]
|
|
|
|
|
|
def list_rules():
|
|
return _subcloud_peer_groups_rules
|