summaryrefslogtreecommitdiff
path: root/etc
diff options
context:
space:
mode:
Diffstat (limited to 'etc')
-rw-r--r--etc/trove/README-policy.generated.md19
-rw-r--r--etc/trove/policy.yaml.sample243
2 files changed, 19 insertions, 243 deletions
diff --git a/etc/trove/README-policy.generated.md b/etc/trove/README-policy.generated.md
new file mode 100644
index 00000000..96619907
--- /dev/null
+++ b/etc/trove/README-policy.generated.md
@@ -0,0 +1,19 @@
+Generate Trove policies sample
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Trove policies sample are no longer provided, instead it could be generated
+by running the following command from the top of the trove directory:
+
+ tox -egenpolicy
+
+
+Use customized policy file
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+As Trove uses policy in code now, it's not necessary to add a policy file for
+Trove components to run. But when a customized policy is needed, Trove will
+take ``/etc/trove/policy.json`` by default. The location of the policy file
+can also be overriden by adding following lines in Trove config file:
+
+ [oslo_policy]
+ policy_file = /path/to/policy/file
diff --git a/etc/trove/policy.yaml.sample b/etc/trove/policy.yaml.sample
deleted file mode 100644
index 823144dc..00000000
--- a/etc/trove/policy.yaml.sample
+++ /dev/null
@@ -1,243 +0,0 @@
-# Must be an administrator.
-#"admin": "role:admin or is_admin:True"
-
-# Must be an administrator or owner of the object.
-#"admin_or_owner": "rule:admin or tenant:%(tenant)s"
-
-# Must be an administrator or owner of the object.
-#"default": "rule:admin_or_owner"
-
-#
-#"instance:create": "rule:admin_or_owner"
-
-#
-#"instance:delete": "rule:admin_or_owner"
-
-#
-#"instance:force_delete": "rule:admin_or_owner"
-
-#
-#"instance:index": "rule:admin_or_owner"
-
-#
-#"instance:show": "rule:admin_or_owner"
-
-#
-#"instance:update": "rule:admin_or_owner"
-
-#
-#"instance:edit": "rule:admin_or_owner"
-
-#
-#"instance:restart": "rule:admin_or_owner"
-
-#
-#"instance:resize_volume": "rule:admin_or_owner"
-
-#
-#"instance:resize_flavor": "rule:admin_or_owner"
-
-#
-#"instance:reset_status": "rule:admin"
-
-#
-#"instance:promote_to_replica_source": "rule:admin_or_owner"
-
-#
-#"instance:eject_replica_source": "rule:admin_or_owner"
-
-#
-#"instance:configuration": "rule:admin_or_owner"
-
-#
-#"instance:guest_log_list": "rule:admin_or_owner"
-
-#
-#"instance:backups": "rule:admin_or_owner"
-
-#
-#"instance:module_list": "rule:admin_or_owner"
-
-#
-#"instance:module_apply": "rule:admin_or_owner"
-
-#
-#"instance:module_remove": "rule:admin_or_owner"
-
-#
-#"instance:extension:root:create": "rule:admin_or_owner"
-
-#
-#"instance:extension:root:delete": "rule:admin_or_owner"
-
-#
-#"instance:extension:root:index": "rule:admin_or_owner"
-
-#
-#"instance:extension:user:create": "rule:admin_or_owner"
-
-#
-#"instance:extension:user:delete": "rule:admin_or_owner"
-
-#
-#"instance:extension:user:index": "rule:admin_or_owner"
-
-#
-#"instance:extension:user:show": "rule:admin_or_owner"
-
-#
-#"instance:extension:user:update": "rule:admin_or_owner"
-
-#
-#"instance:extension:user:update_all": "rule:admin_or_owner"
-
-#
-#"instance:extension:user_access:update": "rule:admin_or_owner"
-
-#
-#"instance:extension:user_access:delete": "rule:admin_or_owner"
-
-#
-#"instance:extension:user_access:index": "rule:admin_or_owner"
-
-#
-#"instance:extension:database:create": "rule:admin_or_owner"
-
-#
-#"instance:extension:database:delete": "rule:admin_or_owner"
-
-#
-#"instance:extension:database:index": "rule:admin_or_owner"
-
-#
-#"instance:extension:database:show": "rule:admin_or_owner"
-
-#
-#"cluster:create": "rule:admin_or_owner"
-
-#
-#"cluster:delete": "rule:admin_or_owner"
-
-#
-#"cluster:force_delete": "rule:admin_or_owner"
-
-#
-#"cluster:index": "rule:admin_or_owner"
-
-#
-#"cluster:show": "rule:admin_or_owner"
-
-#
-#"cluster:show_instance": "rule:admin_or_owner"
-
-#
-#"cluster:action": "rule:admin_or_owner"
-
-#
-#"cluster:reset-status": "rule:admin"
-
-#
-#"cluster:extension:root:create": "rule:admin_or_owner"
-
-#
-#"cluster:extension:root:delete": "rule:admin_or_owner"
-
-#
-#"cluster:extension:root:index": "rule:admin_or_owner"
-
-#
-#"backup:create": "rule:admin_or_owner"
-
-#
-#"backup:delete": "rule:admin_or_owner"
-
-#
-#"backup:index": "rule:admin_or_owner"
-
-#
-#"backup:show": "rule:admin_or_owner"
-
-#
-#"configuration:create": "rule:admin_or_owner"
-
-#
-#"configuration:delete": "rule:admin_or_owner"
-
-#
-#"configuration:index": "rule:admin_or_owner"
-
-#
-#"configuration:show": "rule:admin_or_owner"
-
-#
-#"configuration:instances": "rule:admin_or_owner"
-
-#
-#"configuration:update": "rule:admin_or_owner"
-
-#
-#"configuration:edit": "rule:admin_or_owner"
-
-#
-#"configuration-parameter:index": "rule:admin_or_owner"
-
-#
-#"configuration-parameter:show": "rule:admin_or_owner"
-
-#
-#"configuration-parameter:index_by_version": "rule:admin_or_owner"
-
-#
-#"configuration-parameter:show_by_version": "rule:admin_or_owner"
-
-#
-#"datastore:index": ""
-
-#
-#"datastore:show": ""
-
-#
-#"datastore:version_show": ""
-
-#
-#"datastore:version_show_by_uuid": ""
-
-#
-#"datastore:version_index": ""
-
-#
-#"datastore:list_associated_flavors": ""
-
-#
-#"datastore:list_associated_volume_types": ""
-
-#
-#"flavor:index": ""
-
-#
-#"flavor:show": ""
-
-#
-#"limits:index": "rule:admin_or_owner"
-
-#
-#"module:create": "rule:admin_or_owner"
-
-#
-#"module:delete": "rule:admin_or_owner"
-
-#
-#"module:index": "rule:admin_or_owner"
-
-#
-#"module:show": "rule:admin_or_owner"
-
-#
-#"module:instances": "rule:admin_or_owner"
-
-#
-#"module:update": "rule:admin_or_owner"
-
-#
-#"module:reapply": "rule:admin_or_owner"
-