Improve Patrole config options
- Renames "rbac_flag" to "enable_rbac"
- Creates "strict_policy_check" option
- Resolves bug where policy not in policy.json
would pass RBAC test, leading to false test
results
Change-Id: I76429e6cb0ed4cad154a07b7a873fd23209da674
Closes-Bug: #1673626
diff --git a/doc/source/installation.rst b/doc/source/installation.rst
index 00cc57b..96f1c3f 100644
--- a/doc/source/installation.rst
+++ b/doc/source/installation.rst
@@ -48,9 +48,14 @@
#. [rbac] section updates ::
# The role that you want the RBAC tests to use for RBAC testing
- # This needs to be edited to run the test as a different role.
+ # This needs to be edited to run the test as a different role.
rbac_test_role = _member_
# Enables RBAC Tempest tests if set to True. Otherwise, they are
# skipped.
- rbac_flag = True
+ enable_rbac = True
+
+ # If set to true, tests throw a RbacParsingException for policies
+ # not found in the policy.json. Otherwise, they throw a
+ # skipException.
+ strict_policy_check = False