Fix OverPermission exception for keystone tests
Extend the roles in `access_token` according to the implementation[0]
of the bp basic-default-roles:
`admin` implies `member` implies `reader`
Support deprecated rules.
[0] Ie18a269e3d1075d955fe494acaf634a393c6bd7b
Change-Id: I0d0de2a20b03548a7e5dab1ee7af7b72651abcb6
Story: 2004709
Task: 28740
diff --git a/patrole_tempest_plugin/config.py b/patrole_tempest_plugin/config.py
index 62337f7..63f0a8a 100644
--- a/patrole_tempest_plugin/config.py
+++ b/patrole_tempest_plugin/config.py
@@ -96,6 +96,11 @@
* add_image
allowed_role = the ``oslo.policy`` role that is allowed to perform the API.
+"""),
+ cfg.BoolOpt('validate_deprecated_rules', default=True,
+ help="""Some of the policy rules have deprecated version,
+Patrole should be able to run check against default and deprecated rules,
+otherwise the result of the tests may not be correct.
""")
]