Improve is_admin support in Patrole converter framework.
Right now is_admin rules are still causing issues. Fixes those
issues by checking for context_is_admin in the policy file under
test and whether the current role is_admin according to the rule
context_is_admin. This ensures that is_admin is reliably
passed to oslo policy's check.
Also adds support for services like nova, which does not
auto-generate a policy.json file. Uses oslo_policy.generator
in this case.
Change-Id: I91b567fd13130ebd9e3a9c49c46488c76d99d7a8
3 files changed