blob: e342dd8b5cb24b511b40fce3b72aeeb2f26117db [file] [log] [blame]
DavidPurcell663aedf2017-01-03 10:01:14 -05001============
2Installation
3============
4
5Installation Information
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +01006========================
DavidPurcell663aedf2017-01-03 10:01:14 -05007
8At the command line::
9
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010010 $ sudo pip install patrole
DavidPurcell663aedf2017-01-03 10:01:14 -050011
12Or, if you have virtualenvwrapper installed::
13
14 $ mkvirtualenv patrole
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010015 $ sudo pip install patrole
DavidPurcell663aedf2017-01-03 10:01:14 -050016
DavidPurcell45bc1a62017-01-19 17:21:27 -050017Or to install from the source::
18
19 $ navigate to patrole directory
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010020 $ sudo pip install -e .
DavidPurcell45bc1a62017-01-19 17:21:27 -050021
DavidPurcell663aedf2017-01-03 10:01:14 -050022Configuration Information
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010023=========================
DavidPurcell663aedf2017-01-03 10:01:14 -050024
25tempest.conf
26++++++++++++
27
Felipe Monteiro652e2a22017-01-25 16:44:02 -050028To run the RBAC tempest api test, you have to make the following changes to
DavidPurcell663aedf2017-01-03 10:01:14 -050029the tempest.conf file.
30
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010031#. ``auth`` section updates ::
DavidPurcell663aedf2017-01-03 10:01:14 -050032
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010033 # Allows test cases to create/destroy projects and users. This option
34 # requires that OpenStack Identity API admin credentials are known. If
35 # false, isolated test cases and parallel execution, can still be
36 # achieved configuring a list of test accounts (boolean value)
37 use_dynamic_credentials = True
DavidPurcell663aedf2017-01-03 10:01:14 -050038
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010039#. ``rbac`` section updates ::
DavidPurcell663aedf2017-01-03 10:01:14 -050040
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010041 # The role that you want the RBAC tests to use for RBAC testing
42 # This needs to be edited to run the test as a different role.
43 rbac_test_role = _member_
DavidPurcell45bc1a62017-01-19 17:21:27 -050044
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010045 # Enables RBAC Tempest tests if set to True. Otherwise, they are
46 # skipped.
47 enable_rbac = True
Samantha Blanco0d880082017-03-23 18:14:37 -040048
Felipe Monteiro7bc35dc2017-04-19 21:11:46 +010049 # If set to true, tests throw a RbacParsingException for policies
50 # not found in the policy.json. Otherwise, they throw a
51 # skipException.
52 strict_policy_check = False
Samantha Blanco85f79d72017-04-21 11:09:14 -040053
54 # The following config options set the location of the service's
55 # policy file. For services that have their policy in code (e.g.,
56 # Nova), this would be the location of a custom policy.json, if
57 # one exists.
58 cinder_policy_file = /etc/cinder/policy.json
59 glance_policy_file = /etc/glance/policy.json
60 keystone_policy_file = /etc/keystone/policy.json
61 neutron_policy_file = /etc/neutron/policy.json
62 nova_policy_file = /etc/nova/policy.json