Rick Bartra | ed95005 | 2017-06-29 17:20:33 -0400 | [diff] [blame] | 1 | --- |
| 2 | features: |
| 3 | - | |
| 4 | Add support of running Patrole against a custom requirements YAML that |
| 5 | defines RBAC requirements. The YAML file lists all the APIs and the roles |
| 6 | that should have access to the APIs. The purpose of running Patrole against |
| 7 | a requirements YAML is to verify that the RBAC policy is in accordance to |
| 8 | deployment specific requirements. Running Patrole against a requirements |
| 9 | YAML is completely optional and can be enabled by setting the |
| 10 | ``[rbac] test_custom_requirements`` option to True in Tempest's |
| 11 | configuration file. The requirements YAML must be located on the same host |
| 12 | that Patrole runs on. |