commit f3f33a871b8546229e5cfdafcdb6bc093abbdd84
author Dmitry Ukov <dukov@mirantis.com> Fri May 05 11:56:46 2017 +0400
committer Dmitry Ukov <dukov@mirantis.com> Thu May 18 12:26:12 2017 +0400
tree a9139bd7b67d9889a82df714646be754bd55860d
parent 70f2934711b2758a94ec6f0aadd7c69c8eabe93b

Policy.json should be defined by user

User can override and add values to policy.json by creating flat
key-value structure under heat:server:policy.

Change-Id: I1accd9557cc241a55d5e898b9350b34e078b82a6

tests/pillar/server_cluster.sls

diff --git a/tests/pillar/server_cluster.sls b/tests/pillar/server_cluster.sls
index 0a8e0f5..c0330aa 100644
--- a/tests/pillar/server_cluster.sls
+++ b/tests/pillar/server_cluster.sls
@@ -51,3 +51,7 @@
       user: openstack
       password: password
       virtual_host: '/openstack'
+    policy:
+      deny_stack_user: 'not role:heat_stack_user'
+      'cloudformation:ValidateTemplate': 'rule:deny_stack_user'
+      'cloudformation:DescribeStackResource':

tests/pillar/server_plugin_dirs.sls

diff --git a/tests/pillar/server_plugin_dirs.sls b/tests/pillar/server_plugin_dirs.sls
index 846bab0..087df91 100644
--- a/tests/pillar/server_plugin_dirs.sls
+++ b/tests/pillar/server_plugin_dirs.sls
@@ -52,3 +52,7 @@
       plugins:
       - /test/dir1
       - /test/dir2
+    policy:
+      deny_stack_user: 'not role:heat_stack_user'
+      'cloudformation:ValidateTemplate': 'rule:deny_stack_user'
+      'cloudformation:DescribeStackResource':

tests/pillar/server_single.sls

diff --git a/tests/pillar/server_single.sls b/tests/pillar/server_single.sls
index 1600f46..fe4ab4e 100644
--- a/tests/pillar/server_single.sls
+++ b/tests/pillar/server_single.sls
@@ -49,3 +49,7 @@
       user: openstack
       password: password
       virtual_host: '/openstack'
+    policy:
+      deny_stack_user: 'not role:heat_stack_user'
+      'cloudformation:ValidateTemplate': 'rule:deny_stack_user'
+      'cloudformation:DescribeStackResource':