commit f3f33a871b8546229e5cfdafcdb6bc093abbdd84
author Dmitry Ukov <dukov@mirantis.com> Fri May 05 11:56:46 2017 +0400
committer Dmitry Ukov <dukov@mirantis.com> Thu May 18 12:26:12 2017 +0400
tree a9139bd7b67d9889a82df714646be754bd55860d
parent 70f2934711b2758a94ec6f0aadd7c69c8eabe93b

Policy.json should be defined by user

User can override and add values to policy.json by creating flat
key-value structure under heat:server:policy.

Change-Id: I1accd9557cc241a55d5e898b9350b34e078b82a6

tests/pillar/server_cluster.sls

diff --git a/tests/pillar/server_cluster.sls b/tests/pillar/server_cluster.sls
index 0a8e0f5..c0330aa 100644
--- a/tests/pillar/server_cluster.sls
+++ b/tests/pillar/server_cluster.sls
@@ -51,3 +51,7 @@
       user: openstack
       password: password
       virtual_host: '/openstack'
+    policy:
+      deny_stack_user: 'not role:heat_stack_user'
+      'cloudformation:ValidateTemplate': 'rule:deny_stack_user'
+      'cloudformation:DescribeStackResource':