commit 468d78f878782751587dad517da9e2e8a0c446a5
author Dzmitry Stremkouski <dstremkouski@mirantis.com> Fri Nov 15 22:58:38 2019 +0100
committer Ivan Berezovskiy <iberezovskiy@mirantis.com> Thu Jan 16 21:05:57 2020 +0400
tree 99ffba2acf539ecd52a7923c887b3bd11a041d92
parent 966163160e1cd12426f379c48a9f42fa8f1f807b

Octavia policy management

- it is possible to specify policy via pillar

Prod-Related: PROD-34053
Change-Id: I0b3878c414195cca8495dcd7450ad5c1b1a4e8a5

tests/pillar/api_cluster.sls

diff --git a/tests/pillar/api_cluster.sls b/tests/pillar/api_cluster.sls
index 4322f07..74cdb4b 100644
--- a/tests/pillar/api_cluster.sls
+++ b/tests/pillar/api_cluster.sls
@@ -31,3 +31,12 @@
       - host: 127.0.0.1
       - host: 127.0.1.1
       - host: 127.0.2.1
+    policy:
+      context_is_admin: 'role:admin or role:load-balancer_admin'
+      admin_or_owner: 'is_admin:True or project_id:%(project_id)s'
+      load-balancer:read: 'rule:admin_or_owner'
+      load-balancer:read-global: 'is_admin:True'
+      load-balancer:write: 'rule:admin_or_owner'
+      load-balancer:read-quota: 'rule:admin_or_owner'
+      load-balancer:read-quota-global: 'is_admin:True'
+      load-balancer:write-quota: 'is_admin:True'