Add default policy for Panko
PROD-35531
Change-Id: I591e0365af4849bbe2a5c2ef9f4b19440a122395
diff --git a/defaults/openstack/policy/all.yml b/defaults/openstack/policy/all.yml
index 3e0975a..ccb81a4 100644
--- a/defaults/openstack/policy/all.yml
+++ b/defaults/openstack/policy/all.yml
@@ -1448,6 +1448,13 @@
"load-balancer:read-quota-global": "rule:load-balancer:global_observer or role:load-balancer_quota_admin or rule:load-balancer:admin"
"load-balancer:write-quota": "role:load-balancer_quota_admin or rule:load-balancer:admin"
"os_load-balancer_api:loadbalancer:put_failover": "rule:load-balancer:admin"
+ panko_default_policy_ocata: {}
+ panko_default_policy_pike:
+ "context_is_admin": "role:admin"
+ "segregation": "rule:context_is_admin"
+ "telemetry:events:index": ""
+ "telemetry:events:show": ""
+ panko_default_policy_queens: ${_param:panko_default_policy_pike}
telemetry_default_policy_ocata: {}
telemetry_default_policy_pike:
"context_is_admin": "role:admin"