Commit Graph

13 Commits

Author SHA1 Message Date
Tobias Urdin f42642bd61 Add per module policy service refresh
Updating the policies for this project should only
refresh the services that reads it.

Change-Id: Ied6c7759af242021ed83e3c60197e74c947bf811
2023-06-26 00:05:17 +02:00
Takashi Kajinami b8137be3b0 Expose policy_default_rule
The option has been managed by the underlying puppet-oslo module but
has not been configurable. This introduces the parameter to customize
the option.

Change-Id: Id4cb6d9a840ea4f649c6a4ed3007422c1c0b630f
2023-01-23 14:32:26 +09:00
Takashi Kajinami 6b7fd1b643 Allow purging policy files
This change introduces the new purge_config parameter to the policy
class so that any policy rules not managed by puppet manifests can be
cleared.

Co-Authored-By: Martin Schuppert <mschuppert@redhat.com>
Depends-On: https://review.opendev.org/802305
Change-Id: I44145c4a07b5f21680d2e32ca4bc3436edb191ba
2021-09-04 22:12:11 +09:00
Thomas Goirand f64159bc87 Allow to configure policy_dirs
This patch makes it possible to override the current service default,
which is /etc/<service>/policy.d .

Change-Id: I8ab033c275f29a34a89a5ea9c2560c9992fd06cf
2021-04-01 23:07:30 +02:00
Takashi Kajinami d994d22999 Add support for oslo_policy/enforce_new_defaults
Depends-on: https://review.opendev.org/781428
Change-Id: Icaf0f15b0cea8b48561867bdf7c8338a92c4dc03
2021-03-24 16:41:21 +09:00
Takashi Kajinami d12f0ff8c7 Add support for the oslo_policy/enforce_scope parameter
Depends-on: https://review.opendev.org/#/c/759008/
Change-Id: I23187c75ddf176dfb0eac1b3fff03cec98fb0774
2021-03-21 10:58:10 +09:00
Takashi Kajinami 261d74912f Use yaml instead of json for policy file
Because usage of json for policy file will be deprecated and replaced
by yaml[1].

[1] https://governance.openstack.org/tc/goals/selected/wallaby/migrate-policy-format-from-json-to-yaml.html

Depends-on: https://review.opendev.org/769647
Change-Id: I977a5f5fa98f16c8270abf293987761c170cd636
2021-01-07 23:22:54 +00:00
Emilien Macchi dabc9d9d1f Add group to policy management
The move of policy.json into code means the file may not exist. We've
added support to ensure that the file exists in the openstacklib but we
need to make sure the permissions are right for each service. This adds
the group information to the policies so it works right.

Depends-On: I26e8b1384f4f69712da9d06a4c565dfd1f17c9ed
Change-Id: Ic5f73993ea4d71fc186272c624a906fcae2dcfa8
Co-Authored-By: Alex Schultz <aschultz@redhat.com>
2018-01-10 14:23:13 -08:00
ZhongShengping 358a9d4388 oslo policy: check puppet resource instead of actual config in spec
Change-Id: I9d3f0c133ea76acb3ff4fdec179f4100bf68cb32
2017-05-23 15:13:43 +08:00
Nate Potter ac3b678746 Update tests with rspec facts
This patch updates tests that perform on Debian/RedHat sets to use
on_supported_os from rspec-puppet-facts.

Change-Id: I4b7bec3e0b314cda34e41bda3892847a23325bb9
2016-05-20 10:32:25 -07:00
ZhongShengping 47a3846d77 Use oslo module for logging , database and policy configuration
Change-Id: I3ca0db893cdc819ca9349cae252bd2eb247c9fd9
2016-05-06 14:33:16 +08:00
Iury Gregory Melo Ferreira 9b7ac7a647 Switch magnum to $::os_service_default
Switch to $::os_service_default all params in logging and db.
Changes: logging.pp, db.pp and tests.

Change-Id: Ic3ff963064fcb34f86056d88b6f2dce5e270fedc
2015-12-03 15:24:51 +00:00
Nate Potter 6a34ff8435 puppet-magnum: Initial commit
This is the initial commit for puppet-magnum.
It has mostly been automatically generated using cookiecutter[1] and
msync[2]

[1] https://github.com/openstack/puppet-openstack-cookiecutter
[2] https://github.com/openstack/puppet-modulesync-configs

Change-Id: Id43f377828837dba70745bbe66b51297e383e602
2015-11-12 15:52:15 +00:00