Switch to strict confinement

Make use of the personal-files interface to allow access
to clouds.yaml for the user running the commands.

All commands need network and home plugs for operation.

Change-Id: Ic1e06af58f04f7e5d30a69b05fce1d70390aff16
This commit is contained in:
James Page 2020-05-06 11:08:20 +01:00
parent f71b90d507
commit b0f740764c
1 changed files with 80 additions and 1 deletions

View File

@ -12,60 +12,139 @@ description: |
.
This snap provides the openstack command-line client and other
project specific command-line clients.
confinement: classic
confinement: strict
grade: stable
base: core18
plugs:
config-openstack:
interface: personal-files
read:
- $HOME/.config/openstack/clouds.yaml
apps:
openstack:
command: bin/openstack
completer: usr/share/bash-completion/completions/openstack
plugs:
- network
- home
- config-openstack
glance:
command: bin/glance
plugs:
- network
- home
gnocchi:
command: bin/gnocchi
plugs:
- network
- home
neutron:
command: bin/neutron
plugs:
- network
- home
nova:
command: bin/nova
plugs:
- network
- home
cinder:
command: bin/cinder
plugs:
- network
- home
aodh:
command: bin/aodh
plugs:
- network
- home
barbican:
command: bin/barbican
plugs:
- network
- home
ceilometer:
command: bin/ceilometer
plugs:
- network
- home
cloudkitty:
command: bin/cloudkitty
plugs:
- network
- home
freezer:
command: bin/freezer
plugs:
- network
- home
glance:
command: bin/glance
plugs:
- network
- home
heat:
command: bin/heat
plugs:
- network
- home
magnum:
command: bin/magnum
plugs:
- network
- home
manila:
command: bin/manila
plugs:
- network
- home
masakari:
command: bin/masakari
plugs:
- network
- home
mistral:
command: bin/mistral
plugs:
- network
- home
monasca:
command: bin/monasca
plugs:
- network
- home
murano:
command: bin/murano
plugs:
- network
- home
swift:
command: bin/swift
plugs:
- network
- home
tacker:
command: bin/tacker
plugs:
- network
- home
trove:
command: bin/trove
plugs:
- network
- home
vitrage:
command: bin/vitrage
plugs:
- network
- home
watcher:
command: bin/watcher
plugs:
- network
- home
parts:
openstackclients: