Switch to strict confinement

Make use of the personal-files interface to allow access
to clouds.yaml for the user running the commands.

All commands need network and home plugs for operation.

Change-Id: Ic1e06af58f04f7e5d30a69b05fce1d70390aff16
This commit is contained in:
James Page 2020-05-06 11:08:20 +01:00
parent f71b90d507
commit b0f740764c
1 changed files with 80 additions and 1 deletions

View File

@ -12,60 +12,139 @@ description: |
. .
This snap provides the openstack command-line client and other This snap provides the openstack command-line client and other
project specific command-line clients. project specific command-line clients.
confinement: classic confinement: strict
grade: stable grade: stable
base: core18 base: core18
plugs:
config-openstack:
interface: personal-files
read:
- $HOME/.config/openstack/clouds.yaml
apps: apps:
openstack: openstack:
command: bin/openstack command: bin/openstack
completer: usr/share/bash-completion/completions/openstack completer: usr/share/bash-completion/completions/openstack
plugs:
- network
- home
- config-openstack
glance: glance:
command: bin/glance command: bin/glance
plugs:
- network
- home
gnocchi: gnocchi:
command: bin/gnocchi command: bin/gnocchi
plugs:
- network
- home
neutron: neutron:
command: bin/neutron command: bin/neutron
plugs:
- network
- home
nova: nova:
command: bin/nova command: bin/nova
plugs:
- network
- home
cinder: cinder:
command: bin/cinder command: bin/cinder
plugs:
- network
- home
aodh: aodh:
command: bin/aodh command: bin/aodh
plugs:
- network
- home
barbican: barbican:
command: bin/barbican command: bin/barbican
plugs:
- network
- home
ceilometer: ceilometer:
command: bin/ceilometer command: bin/ceilometer
plugs:
- network
- home
cloudkitty: cloudkitty:
command: bin/cloudkitty command: bin/cloudkitty
plugs:
- network
- home
freezer: freezer:
command: bin/freezer command: bin/freezer
plugs:
- network
- home
glance: glance:
command: bin/glance command: bin/glance
plugs:
- network
- home
heat: heat:
command: bin/heat command: bin/heat
plugs:
- network
- home
magnum: magnum:
command: bin/magnum command: bin/magnum
plugs:
- network
- home
manila: manila:
command: bin/manila command: bin/manila
plugs:
- network
- home
masakari: masakari:
command: bin/masakari command: bin/masakari
plugs:
- network
- home
mistral: mistral:
command: bin/mistral command: bin/mistral
plugs:
- network
- home
monasca: monasca:
command: bin/monasca command: bin/monasca
plugs:
- network
- home
murano: murano:
command: bin/murano command: bin/murano
plugs:
- network
- home
swift: swift:
command: bin/swift command: bin/swift
plugs:
- network
- home
tacker: tacker:
command: bin/tacker command: bin/tacker
plugs:
- network
- home
trove: trove:
command: bin/trove command: bin/trove
plugs:
- network
- home
vitrage: vitrage:
command: bin/vitrage command: bin/vitrage
plugs:
- network
- home
watcher: watcher:
command: bin/watcher command: bin/watcher
plugs:
- network
- home
parts: parts:
openstackclients: openstackclients: