From 9fee3031a3f7bcb3427d2570cca5f150d9068db5 Mon Sep 17 00:00:00 2001
From: Tobias Urdin <tobias.urdin@binero.com>
Date: Sun, 25 Jun 2023 23:51:19 +0200
Subject: [PATCH] Add per module policy service refresh

Updating the policies for this project should only
refresh the services that reads it.

Change-Id: I80117d1c7ab1bd9642a6c3d416c6683ae024894a
---
 manifests/deps.pp                    | 2 +-
 manifests/policy.pp                  | 1 +
 spec/classes/keystone_policy_spec.rb | 2 ++
 3 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/manifests/deps.pp b/manifests/deps.pp
index 0bbc2ae29..b9a5a0add 100644
--- a/manifests/deps.pp
+++ b/manifests/deps.pp
@@ -39,7 +39,7 @@ class keystone::deps {
 
   # policy config should occur in the config block also.
   Anchor['keystone::config::begin']
-  -> Openstacklib::Policy<||>
+  -> Openstacklib::Policy<| tag == 'keystone' |>
   ~> Anchor['keystone::config::end']
 
   # Support packages need to be installed in the install phase, but we don't
diff --git a/manifests/policy.pp b/manifests/policy.pp
index e6c3ad514..85e262b04 100644
--- a/manifests/policy.pp
+++ b/manifests/policy.pp
@@ -67,6 +67,7 @@ class keystone::policy (
     file_group   => $::keystone::params::group,
     file_format  => 'yaml',
     purge_config => $purge_config,
+    tag          => 'keystone',
   }
 
   create_resources('openstacklib::policy', { $policy_path => $policy_parameters })
diff --git a/spec/classes/keystone_policy_spec.rb b/spec/classes/keystone_policy_spec.rb
index 0f35f849a..45c7eb03b 100644
--- a/spec/classes/keystone_policy_spec.rb
+++ b/spec/classes/keystone_policy_spec.rb
@@ -33,6 +33,7 @@ describe 'keystone::policy' do
           :file_group   => 'keystone',
           :file_format  => 'yaml',
           :purge_config => false,
+          :tag          => 'keystone',
         )
         is_expected.to contain_oslo__policy('keystone_config').with(
           :enforce_scope        => false,
@@ -63,6 +64,7 @@ describe 'keystone::policy' do
           :file_group   => 'keystone',
           :file_format  => 'yaml',
           :purge_config => true,
+          :tag          => 'keystone',
         )
         is_expected.to contain_oslo__policy('keystone_config').with(
           :enforce_scope        => false,