Bug 1304025 - [RFE] Permit modifying policy.json files for openstack services based on config needs
Summary: [RFE] Permit modifying policy.json files for openstack services based on conf...
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 12.0 (Pike)
Hardware: x86_64
OS: Linux
Target Milestone: Upstream M1
: 12.0 (Pike)
Assignee: Emilien Macchi
QA Contact: Gurenko Alex
: 1304024 (view as bug list)
Depends On:
Blocks: 1442136 1469578
TreeView+ depends on / blocked
Reported: 2016-02-02 17:12 UTC by Freddy Wissing
Modified: 2020-04-15 14:22 UTC (History)
11 users (show)

Fixed In Version: openstack-tripleo-heat-templates-7.0.0-0.20170419202046.el7ost
Doc Type: Enhancement
Doc Text:
Clone Of:
Last Closed: 2017-12-13 20:40:44 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
OpenStack gerrit 445700 0 None MERGED Allow to configure policy.json for OpenStack projects 2020-12-01 22:58:01 UTC
OpenStack gerrit 446039 0 None MERGED Document how to configure OpenStack API policies 2020-12-01 22:57:35 UTC
Red Hat Product Errata RHEA-2017:3462 0 normal SHIPPED_LIVE Red Hat OpenStack Platform 12.0 Enhancement Advisory 2018-02-16 01:43:25 UTC

Description Freddy Wissing 2016-02-02 17:12:56 UTC
Customer use case is as a hosting provider requires control access and permission within the stack in a granular fashion.  The way that this is done (presently) is through the use of each component's policy.json file.  

The ability to automate this via puppet or heat template at time of deploy would be a nice feature to have as it would assist in consolidating the post deployment actions that are being done and allow for a structured approach in crafting specialized permissions.


Additional info

Due to the nature of hosting, this customer would like to have the ability to dictate during the initial data dump into director to add the configuration changes to each components policy.json file.  This would allow for the services to be hardened at the time of deployment rather than either being scripted out later or a manual process post deploy.

Comment 2 Mike Burns 2016-02-03 16:43:20 UTC
*** Bug 1304024 has been marked as a duplicate of this bug. ***

Comment 3 Mike Burns 2016-04-07 21:07:13 UTC
This bug did not make the OSP 8.0 release.  It is being deferred to OSP 10.

Comment 5 Emilien Macchi 2017-02-01 22:19:16 UTC
The blueprint has been created upstream:https://blueprints.launchpad.net/tripleo/+spec/modify-policy-json

Target is pike-1 milestone for now.

Comment 6 Red Hat Bugzilla Rules Engine 2017-02-01 22:19:23 UTC
This bugzilla has been removed from the release and needs to be reviewed and Triaged for another Target Release.

Comment 7 Red Hat Bugzilla Rules Engine 2017-03-13 04:45:40 UTC
This bugzilla has been removed from the release and needs to be reviewed and Triaged for another Target Release.

Comment 15 Gurenko Alex 2017-11-23 11:38:50 UTC
Verified on build 2017-11-20.1. Update scenario verified on 2017-11-20.1 -> 2017-11.22.7

Comment 18 errata-xmlrpc 2017-12-13 20:40:44 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.