Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 2137173

Summary:	A policy.json is required for heat-engine
Product:	Red Hat OpenStack	Reporter:	Takashi Kajinami <tkajinam>
Component:	openstack-tripleo-heat-templates	Assignee:	Takashi Kajinami <tkajinam>
Status:	CLOSED WONTFIX	QA Contact:	Joe H. Rahme <jhakimra>
Severity:	high	Docs Contact:
Priority:	high
Version:	16.1 (Train)	CC:	astupnik, drosenfe, jjoyce, jschluet, knoha, mburns, slinaber, tkajinam, tvignaud
Target Milestone:	z10	Keywords:	Triaged
Target Release:	16.1 (Train on RHEL 8.2)
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	openstack-tripleo-heat-templates-14.3.1-1.20230322223057.57a2a69.el9osttrunk	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	2113819	Environment:
Last Closed:	2023-04-28 01:32:45 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2113819
Bug Blocks:

Description Takashi Kajinami 2022-10-24 01:59:10 UTC

+++ This bug was initially created as a clone of Bug #2113819 +++

Description of problem:
In current T-H-T in downstream and upstream, HeatApiPolicies parameter is defined for heat-api.

However, the custom heat policy file is also required for heat-engine.
By the lack of the implementation in T-H-T and puppet-heat, heat-engine cannot handle the stack request based on the custom policy.

Version-Release number of selected component (if applicable):
OSP16.1, OSP16.2 and Upstream.

How reproducible:
Always

Steps to Reproduce:
1. Define custom policy with HeatApiPolicies and deploy it.
2. Confirm policy.json is created for heat-api and heat-engine
3.

Actual results:
heat-engine doesn't have the policy.json.
By the lack of the file, stack create will fail due to unauthorized request.

Expected results:
heat-engine has a policy.json.

Additional info: