Add support for policy.d per service
Summary
=======
This blueprint suggests adding support for multiple policy directories per service so an operator can load multiple policy files just like they can with services through oslo.policy and policy_dirs config.
See https:/
Motivation
========
Ease life of operators so they can use and apply the same policy files and directories between services and Horizon.
Description
=========
The oslo.policy library allows services to load multiple policy files from multiple policy_dirs, usually policy.d. Some projects such as Neutron stadium projects also make use of policy.d to install and use additional policy files.
Current implementation of django-
This blueprint suggests adding a new setting (POLICY_DIRS) where multiple policy directories can be defined per service and loaded by the policy enforcer.
Following code would need to be updated to support POLICY_DIRS per service:
https:/
UX
===
N/A
Testing
======
You should be able to load multiple policy files per service spread across multiple directories as defined by the POLICY_DIRS setting.
Outside Dependencies
==================
N/A
Requirements Update Required
=======
N/A
Doc Impact
=========
* Add documentation about new POLICY_DIRS setting.
Blueprint information
- Status:
- Complete
- Approver:
- Akihiro Motoki
- Priority:
- Medium
- Drafter:
- Mathieu Gagné
- Direction:
- Approved
- Assignee:
- Mathieu Gagné
- Definition:
- Approved
- Series goal:
- Accepted for 13.0.0-queens
- Implementation:
- Implemented
- Milestone target:
- queens-2
- Started by
- Akihiro Motoki
- Completed by
- Akihiro Motoki
Related branches
Related bugs
Sprints
Whiteboard
Gerrit topic: https:/
Addressed by: https:/
Add support for policy directories per service
[Nov 22, 2017 -- amotoki]
Note: this was implemented in Queens cycle in django_
[Nov 27, 2017 -- amotoki]
Moved to horizon
Addressed by: https:/
Add release note on policy dirs support
Gerrit topic: https:/
Addressed by: https:/
Define default POLICY_DIRS value