OpenStack¶

Gnocchi and Panko policies configuration¶

Added the capability to configure custom policies for Gnocchi and Panko through the Reclass model. To set a Gnocchi or Panko policy, use the following pillars:

• For Panko:

  panko:
    server:
      ...
      policy:
        'context_is_admin': 'role:admin'
        'segregation': 'rule:context_is_admin'
        # Add key without value to remove line from policy.json
        'telemetry:events:index':
  

• For Gnocchi:

  gnocchi:
    server:
      ...
      policy:
        'resource_owner': 'project_id:%(project_id)s'
        'get status': 'role:admin'
        # Add key without value to remove line from policy.json
        'list resource type':