Define policies for accessing Watcher components
Each OpenStack service, Identity, Compute, Networking and so on, has its own role-based access policies. They determine which user can access which objects in which way, and are defined in the service's policy.json file. The policy rule determines under which circumstances the API call is permitted. So, a cloud admin should be able to customize access rights on Watcher API.
Blueprint information
- Status:
- Complete
- Approver:
- Antoine Cabot
- Priority:
- Essential
- Drafter:
- Antoine Cabot
- Direction:
- Approved
- Assignee:
- Charlotte Han
- Definition:
- Approved
- Series goal:
- Accepted for newton
- Implementation:
-
Implemented
- Milestone target:
-
newton-2
- Started by
- Antoine Cabot
- Completed by
- David TARDIVEL
Related branches
Related bugs
Sprints
Whiteboard
there is a WIP on policy evolution at the OpenStack level : https:/
Gerrit topic: https:/
Addressed by: https:/
Add policies for API access control to watcher project.
Addressed by: https:/
Add new documentation section for Watcher policies rules
Addressed by: https:/
[WIP]Add policies for API access control to watcher-dashboard project
