Aodh Sample Policy Configuration File

Warning

JSON formatted policy file is deprecated since Aodh 12.0.0 (Wallaby). This oslopolicy-convert-json-to-yaml tool will migrate your existing JSON-formatted policy file to YAML in a backward-compatible way.

The following is an overview of all available policies in Aodh. For a sample configuration file, refer to policy.yaml.

aodh

context_is_admin
Default:

role:admin

(no description provided)

segregation
Default:

rule:context_is_admin

(no description provided)

admin_or_owner
Default:

rule:context_is_admin or project_id:%(project_id)s

(no description provided)

default
Default:

rule:context_is_admin or project_id:%(project_id)s

(no description provided)

telemetry:get_alarm
Default:

role:reader and project_id:%(project_id)s

Operations:

  • GET /v2/alarms/{alarm_id}

Scope Types:

  • project

Get an alarm.

telemetry:get_alarms
Default:

role:reader and project_id:%(project_id)s

Operations:

  • GET /v2/alarms

Scope Types:

  • project

Get all alarms, based on the query provided.

telemetry:get_alarms:all_projects
Default:

role:admin and project_id:%(project_id)s

Operations:

  • GET /v2/alarms

Scope Types:

  • project

Get alarms of all projects.

telemetry:query_alarm
Default:

role:reader and project_id:%(project_id)s

Operations:

  • POST /v2/query/alarms

Scope Types:

  • project

Get all alarms, based on the query provided.

telemetry:create_alarm
Default:

role:member and project_id:%(project_id)s

Operations:

  • POST /v2/alarms

Scope Types:

  • project

Create a new alarm.

telemetry:change_alarm
Default:

role:member and project_id:%(project_id)s

Operations:

  • PUT /v2/alarms/{alarm_id}

Scope Types:

  • project

Modify this alarm.

telemetry:delete_alarm
Default:

role:member and project_id:%(project_id)s

Operations:

  • DELETE /v2/alarms/{alarm_id}

Scope Types:

  • project

Delete this alarm.

telemetry:get_alarm_state
Default:

role:reader and project_id:%(project_id)s

Operations:

  • GET /v2/alarms/{alarm_id}/state

Scope Types:

  • project

Get the state of this alarm.

telemetry:change_alarm_state
Default:

role:member and project_id:%(project_id)s

Operations:

  • PUT /v2/alarms/{alarm_id}/state

Scope Types:

  • project

Set the state of this alarm.

telemetry:alarm_history
Default:

role:reader and project_id:%(project_id)s

Operations:

  • GET /v2/alarms/{alarm_id}/history

Scope Types:

  • project

Assembles the alarm history requested.

telemetry:query_alarm_history
Default:

role:reader and project_id:%(project_id)s

Operations:

  • POST /v2/query/alarms/history

Scope Types:

  • project

Define query for retrieving AlarmChange data.

telemetry:get_quotas
Default:

role:reader and project_id:%(project_id)s

Operations:

  • Get /v2/quotas

  • Get /v2/quotas/{project_id}

Scope Types:

  • project

Get resources quotas for project.

telemetry:update_quotas
Default:

role:admin and project_id:%(project_id)s

Operations:

  • POST /v2/quotas

Scope Types:

  • project

Update resources quotas for project.

telemetry:delete_quotas
Default:

role:admin and project_id:%(project_id)s

Operations:

  • DELETE /v2/quotas/{project_id}

Scope Types:

  • project

Delete resources quotas for project.