Policies¶
Warning
Using a JSON-formatted policy file is deprecated since Blazar 7.0.0 (Wallaby). This oslopolicy-convert-json-to-yaml tool will migrate your existing JSON-formatted policy file to YAML in a backward-compatible way.
The following is an overview of all available policies in Blazar. For a sample configuration file, refer to Sample Policy File.
To change policies, please create a policy file in /etc/blazar/ and specify the policy file name at the oslo_policy/policy_file option in blazar.conf.
blazar¶
admin
- Default
is_admin:True or role:admin
Default rule for most Admin APIs.
admin_or_owner
- Default
rule:admin or project_id:%(project_id)s
Default rule for most non-Admin APIs.
blazar:leases:get
- Default
rule:admin_or_owner
- Operations
GET
/{api_version}/leases
GET
/{api_version}/leases/{lease_id}
Policy rule for List/Show Lease(s) API.
blazar:leases:post
- Default
rule:admin_or_owner
- Operations
POST
/{api_version}/leases
Policy rule for Create Lease API.
blazar:leases:put
- Default
rule:admin_or_owner
- Operations
PUT
/{api_version}/leases/{lease_id}
Policy rule for Update Lease API.
blazar:leases:delete
- Default
rule:admin_or_owner
- Operations
DELETE
/{api_version}/leases/{lease_id}
Policy rule for Delete Lease API.
blazar:oshosts:get
- Default
rule:admin
- Operations
GET
/{api_version}/os-hosts
GET
/{api_version}/os-hosts/{host_id}
Policy rule for List/Show Host(s) API.
blazar:oshosts:post
- Default
rule:admin
- Operations
POST
/{api_version}/os-hosts
Policy rule for Create Host API.
blazar:oshosts:put
- Default
rule:admin
- Operations
PUT
/{api_version}/os-hosts/{host_id}
Policy rule for Update Host API.
blazar:oshosts:delete
- Default
rule:admin
- Operations
DELETE
/{api_version}/os-hosts/{host_id}
Policy rule for Delete Host API.
blazar:oshosts:get_allocations
- Default
rule:admin
- Operations
GET
/{api_version}/os-hosts/allocations
GET
/{api_version}/os-hosts/{host_id}/allocation
Policy rule for List/Get Host(s) Allocations API.
blazar:oshosts:get_resource_properties
- Default
rule:admin
- Operations
GET
/{api_version}/os-hosts/resource_properties
Policy rule for Resource Properties API.
blazar:oshosts:update_resource_properties
- Default
rule:admin
- Operations
PATCH
/{api_version}/os-hosts/resource_properties/{property_name}
Policy rule for Resource Properties API.
blazar:floatingips:get
- Default
rule:admin
- Operations
GET
/{api_version}/floatingips
GET
/{api_version}/floatingips/{floatingip_id}
Policy rule for List/Show FloatingIP(s) API.
blazar:floatingips:post
- Default
rule:admin
- Operations
POST
/{api_version}/floatingips
Policy rule for Create Floating IP API.
blazar:floatingips:delete
- Default
rule:admin
- Operations
DELETE
/{api_version}/floatingips/{floatingip_id}
Policy rule for Delete Floating IP API.