Trove Policy Configuration

The following is an overview of all available policies in Aodh.

For a sample policy file refer to the policy.yaml or run tox -egenpolicy in the repo folder and the new file will be located in etc/trove/policy.yaml.sample

trove

admin

Default

role:admin or is_admin:True

Must be an administrator.

admin_or_owner

Default

rule:admin or project_id:%(tenant)s

Must be an administrator or owner of the object.

default

Default

rule:admin_or_owner

Must be an administrator or owner of the object.

instance:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances

Create a database instance.

instance:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/instances/{instance_id}

Delete a database instance.

instance:force_delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/instances/{instance_id}

Forcibly delete a database instance.

instance:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances

List database instances.

instance:detail

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/detail

List database instances with details.

instance:show

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}

Get details of a specific database instance.

instance:update

Default

rule:admin_or_owner

Operations

• PUT /v1.0/{account_id}/instances/{instance_id}

• POST /v1.0/{account_id}/instances

Update a database instance to attach/detach configuration

instance:edit

Default

rule:admin_or_owner

Operations

• PATCH /v1.0/{account_id}/instances/{instance_id}

Updates the instance to set or unset one or more attributes.

instance:restart

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/action (restart)

Restart a database instance.

instance:resize_volume

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/action (resize)

Resize a database instance volume.

instance:resize_flavor

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/action (resize)

Resize a database instance flavor.

instance:reset_status

Default

rule:admin

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/action (reset_status)

Reset the status of a database instance to ERROR.

instance:promote_to_replica_source

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/action (promote_to_replica_source)

Promote instance to replica source.

instance:eject_replica_source

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/action (eject_replica_source)

Eject the replica source from its replica set.

instance:configuration

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/configuration

Get the default configuration template applied to the instance.

instance:guest_log_list

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/log

Get all informations about all logs of a database instance.

instance:backups

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/backups

Get all backups of a database instance.

instance:module_list

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/modules

Get informations about modules on a database instance.

instance:module_apply

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/modules

• POST /v1.0/{account_id}/instances

Apply modules to a database instance.

instance:module_remove

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/instances/{instance_id}/modules/{module_id}

Remove a module from a database instance.

instance:extension:root:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/root

Enable the root user of a database instance.

instance:extension:root:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/instances/{instance_id}/root

Disable the root user of a database instance.

instance:extension:root:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/root

Show whether the root user of a database instance has been ever enabled.

cluster:extension:root:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/clusters/{cluster}/root

Enable the root user of the instances in a cluster.

cluster:extension:root:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/clusters/{cluster}/root

Enable the root user of the instances in a cluster.

cluster:extension:root:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/clusters/{cluster}/root

Disable the root of the instances in a cluster.

instance:extension:user:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/users

• POST /v1.0/{account_id}/instances

Create users for a database instance.

instance:extension:user:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/instances/{instance_id}/users/{user}

Delete a user from a database instance.

instance:extension:user:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/users

Get all users of a database instance.

instance:extension:user:show

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/users/{user}

Get the information of a single user of a database instance.

instance:extension:user:update

Default

rule:admin_or_owner

Operations

• PUT /v1.0/{account_id}/instances/{instance_id}/users/{user}

Update attributes for a user of a database instance.

instance:extension:user:update_all

Default

rule:admin_or_owner

Operations

• PUT /v1.0/{account_id}/instances/{instance_id}/users

Update the password for one or more users a database instance.

instance:extension:user_access:update

Default

rule:admin_or_owner

Operations

• PUT /v1.0/{account_id}/instances/{instance_id}/users/{user}/databases

Grant access for a user to one or more databases.

instance:extension:user_access:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/instances/{instance_id}/users/{user}/databases/{database}

Revoke access for a user to a databases.

instance:extension:user_access:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/users/{user}/databases

Get permissions of a user

instance:extension:database:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/instances/{instance_id}/databases

• POST /v1.0/{account_id}/instances

Create a set of Schemas

instance:extension:database:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/instances/{instance_id}/databases/{database}

Delete a schema from a database.

instance:extension:database:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/databases

List all schemas from a database.

instance:extension:database:show

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/instances/{instance_id}/databases/{database}

Get informations of a schema(Currently Not Implemented).

cluster:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/clusters

Create a cluster.

cluster:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/clusters/{cluster}

Delete a cluster.

cluster:force_delete

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/clusters/{cluster} (reset-status)

Forcibly delete a cluster.

cluster:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/clusters

List all clusters

cluster:show

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/clusters/{cluster}

Get informations of a cluster.

cluster:show_instance

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/clusters/{cluster}/instances/{instance}

Get informations of a instance in a cluster.

cluster:action

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/clusters/{cluster}

Commit an action against a cluster

cluster:reset-status

Default

rule:admin

Operations

• POST /v1.0/{account_id}/clusters/{cluster} (reset-status)

Reset the status of a cluster to NONE.

backup:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/backups

Create a backup of a database instance.

backup:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/backups/{backup}

Delete a backup of a database instance.

backup:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/backups

List all backups.

backup:index:all_projects

Default

role:admin

Operations

• GET /v1.0/{account_id}/backups

List backups for all the projects.

backup:show

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/backups/{backup}

Get informations of a backup.

backup_strategy:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/backup_strategies

Create a backup strategy.

backup_strategy:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/backup_strategies

List all backup strategies.

backup_strategy:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/backup_strategies

Delete backup strategies.

configuration:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/configurations

Create a configuration group.

configuration:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/configurations/{config}

Delete a configuration group.

configuration:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/configurations

List all configuration groups.

configuration:show

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/configurations/{config}

Get informations of a configuration group.

configuration:instances

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/configurations/{config}/instances

List all instances which a configuration group has be assigned to.

configuration:update

Default

rule:admin_or_owner

Operations

• PUT /v1.0/{account_id}/configurations/{config}

Update a configuration group(the configuration group will be replaced completely).

configuration:edit

Default

rule:admin_or_owner

Operations

• PATCH /v1.0/{account_id}/configurations/{config}

Patch a configuration group.

configuration-parameter:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/datastores/{datastore}/versions/{version}/parameters

List all parameters bind to a datastore version.

configuration-parameter:show

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/datastores/{datastore}/versions/{version}/parameters/{param}

Get a paramter of a datastore version.

configuration-parameter:index_by_version

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/datastores/versions/{version}/paramters

List all paramters bind to a datastore version by the id of the version(datastore is not provided).

configuration-parameter:show_by_version

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/datastores/versions/{version}/paramters/{param}

Get a paramter of a datastore version by it names and the id of the version(datastore is not provided).

datastore:index

Default

<empty string>

Operations

• GET /v1.0/{account_id}/datastores

List all datastores.

datastore:show

Default

<empty string>

Operations

• GET /v1.0/{account_id}/datastores/{datastore}

Get informations of a datastore.

datastore:delete

Default

rule:admin

Operations

• DELETE /v1.0/{account_id}/datastores/{datastore}

Delete a datastore.

datastore:version_show

Default

<empty string>

Operations

• GET /v1.0/{account_id}/datastores/{datastore}/versions/{version}

Get a version of a datastore by the version id.

datastore:version_show_by_uuid

Default

<empty string>

Operations

• GET /v1.0/{account_id}/datastores/versions/{version}

Get a version of a datastore by the version id(without providing the datastore id).

datastore:version_index

Default

<empty string>

Operations

• GET /v1.0/{account_id}/datastores/{datastore}/versions

Get all versions of a datastore.

datastore:list_associated_flavors

Default

<empty string>

Operations

• GET /v1.0/{account_id}/datastores/{datastore}/versions/{version}/flavors

List all flavors associated with a datastore version.

datastore:list_associated_volume_types

Default

<empty string>

Operations

• GET /v1.0/{account_id}/datastores/{datastore}/versions/{version}/volume-types

List all volume-types associated with a datastore version.

flavor:index

Default

<empty string>

Operations

• GET /v1.0/{account_id}/flavors

List all flavors.

flavor:show

Default

<empty string>

Operations

• GET /v1.0/{account_id}/flavors/{flavor}

Get information of a flavor.

limits:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/limits

List all absolute and rate limit informations.

module:create

Default

rule:admin_or_owner

Operations

• POST /v1.0/{account_id}/modules

Create a module.

module:delete

Default

rule:admin_or_owner

Operations

• DELETE /v1.0/{account_id}/modules/{module}

Delete a module.

module:index

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/modules

List all modules.

module:show

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/modules/{module}

Get informations of a module.

module:instances

Default

rule:admin_or_owner

Operations

• GET /v1.0/{account_id}/modules/{module}/instances

List all instances to which a module is applied.

module:update

Default

rule:admin_or_owner

Operations

• PUT /v1.0/{account_id}/modules/{module}

Update a module.

module:reapply

Default

rule:admin_or_owner

Operations

• PUT /v1.0/{account_id}/modules/{module}/instances

Reapply a module to all instances.