Allow to hide some panels in dashboard

[Nobuto Murata]

For example, when one domain is backed by LDAP and a dedicated dashboard is prepared for the domain (bug 1712999), it makes sense to hide "Change password" panel in the dashboard. Because users cannot update their passwords since Keystone LDAP backend is read-only.

Another example is that "Identity" panel with "projects" may be unnecessary when the domain administrator's policy is one user, one project, i.e. users never switch projects.

I confirmed that those configurations can be done by commands below, but it would be nice those features are in the charm.

SETTINGS_DIR=/usr/share/openstack-dashboard/openstack_dashboard/local/enabled
mkdir -p $SETTINGS_DIR

cat > $SETTINGS_DIR/90_hide_change_password.py <<EOF
PANEL = 'password'
PANEL_DASHBOARD = 'settings'
REMOVE_PANEL = True
EOF

cat > $SETTINGS_DIR/90_hide_identity.py <<EOF
DASHBOARD = 'identity'
DISABLED = True
EOF

See. https://docs.openstack.org/ocata/config-reference/dashboard/config-options.html

[Corey Bryant (corey.bryant)]

As an additional point of information, when dashboard packages (ie. openstack-dashboard, neutron-lbaas-dashboard, designate-dashboard, etc) are installed they install panel config to /usr/share/openstack-dashboard/openstack_dashboard/enabled.

Based on Nobuto's comments it seems that you can override these config files in /usr/share/openstack-dashboard/openstack_dashboard/local/enabled.

Are you thinking this should this be an opinionated decision made by the charm? Or should this be configurable by the charm user? The former seems difficult to get right, and the latter isn't opinionated.

[Nobuto Murata (nobuto)]

In my opinion, we never be able to guess what users would like to hide in an opinionated way. So hiding part would be an arbitrary config option something like:

override-dashboard-flags: >
  {
    90_hide_change_password: {
      PANEL: password,
      PANEL_DASHBOARD: settings,
      REMOVE_PANEL: True
    },
    90_hide_identity: {
      DASHBOARD:identity,
      DISABLED: True,
    }
  }