Comment 1 for bug 1962782

Revision history for this message
Przemyslaw Hausman (phausman) wrote :

Actually only `load-balancer_admin` role is required. Alternatively, nagios user should be a system admin and requests should be made in system scope (instead of project scope). See related policies for Octavia's /octavia/amphorae API below:

"system-admin": "role:admin and system_scope:all"
"load-balancer:admin": "is_admin:True or role:load-balancer_admin or rule:system-admin"
"os_load-balancer_api:amphora:get_all": "rule:load-balancer:admin"