Allow policy actions in code to be importable for RBAC testing

[Felipe Monteiro]

Now that Keystone is defining all of its policy actions in code, it is no longer possible to read the keystone policy.json in order to retrieve an exhaustive list of all the Keystone policy actions, necessary for RBAC testing by Patrole.

Currently, Nova has its policy actions in code [0] and allows them to be imported via setup.cfg [1].

Keystone can do the same thing as Nova by adding

oslo.policy.policies =
    keystone = keystone.common.policies:list_rules

to its setup.cfg.

Moreover, oslo.policy currently uses the "oslo.policy.policies" extension by default [2] in order to generate a sample policy file.

This bug fix, therefore, solves both issues.

[0] https://github.com/openstack/nova/blob/master/nova/policies/__init__.py
[1] https://github.com/openstack/nova/blob/master/setup.cfg
[2] https://github.com/openstack/oslo.policy/blob/master/oslo_policy/generator.py

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/449694

[Anthony Washington (anthony-washington)]

Hey, Felipe we already have a commit that's in progress to be committed for this fix https://review.openstack.org/#/c/443344/

[OpenStack Infra (hudson-openstack)]

Change abandoned by Felipe Monteiro (<email address hidden>) on branch: master
Review: https://review.openstack.org/449694
Reason: Duplicate.

[Lance Bragstad (lbragstad)]

Moving this back to In Progress since the proposed solution hasn't merged yet. Anthony, thanks for the update!

[Anthony Washington (anthony-washington)]

Patch finally merged to master https://review.openstack.org/#/c/443344/ :)

[Lance Bragstad (lbragstad)]

Automatically unassigning due to inactivity.