policy enforcement - add cleaning action rules for simulation call
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Murano |
Fix Released
|
High
|
Filip Blaha |
Bug Description
Currently policy enforcement's policy simulation call just adds mapping. In case of env redeployment it can lead to invalid data, so we need to clean data populated by the the driver at the beginning of simulation sequence.
Further in order to simplify congress setup we need to also create murano_system policy as part of congress client initialization in Murano.
-----
Here are policy and rule definitions for clean up (expressed as congress cli commands):
openstack congress policy create murano_action --kind action
openstack congress policy rule create murano_action 'action(
# states
openstack congress policy rule create murano_action 'murano:
# parent_types
openstack congress policy rule create murano_action 'murano:
openstack congress policy rule create murano_action 'murano:
# properties
openstack congress policy rule create murano_action 'murano:
openstack congress policy rule create murano_action 'murano:
# objects
openstack congress policy rule create murano_action 'murano:
openstack congress policy rule create murano_action 'murano:
# relationships
openstack congress policy rule create murano_action 'murano:
openstack congress policy rule create murano_action 'murano:
# connected
openstack congress policy rule create murano_action 'murano:
openstack congress policy rule create murano_action 'murano:
----------
policy simulation example (see
openstack congress policy simulate murano_system 'predeploy_
Changed in murano: | |
assignee: | nobody → Filip Blaha (filip-blaha) |
Changed in murano: | |
status: | New → Confirmed |
milestone: | none → kilo-rc1 |
importance: | Undecided → Medium |
Changed in murano: | |
importance: | Medium → High |
Changed in murano: | |
assignee: | Filip Blaha (filip-blaha) → Radek Pospisil (radek-pospisil) |
Changed in murano: | |
assignee: | Radek Pospisil (radek-pospisil) → Filip Blaha (filip-blaha) |
Changed in murano: | |
status: | Fix Committed → Fix Released |
Changed in murano: | |
milestone: | kilo-rc1 → 2015.1.0 |
Fix proposed to branch: master /review. openstack. org/171684
Review: https:/