The oslopolicy-policy-generator command line tool does not run
currently, throwing a KeyError. This is because a policy enforcer needs
to be added to Neutron for the command to run.
This change is a limited backport of "Convert policy.json into
policy-in-code" [1]. The feature of policy-in-code is not backported;
all that is backported is the changes needed for the
oslopolicy-policy-generator command line tool to function properly,
which were bundled in with the rest of the policy-in-code feature.
For reference, an analogous change was merged in keystone to solve the
same problem [2].
Reviewed: https:/ /review. openstack. org/650955 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=44d34170ccc 439f433697b2117 d0251530e5d508
Committed: https:/
Submitter: Zuul
Branch: stable/queens
commit 44d34170ccc439f 433697b2117d025 1530e5d508
Author: Nate Johnston <email address hidden>
Date: Mon Mar 25 16:04:22 2019 -0400
Add enforcer logic for neutron policy
The oslopolicy- policy- generator command line tool does not run
currently, throwing a KeyError. This is because a policy enforcer needs
to be added to Neutron for the command to run.
This change is a limited backport of "Convert policy.json into policy- generator command line tool to function properly,
policy-in-code" [1]. The feature of policy-in-code is not backported;
all that is backported is the changes needed for the
oslopolicy-
which were bundled in with the rest of the policy-in-code feature.
For reference, an analogous change was merged in keystone to solve the
same problem [2].
[1] https:/ /review. openstack. org/585037 /review. openstack. org/530828
[2] https:/
Change-Id: I912f23e9c6800b 71672507c548cfa b3f094de9c7 fe51f9b2270401c ca2956079a)
Closes-Bug: #1817953
(cherry picked from commit 96b0b90b89ceb8e