1. There is no main policy file (policy.yaml or policy.json), but there are 2 policy files in policy directory:
# ls /etc/octavia/ certs logging.conf octavia.conf policy.d
# ls /etc/octavia/policy.d/ 01-default.yaml 02-custom.yaml
# cat /etc/octavia/policy.d/01-default.yaml load-balancer:member_and_owner: (role:load-balancer_member or role:member) and rule:load-balancer:owner
# cat /etc/octavia/policy.d/02-custom.yaml os_load-balancer_api:loadbalancer:get_all: '!' os_load-balancer_api:pool:get_all: '!'
2. An user with member role asks loadbalancer list and gets response: Unrecognized schema in response body. (HTTP 403)
3. empty file /etc/octavia/policy.d/02-custom.yaml
# cat /etc/octavia/policy.d/02-custom.yaml {}
actual behavior: user was denied to get loadbalancer list
expected behavior: User got loadbalancer list
1. There is no main policy file (policy.yaml or policy.json),
but there are 2 policy files in policy directory:
# ls /etc/octavia/
certs logging.conf octavia.conf policy.d
# ls /etc/octavia/ policy. d/
01-default.yaml 02-custom.yaml
# cat /etc/octavia/ policy. d/01-default. yaml member_ and_owner: (role:load- balancer_ member or role:member) and rule:load- balancer: owner
load-balancer:
# cat /etc/octavia/ policy. d/02-custom. yaml balancer_ api:loadbalance r:get_all: '!' balancer_ api:pool: get_all: '!'
os_load-
os_load-
2. An user with member role asks loadbalancer list and gets response:
Unrecognized schema in response body. (HTTP 403)
3. empty file /etc/octavia/ policy. d/02-custom. yaml
# cat /etc/octavia/ policy. d/02-custom. yaml
{}
2. An user with member role asks loadbalancer list and gets response:
Unrecognized schema in response body. (HTTP 403)
actual behavior:
user was denied to get loadbalancer list
expected behavior:
User got loadbalancer list