aboutsummaryrefslogtreecommitdiffstats
path: root/environments/nova-api-policy.yaml
blob: 681bd010b5e11d0a57380a8856fd84167ea8001b (plain)
1
2
3
4
5
6
7
8
9
10
# A Heat environment file which can be used to configure access policies for
# Nova API resources. It is here for example and doesn't cover all services
# but just Nova here.
# While recipes for editing policy.json files is supported, modifying the
# policy can have unexpected side effects and is not encouraged.

parameter_defaults:
  # The target is "compute:get_all", the "list all instances" API of the Compute service.
  # The rule is an empty string meaning "always". This policy allows anybody to list instances.
  NovaApiPolicies: { nova-context_is_admin: { key: 'compute:get_all', value: '' } }