diff options
author | RHE <rebirthmonkey@gmail.com> | 2017-12-26 15:38:11 +0100 |
---|---|---|
committer | RHE <rebirthmonkey@gmail.com> | 2017-12-26 15:38:11 +0100 |
commit | 69910cdd22ec3b27f3e1f608b317f9683de1dcf6 (patch) | |
tree | 93b38d646d4f42df1eef564ec887dad46356fd46 /tests/functional/scenario/rbac.py | |
parent | 454e9c5f8664ea99ccea2417b6cc3ffb238cf834 (diff) |
moon kubernetes review
Change-Id: I49a62f18ac6ecd06cdbc8e51b4e8ba00971ce6aa
Signed-off-by: RHE <rebirthmonkey@gmail.com>
Diffstat (limited to 'tests/functional/scenario/rbac.py')
-rw-r--r-- | tests/functional/scenario/rbac.py | 44 |
1 files changed, 0 insertions, 44 deletions
diff --git a/tests/functional/scenario/rbac.py b/tests/functional/scenario/rbac.py deleted file mode 100644 index 89fd7de8..00000000 --- a/tests/functional/scenario/rbac.py +++ /dev/null @@ -1,44 +0,0 @@ - -pdp_name = "pdp1" -policy_name = "RBAC policy example" -model_name = "RBAC" -policy_genre = "authz" - -subjects = {"user0": "", "user1": "", } -objects = {"vm0": "", "vm1": "", } -actions = {"start": "", "stop": ""} - -subject_categories = {"role": "", } -object_categories = {"id": "", } -action_categories = {"action-type": "", } - -subject_data = {"role": {"admin": "", "employee": "", "*": ""}} -object_data = {"id": {"vm0": "", "vm1": "", "*": ""}} -action_data = {"action-type": {"vm-action": "", "*": ""}} - -subject_assignments = {"user0": ({"role": "employee"}, {"role": "*"}), "user1": ({"role": "employee"}, {"role": "*"}), } -object_assignments = {"vm0": ({"id": "vm0"}, {"id": "*"}), "vm1": ({"id": "vm1"}, {"id": "*"})} -action_assignments = {"start": ({"action-type": "vm-action"}, {"action-type": "*"}), "stop": ({"action-type": "vm-action"}, {"action-type": "*"})} - -meta_rule = { - "rbac": {"id": "", "value": ("role", "id", "action-type")}, -} - -rules = { - "rbac": ( - { - "rule": ("admin", "vm0", "vm-action"), - "instructions": ( - {"decision": "grant"}, # "grant" to immediately exit, "continue" to wait for the result of next policy - ) - }, - { - "rule": ("employee", "vm1", "vm-action"), - "instructions": ( - {"decision": "grant"}, - ) - }, - ) -} - - |