Add policy.json file

tasks/ironic_post_install.yml

@@ -45,3 +45,14 @@
   tags:
     - ironic-init
 
+- name: Build the policy.json file
+  template:
+    src: "policy.json.j2"
+    dest: "/etc/ironic/policy.json"
+    mode: "0644"
+    owner: "root"
+    group: "root"
+  notify:
+    - Restart ironic services
+  tags:
+    - ironic-init

templates/policy.json.j2

@@ -0,0 +1,5 @@
+{
+    "admin_api": "role:admin or role:administrator",
+    "show_password": "!",
+    "default": "rule:admin_api"
+}