openstack/openstack-helm
Code Issues Proposed changes

barbican: fix values overrides for stein and ocata

Browse Source 
When the default release was switched from ocata to stein, some of the
policies were duplicated. This moves the ocata overrides back to where
they belong, and adds overrides for pike, queens, and rocky.

Change-Id: I342d69e721b2692987951055e41ed5e153a91d6c
This commit is contained in:
Phil Sphicas 2020-01-16 14:54:35 -08:00
parent 9ded66d17f
commit 2cb3d41544
5 changed files with 24 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
barbican/values.yaml
View File

@ -322,14 +322,10 @@ conf:
admin_or_creator: rule:admin or rule:creator
all_but_audit: rule:admin or rule:observer or rule:creator
all_users: rule:admin or rule:observer or rule:creator or rule:audit or rule:service_admin
secret_project_match: project:%(target.secret.project_id)s
secret_acl_read: "'read':%(target.secret.read)s"
secret_private_read: "'False':%(target.secret.read_project_access)s"
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_acl_read: "'read':%(target.container.read)s"
container_private_read: "'False':%(target.container.read_project_access)s"
container_creator_user: user:%(target.container.creator_id)s
secret_non_private_read: rule:all_users and rule:secret_project_match and not rule:secret_private_read
secret_decrypt_non_private_read: rule:all_but_audit and rule:secret_project_match
and not rule:secret_private_read

6
barbican/values_overrides/ocata.yaml Normal file
View File

@ -0,0 +1,6 @@
conf:
policy:
secret_project_match: project:%(target.secret.project_id)s
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_creator_user: user:%(target.container.creator_id)s

6
barbican/values_overrides/pike.yaml Normal file
View File

@ -0,0 +1,6 @@
conf:
policy:
secret_project_match: project:%(target.secret.project_id)s
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_creator_user: user:%(target.container.creator_id)s

6
barbican/values_overrides/queens.yaml Normal file
View File

@ -0,0 +1,6 @@
conf:
policy:
secret_project_match: project:%(target.secret.project_id)s
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_creator_user: user:%(target.container.creator_id)s

6
barbican/values_overrides/rocky.yaml Normal file
View File

@ -0,0 +1,6 @@
conf:
policy:
secret_project_match: project:%(target.secret.project_id)s
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_creator_user: user:%(target.container.creator_id)s