oslo.policy/releasenotes/notes/Pass-target-dict-to-oslopolicy-checker-87185d40aec413ee.yaml
Juan Antonio Osorio Robles f79650325f Add ability to pass in target data for the oslopolicy-checker
This allows us to test the policy for other services which might have
different or unusual target data formats (such as Barbican). It would be
possible to pass it as a nested dictionary, e.g.:

{
    "target": {
        "secret": {
            "project_id": "my project id"
        }
    }
}

or as a key pair (as oslo.policy would expect):
{
    "target.secret.project_id": "my project id"
}

Both will work (note that this logic was taken from barbican).

This fixes around the limitation that the target is hardcoded to be
"project_id", and thus allows to test more scenarios (such as the
project ID not matching).

Change-Id: Ia9f7462072a8cb142251c8bb5ef19d9a25a98119
2018-11-02 14:14:21 +02:00

7 lines
230 B
YAML

---
features:
- |
oslopolicy-checker was added the ability to accept a file containing a hash
that represents the target. This makes it possible to check policies that
have non-conventional targets such as barbican.