cpe-deployments/resources/keystone.yaml
Arif Ali 1e56ae1ff6
more fine tuning
* Add the other hosts
* Update keystone policy override to mimic default plus addition
* nova policy extra line
2022-11-03 07:56:38 +00:00

7 lines
315 B
YAML

# default rules
# https://docs.openstack.org/keystone/ussuri/configuration/policy.html
context_is_tenantLead: role:tenantLead
identity:update_user: (role:admin and system_scope:all) or (role:admin and token.domain.id:%(target.user.domain_id)s) or (rule:context_is_tenantLead and project_id:%(target.project.id)s)