Masakari Policies¶
The following is an overview of all available policies in masakari. For a sample configuration file, refer to Sample Masakari Policy File.
masakari¶
context_is_adminDefault: role:adminDecides what is required for the 'is_admin:True' check to succeed.
admin_or_ownerDefault: is_admin:True or project_id:%(project_id)sDefault rule for most non-Admin APIs.
admin_apiDefault: is_admin:TrueDefault rule for most Admin APIs.
os_masakari_api:extensions:indexDefault: rule:admin_apiOperations: - GET
/extensions
List available extensions.
- GET
os_masakari_api:extensions:detailDefault: rule:admin_apiOperations: - GET
/extensions/{extensions_id}
Shows information for an extension.
- GET
os_masakari_api:extensions:discoverableDefault: rule:admin_apiExtension Info API extensions to change the API.
os_masakari_api:os-hosts:indexDefault: rule:admin_apiOperations: - GET
/segments/{segment_id}/hosts
Lists IDs, names, type, reserved, on_maintenance for all hosts.
- GET
os_masakari_api:os-hosts:detailDefault: rule:admin_apiOperations: - GET
/segments/{segment_id}/hosts/{host_id}
Shows details for a host.
- GET
os_masakari_api:os-hosts:createDefault: rule:admin_apiOperations: - POST
/segments/{segment_id}/hosts
Creates a host under given segment.
- POST
os_masakari_api:os-hosts:updateDefault: rule:admin_apiOperations: - PUT
/segments/{segment_id}/hosts/{host_id}
Updates the editable attributes of an existing host.
- PUT
os_masakari_api:os-hosts:deleteDefault: rule:admin_apiOperations: - DELETE
/segments/{segment_id}/hosts/{host_id}
Deletes a host from given segment.
- DELETE
os_masakari_api:os-hosts:discoverableDefault: rule:admin_apiHost API extensions to change the API.
os_masakari_api:notifications:indexDefault: rule:admin_apiOperations: - GET
/notifications
Lists IDs, notification types, host_name, generated_time, payload and status for all notifications.
- GET
os_masakari_api:notifications:detailDefault: rule:admin_apiOperations: - GET
/notifications/{notification_id}
Shows details for a notification.
- GET
os_masakari_api:notifications:createDefault: rule:admin_apiOperations: - POST
/notifications
Creates a notification.
- POST
os_masakari_api:notifications:discoverableDefault: rule:admin_apiNotification API extensions to change the API.
os_masakari_api:segments:indexDefault: rule:admin_apiOperations: - GET
/segments
Lists IDs, names, description, recovery_method, service_type for all segments.
- GET
os_masakari_api:segments:detailDefault: rule:admin_apiOperations: - GET
/segments/{segment_id}
Shows details for a segment.
- GET
os_masakari_api:segments:createDefault: rule:admin_apiOperations: - POST
/segments
Creates a segment.
- POST
os_masakari_api:segments:updateDefault: rule:admin_apiOperations: - PUT
/segments/{segment_id}
Updates the editable attributes of an existing host.
- PUT
os_masakari_api:segments:deleteDefault: rule:admin_apiOperations: - DELETE
/segments/{segment_id}
Deletes a segment.
- DELETE
os_masakari_api:segments:discoverableDefault: rule:admin_apiSegment API extensions to change the API.
os_masakari_api:versions:indexDefault: @Operations: - GET
/
List all versions.
- GET
os_masakari_api:versions:discoverableDefault: @Version API extensions to change the API.