1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
# == Define: openstacklib::policies
#
# This resource is an helper to call the policy definition
#
# == Parameters:
#
# [*policy_path*]
# (Optional) Path to the policy file. This should be an asbolute path.
# Defaults to $name
#
# [*policies*]
# (Optional) Set of policies to configure. This parameter accepts a hash
# value and is used to define the openstacklib::policies::base defined-type
# resouces. For example
#
# {
# 'my-context_is_admin' => {
# 'key' => 'context_is_admin',
# 'value' => 'true'
# },
# 'default' => {
# 'value' => 'rule:admin_or_owner'
# }
# }
#
# adds the following rules to the policy file.
#
# context_is_admin: true
# default: rule:admin_or_owner
#
# Defaults to {}
#
# [*file_mode*]
# (Optional) Permission mode for the policy file
# Defaults to '0640'
#
# [*file_user*]
# (Optional) User for the policy file
# Defaults to undef
#
# [*file_group*]
# (Optional) Group for the policy file
# Defaults to undef
#
# [*file_format*]
# (Optional) Format for file contents. Valid value is 'yaml'.
# Defaults to 'yaml'.
#
# [*purge_config*]
# (Optional) Whether to set only the specified policy rules in the policy
# file.
# Defaults to false.
#
define openstacklib::policy (
Stdlib::Absolutepath $policy_path = $name,
Openstacklib::Policies $policies = {},
Stdlib::Filemode $file_mode = '0640',
$file_user = undef,
$file_group = undef,
Enum['yaml'] $file_format = 'yaml',
Boolean $purge_config = false,
) {
if empty($policies) {
create_resources('openstacklib::policy::default', { $policy_path => {
file_mode => $file_mode,
file_user => $file_user,
file_group => $file_group,
file_format => $file_format,
purge_config => $purge_config,
}})
} else {
$policy_defaults = {
file_path => $policy_path,
file_mode => $file_mode,
file_user => $file_user,
file_group => $file_group,
file_format => $file_format,
purge_config => $purge_config
}
create_resources('openstacklib::policy::base', $policies, $policy_defaults)
}
}
|
