yahoo-eng-team team mailing list archive

[Lance Bragstad <lbragstad@xxxxxxxxx>]

Public bug reported:

The policy.v3cloudsample.json policy file contains a bunch of redundant
policies. This is because when it was created to try and solve the
admin-ness problem [0], policies were not in code and didn't have
defaults. This meant that we needed to define every policy in the
policy.v3cloudsample.json even if it had the same value as the default
policies.

Ultimately, the policy.v3cloudsample.json policy file should be removed
because it is obsolete with the advent of system-scope [0] and default
roles [1].

[0] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/system-scope.html
[1] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/rocky/define-default-roles.html

** Affects: keystone
     Importance: Medium
         Status: Triaged


** Tags: policy

** Tags added: policy

** Changed in: keystone
       Status: New => Triaged

** Changed in: keystone
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1806762

Title:
  policy.v3cloudsample.json contains redundant policies

Status in OpenStack Identity (keystone):
  Triaged

Bug description:
  The policy.v3cloudsample.json policy file contains a bunch of
  redundant policies. This is because when it was created to try and
  solve the admin-ness problem [0], policies were not in code and didn't
  have defaults. This meant that we needed to define every policy in the
  policy.v3cloudsample.json even if it had the same value as the default
  policies.

  Ultimately, the policy.v3cloudsample.json policy file should be
  removed because it is obsolete with the advent of system-scope [0] and
  default roles [1].

  [0] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/system-scope.html
  [1] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/rocky/define-default-roles.html

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1806762/+subscriptions