oslopolicy-list-redundant¶
Synopsis¶
oslopolicy-list-redundant [-h] [--config-dir DIR] [--config-file PATH]
[--namespace NAMESPACE]
Description¶
The oslopolicy-list-redundant
tool is useful for detecting policies that
are specified in policy files that are the same as the defaults provided by the
service. Operators can use this tool to find policies that they can remove from
their policy files, making maintenance easier.
This tool assumes a policy file containing overrides exists and is specified through configuration.
Options¶
-
-h
,
--help
¶
Show help message and exit.
-
--config-dir
DIR
¶ Path to a config directory to pull
*.conf
files from. This file set is sorted, so as to provide a predictable parse order if individual options are overridden. The set is parsed after the file(s) specified via previous--config-file
, arguments hence overridden options in the directory take precedence.This option must be set from the command-line.
-
--config-file
PATH
¶ Path to a config file to use. Multiple config files can be specified, with values in later files taking precedence. Defaults to None. This option must be set from the command-line.
-
--namespace
NAMESPACE
¶ Option namespace under “oslo.policy.enforcer” in which to look for a
policy.Enforcer
.
Examples¶
To list redundant default policies:
oslopolicy-list-redundant --namespace keystone --config-dir /etc/keystone
For more information regarding the options supported by this tool:
oslopolicy-list-redundant --help
See Also¶
oslopolicy-sample-generator, oslopolicy-policy-generator, oslopolicy-checker