Senlin Sample Policy Configuration File

Warning

JSON formatted policy file is deprecated since Senlin 11.0.0 (Wallaby). This oslopolicy-convert-json-to-yaml tool will migrate your existing JSON-formatted policy file to YAML in a backward-compatible way.

The following is an overview of all available access policies in Senlin. For a sample configuration file, refer to policy.yaml.

senlin

context_is_admin

Default:

role:admin

(no description provided)

deny_everybody

Default:

!

(no description provided)

build_info:build_info

Default:

<empty string>

Operations:

• GET /v1/build-info

Show build information

profile_types:index

Default:

<empty string>

Operations:

• GET /v1/profile-types

List profile types

profile_types:get

Default:

<empty string>

Operations:

• GET /v1/profile-types/{profile_type}

Show profile type details

profile_types:ops

Default:

<empty string>

Operations:

• GET /v1/profile-types/{profile_type}/ops

List profile type operations

policy_types:index

Default:

<empty string>

Operations:

• GET /v1/policy-types

List policy types

policy_types:get

Default:

<empty string>

Operations:

• GET /v1/policy-types/{policy_type}

Show policy type details

clusters:index

Default:

<empty string>

Operations:

• GET /v1/clusters

List clusters

clusters:create

Default:

<empty string>

Operations:

• POST /v1/clusters

Create cluster

clusters:delete

Default:

<empty string>

Operations:

• DELETE /v1/clusters/{cluster_id}

Delete cluster

clusters:get

Default:

<empty string>

Operations:

• GET /v1/clusters/{cluster_id}

Show cluster details

clusters:action

Default:

<empty string>

Operations:

• POST /v1/clusters/{cluster_id}/actions

Perform specified action on a cluster.

clusters:update

Default:

<empty string>

Operations:

• PATCH /v1/clusters/{cluster_id}

Update cluster

clusters:collect

Default:

<empty string>

Operations:

• GET v1/clusters/{cluster_id}/attrs/{path}

Collect Attributes Across a Cluster

clusters:operation

Default:

<empty string>

Operations:

• POST /v1/clusters/{cluster_id}/ops

Perform an Operation on a Cluster

profiles:index

Default:

<empty string>

Operations:

• GET /v1/profiles

List profiles

profiles:create

Default:

<empty string>

Operations:

• POST /v1/profiles

Create profile

profiles:get

Default:

<empty string>

Operations:

• GET /v1/profiles/{profile_id}

Show profile details

profiles:delete

Default:

<empty string>

Operations:

• DELETE /v1/profiles/{profile_id}

Delete profile

profiles:update

Default:

<empty string>

Operations:

• PATCH /v1/profiles/{profile_id}

Update profile

profiles:validate

Default:

<empty string>

Operations:

• POST /v1/profiles/validate

Validate profile

nodes:index

Default:

<empty string>

Operations:

• GET /v1/nodes

List nodes

nodes:create

Default:

<empty string>

Operations:

• GET /v1/nodes

Create node

nodes:adopt

Default:

<empty string>

Operations:

• POST /v1/nodes/adopt

Adopt node

nodes:adopt_preview

Default:

<empty string>

Operations:

• POST /v1/nodes/adopt-preview

Adopt node (preview)

nodes:get

Default:

<empty string>

Operations:

• GET /v1/nodes/{node_id}

Show node details

nodes:action

Default:

<empty string>

Operations:

• POST /v1/nodes/{node_id}/actions

Perform specified action on a Node.

nodes:update

Default:

<empty string>

Operations:

• PATCH /v1/nodes/{node_id}

Update node

nodes:delete

Default:

<empty string>

Operations:

• DELETE /v1/nodes/{node_id}

Delete node

nodes:operation

Default:

<empty string>

Operations:

• POST /v1/nodes/{node_id}/ops

Perform an Operation on a Node

policies:index

Default:

<empty string>

Operations:

• GET /v1/policies

List policies

policies:create

Default:

<empty string>

Operations:

• POST /v1/policies

Create policy

policies:get

Default:

<empty string>

Operations:

• GET /v1/policies/{policy_id}

Show policy details

policies:update

Default:

<empty string>

Operations:

• PATCH /v1/policies/{policy_id}

Update policy

policies:delete

Default:

<empty string>

Operations:

• DELETE /v1/policies/{policy_id}

Delete policy

policies:validate

Default:

<empty string>

Operations:

• POST /v1/policies/validate

Validate policy.

cluster_policies:index

Default:

<empty string>

Operations:

• GET /v1/clusters/{cluster_id}/policies

List cluster policies

cluster_policies:attach

Default:

<empty string>

Operations:

• POST /v1/clusters/{cluster_id}/actions

Attach a Policy to a Cluster

cluster_policies:detach

Default:

<empty string>

Operations:

• POST /v1/clusters/{cluster_id}/actions

Detach a Policy from a Cluster

cluster_policies:update

Default:

<empty string>

Operations:

• POST /v1/clusters/{cluster_id}/actions

Update a Policy on a Cluster

cluster_policies:get

Default:

<empty string>

Operations:

• GET /v1/clusters/{cluster_id}/policies/{policy_id}

Show cluster_policy details

receivers:index

Default:

<empty string>

Operations:

• GET /v1/receivers

List receivers

receivers:create

Default:

<empty string>

Operations:

• POST /v1/receivers

Create receiver

receivers:get

Default:

<empty string>

Operations:

• GET /v1/receivers/{receiver_id}

Show receiver details

receivers:update

Default:

<empty string>

Operations:

• PATCH /v1/receivers/{receiver_id}

Update receiver

receivers:delete

Default:

<empty string>

Operations:

• DELETE /v1/receivers/{receiver_id}

Delete receiver

receivers:notify

Default:

<empty string>

Operations:

• POST /v1/receivers/{receiver_id}/notify

Notify receiver

actions:index

Default:

<empty string>

Operations:

• GET /v1/actions

List actions

actions:get

Default:

<empty string>

Operations:

• GET /v1/actions/{action_id}

Show action details

actions:update

Default:

<empty string>

Operations:

• PATCH /v1/actions/{action_id}

Update action

events:index

Default:

<empty string>

Operations:

• GET /v1/events

List events

events:get

Default:

<empty string>

Operations:

• GET /v1/events/{event_id}

Show event details

webhooks:trigger

Default:

<empty string>

Operations:

• POST /v1/webhooks/{webhook_id}/trigger

Trigger webhook action

services:index

Default:

role:admin

Operations:

• GET /v1/services

List services