Skip to content

Commit 79510e1

Browse files
shashank-netappshashank-netapp
authored
Updating custom role api's list
1 parent 6a25ff1 commit 79510e1

File tree

7 files changed

+72
-37
lines changed

7 files changed

+72
-37
lines changed

‎contrib/ontap/trident_role/cli_pastable/rest_custom_role_output.txt‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
security login rest-role create -role "trident" -api "/api/private/cli/vserver/nvme/subsystem/delete" -access all
2+
security login rest-role create -role "trident" -api "/api/protocols/san/igroups/initiators" -access all
3+
security login rest-role create -role "trident" -api "/api/protocols/nvme/subsystems/hosts" -access all
4+
security login rest-role create -role "trident" -api "/api/protocols/san/igroups" -access all
5+
security login rest-role create -role "trident" -api "/api/protocols/san/iscsi/credentials" -access read_modify
6+
security login rest-role create -role "trident" -api "/api/network/ip/interfaces" -access readonly
7+
security login rest-role create -role "trident" -api "/api/protocols/san/iscsi/services" -access readonly
8+
security login rest-role create -role "trident" -api "/api/storage/luns" -access all
9+
security login rest-role create -role "trident" -api "/api/cluster/jobs" -access readonly
10+
security login rest-role create -role "trident" -api "/api/storage/qtrees" -access all
11+
security login rest-role create -role "trident" -api "/api/cluster" -access readonly
12+
security login rest-role create -role "trident" -api "/api/snapmirror/relationships" -access all
13+
security login rest-role create -role "trident" -api "/api/protocols/nvme/subsystems" -access all
14+
security login rest-role create -role "trident" -api "/api/storage/volumes" -access all
15+
security login rest-role create -role "trident" -api "/api/storage/quota/rules" -access read_create_modify
16+
security login rest-role create -role "trident" -api "/api/storage/volumes/snapshots" -access all
17+
security login rest-role create -role "trident" -api "/api/svm/svms" -access readonly
18+
security login rest-role create -role "trident" -api "/api/protocols/nfs/export-policies/rules" -access all
19+
security login rest-role create -role "trident" -api "/api/cluster/schedules" -access readonly
20+
security login rest-role create -role "trident" -api "/api/protocols/cifs/shares" -access all
21+
security login rest-role create -role "trident" -api "/api/support/ems/application-logs" -access read_create
22+
security login rest-role create -role "trident" -api "/api/protocols/nfs/export-policies" -access all
23+
security login rest-role create -role "trident" -api "/api/protocols/nvme/subsystem-maps" -access all
24+
security login rest-role create -role "trident" -api "/api/protocols/san/lun-maps" -access all
25+
security login rest-role create -role "trident" -api "/api/snapmirror/policies" -access readonly
26+
security login rest-role create -role "trident" -api "/api/storage/aggregates" -access readonly
27+
security login rest-role create -role "trident" -api "/api/storage/luns/attributes" -access read_create_modify
28+
security login rest-role create -role "trident" -api "/api/protocols/san/lun-maps/reporting-nodes" -access readonly
29+
security login rest-role create -role "trident" -api "/api/svm/peers" -access readonly
30+
security login rest-role create -role "trident" -api "/api/network/fc/interfaces" -access readonly
31+
security login rest-role create -role "trident" -api "/api/protocols/san/fcp/services" -access readonly
32+
security login rest-role create -role "trident" -api "/api/storage/storage-units/snapshots" -access all
33+
security login rest-role create -role "trident" -api "/api/cluster/nodes" -access readonly
34+
security login rest-role create -role "trident" -api "/api/private/cli/volume/recovery-queue" -access readonly
35+
security login rest-role create -role "trident" -api "/api/private/cli/volume/recovery-queue/purge" -access read_create
36+
security login rest-role create -role "trident" -api "/api/private/cli/lun" -access all
37+
security login rest-role create -role "trident" -api "/api/storage/namespaces" -access read_create_modify
38+
security login rest-role create -role "trident" -api "/api/snapmirror/relationships/transfers" -access read_create_modify
39+
security login rest-role create -role "trident" -api "/api/storage/storage-units" -access all
40+
security login rest-role create -role "trident" -api "/api/application/consistency-groups" -access all
41+
security login rest-role create -role "trident" -api "/api/protocols/cifs/shares/acls" -access all
42+
security login rest-role create -role "trident" -api "/api/application/consistency-groups/snapshots" -access read_create

‎contrib/ontap/trident_role/cli_pastable/role-generator.sh‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010

1111
# usage: ./role-generator.sh [-h] [-v VSERVER_NAME] [-r ROLE_NAME] [--zapi] [--rest] [-j JSON] [-o OUTPUT]
1212

13-
# Copyright (c) 2024 NetApp, Inc. All Rights Reserved.
13+
# Copyright (c) 2025 NetApp, Inc. All Rights Reserved.
1414
# Licensed under the BSD 3-Clause "New or Revised" License (the "License");
1515
# you may not use this file except in compliance with the License.
1616
# You may obtain a copy of the License at

‎contrib/ontap/trident_role/cli_pastable/zapi_custom_role_output.txt‎

Lines changed: 7 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -2,26 +2,16 @@ security login role create -role "trident" -cmddirname "snapmirror resync" -acce
22
security login role create -role "trident" -cmddirname "snapmirror policy" -access readonly
33
security login role create -role "trident" -cmddirname "vserver cifs share" -access readonly
44
security login role create -role "trident" -cmddirname "vserver export-policy rule delete" -access all
5-
security login role create -role "trident" -cmddirname "volume modify" -access all
6-
security login role create -role "trident" -cmddirname "vserver iscsi security" -access readonly
7-
security login role create -role "trident" -cmddirname "vserver" -access readonly
85
security login role create -role "trident" -cmddirname "vserver iscsi initiator" -access readonly
96
security login role create -role "trident" -cmddirname "storage aggregate show-space" -access all
10-
security login role create -role "trident" -cmddirname "vserver iscsi" -access readonly
11-
security login role create -role "trident" -cmddirname "lun" -access all
127
security login role create -role "trident" -cmddirname "vserver iscsi security delete" -access all
13-
security login role create -role "trident" -cmddirname "lun mapping" -access readonly
148
security login role create -role "trident" -cmddirname "snapmirror initialize" -access all
159
security login role create -role "trident" -cmddirname "volume quota policy rule" -access readonly
1610
security login role create -role "trident" -cmddirname "volume unmount" -access all
17-
security login role create -role "trident" -cmddirname "volume snapshot create" -access all
1811
security login role create -role "trident" -cmddirname "vserver iscsi interface" -access readonly
1912
security login role create -role "trident" -cmddirname "lun igroup add" -access all
2013
security login role create -role "trident" -cmddirname "lun create" -access all
21-
security login role create -role "trident" -cmddirname "lun modify" -access all
2214
security login role create -role "trident" -cmddirname "lun move-in-volume" -access all
23-
security login role create -role "trident" -cmddirname "volume create" -access all
24-
security login role create -role "trident" -cmddirname "volume destroy" -access all
2515
security login role create -role "trident" -cmddirname "vserver export-policy create" -access all
2616
security login role create -role "trident" -cmddirname "vserver iscsi security create" -access all
2717
security login role create -role "trident" -cmddirname "vserver fcp nodename" -access all
@@ -30,7 +20,6 @@ security login role create -role "trident" -cmddirname "snapmirror update" -acce
3020
security login role create -role "trident" -cmddirname "volume quota" -access readonly
3121
security login role create -role "trident" -cmddirname "lun igroup delete" -access all
3222
security login role create -role "trident" -cmddirname "lun serial" -access all
33-
security login role create -role "trident" -cmddirname "volume file clone create" -access all
3423
security login role create -role "trident" -cmddirname "lun mapping delete" -access all
3524
security login role create -role "trident" -cmddirname "volume qtree delete" -access all
3625
security login role create -role "trident" -cmddirname "snapmirror delete" -access all
@@ -40,12 +29,8 @@ security login role create -role "trident" -cmddirname "snapmirror break" -acces
4029
security login role create -role "trident" -cmddirname "vserver export-policy delete" -access all
4130
security login role create -role "trident" -cmddirname "vserver export-policy rule" -access readonly
4231
security login role create -role "trident" -cmddirname "vserver iscsi security default" -access all
43-
security login role create -role "trident" -cmddirname "volume size" -access all
4432
security login role create -role "trident" -cmddirname "lun igroup" -access readonly
45-
security login role create -role "trident" -cmddirname "volume destroy" -access all
46-
security login role create -role "trident" -cmddirname "volume clone create" -access all
4733
security login role create -role "trident" -cmddirname "volume rename" -access all
48-
security login role create -role "trident" -cmddirname "snapmirror release" -access all
4934
security login role create -role "trident" -cmddirname "volume quota policy rule modify" -access all
5035
security login role create -role "trident" -cmddirname "volume snapshot restore" -access all
5136
security login role create -role "trident" -cmddirname "vserver export-policy rule create" -access all
@@ -73,11 +58,8 @@ security login role create -role "trident" -cmddirname "volume create" -access a
7358
security login role create -role "trident" -cmddirname "vserver" -access readonly
7459
security login role create -role "trident" -cmddirname "volume qtree modify" -access all
7560
security login role create -role "trident" -cmddirname "vserver iscsi nodename" -access all
76-
security login role create -role "trident" -cmddirname "snapmirror" -access readonly
77-
security login role create -role "trident" -cmddirname "snapmirror release" -access all
7861
security login role create -role "trident" -cmddirname "volume offline" -access all
7962
security login role create -role "trident" -cmddirname "job" -access readonly
80-
security login role create -role "trident" -cmddirname "version" -access all
8163
security login role create -role "trident" -cmddirname "event generate-autosupport-log" -access all
8264
security login role create -role "trident" -cmddirname "volume qtree rename" -access all
8365
security login role create -role "trident" -cmddirname "vserver show-aggregates" -access all
@@ -97,6 +79,12 @@ security login role create -role "trident" -cmddirname "vserver cifs share creat
9779
security login role create -role "trident" -cmddirname "lun online" -access all
9880
security login role create -role "trident" -cmddirname "lun mapping" -access readonly
9981
security login role create -role "trident" -cmddirname "lun modify" -access all
100-
security login role create -role "trident" -cmddirname "volume recovery-queue" -access all
82+
security login role create -role "trident" -cmddirname "volume recovery-queue show" -access readonly
10183
security login role create -role "trident" -cmddirname "version" -access all
10284
security login role create -role "trident" -cmddirname "vserver peer" -access readonly
85+
security login role create -role "trident" -cmddirname "volume destroy" -access all
86+
security login role create -role "trident" -cmddirname "volume file clone create" -access all
87+
security login role create -role "trident" -cmddirname "snapmirror release" -access all
88+
security login role create -role "trident" -cmddirname "vserver cifs share access-control create" -access all
89+
security login role create -role "trident" -cmddirname "vserver cifs share access-control delete" -access all
90+
security login role create -role "trident" -cmddirname "volume snapshot create" -access all

‎contrib/ontap/trident_role/raw/rest_custom_role.json‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,6 @@
55
{"access": "all", "path": "/api/protocols/san/igroups"},
66
{"access": "read_modify", "path": "/api/protocols/san/iscsi/credentials"},
77
{"access": "readonly", "path": "/api/network/ip/interfaces"},
8-
{"access": "read_create_modify", "path": "/api/storage/namespaces"},
98
{"access": "readonly", "path": "/api/protocols/san/iscsi/services"},
109
{"access": "all", "path": "/api/storage/luns"},
1110
{"access": "readonly", "path": "/api/cluster/jobs"},
@@ -23,22 +22,23 @@
2322
{"access": "read_create", "path": "/api/support/ems/application-logs"},
2423
{"access": "all", "path": "/api/protocols/nfs/export-policies"},
2524
{"access": "all", "path": "/api/protocols/nvme/subsystem-maps"},
26-
{"access": "read_create", "path": "/api/snapmirror/relationships/transfers"},
2725
{"access": "all", "path": "/api/protocols/san/lun-maps"},
2826
{"access": "readonly", "path": "/api/snapmirror/policies"},
2927
{"access": "readonly", "path": "/api/storage/aggregates"},
3028
{"access": "read_create_modify", "path": "/api/storage/luns/attributes"},
3129
{"access": "readonly", "path": "/api/protocols/san/lun-maps/reporting-nodes"},
3230
{"access": "readonly", "path": "/api/svm/peers"},
3331
{"access": "readonly", "path": "/api/network/fc/interfaces"},
34-
{"access": "read_modify", "path": "/api/storage/quota/rules"},
35-
{"access": "read_modify", "path": "/api/storage/namespaces"},
3632
{"access": "readonly", "path": "/api/protocols/san/fcp/services"},
3733
{"access": "all", "path": "/api/storage/storage-units/snapshots"},
3834
{"access": "readonly", "path": "/api/cluster/nodes"},
39-
{"access": "read_modify", "path": "/api/storage/luns/attributes"},
40-
{"access": "read_modify", "path": "/api/storage/storage-units"},
41-
{"access": "all", "path": "/api/private/cli/volume/recovery-queue"},
42-
{"access": "all", "path": "/api/private/cli/volume/recovery-queue/purge"},
43-
{"access": "all", "path": "/api/private/cli/lun"}
44-
]
35+
{"access": "readonly", "path": "/api/private/cli/volume/recovery-queue"},
36+
{"access": "read_create", "path": "/api/private/cli/volume/recovery-queue/purge"},
37+
{"access": "all", "path": "/api/private/cli/lun"},
38+
{"access": "read_create_modify", "path": "/api/storage/namespaces"},
39+
{"access": "read_create_modify", "path": "/api/snapmirror/relationships/transfers"},
40+
{"access": "all", "path": "/api/storage/storage-units"},
41+
{"access": "all", "path": "/api/application/consistency-groups"},
42+
{"access": "all", "path": "/api/protocols/cifs/shares/acls"},
43+
{"access": "read_create", "path": "/api/application/consistency-groups/snapshots"}
44+
]

‎contrib/ontap/trident_role/raw/zapi_custom_role.json‎

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,6 @@
2222
{"command": "lun modify", "access_level": "all", "zapi": "lun-set-qos-policy-group"},
2323
{"command": "lun move-in-volume", "access_level": "all", "zapi": "lun-move"},
2424
{"command": "volume create", "access_level": "all", "zapi": "volume-create-async"},
25-
{"command": "volume destroy", "access_level": "all", "zapi": "volume-destroy"},
2625
{"command": "vserver export-policy create", "access_level": "all", "zapi": "export-policy-create"},
2726
{"command": "vserver iscsi security create", "access_level": "all", "zapi": "iscsi-initiator-add-auth"},
2827
{"command": "vserver fcp nodename", "access_level": "all", "zapi": "fcp-node-get-name"},
@@ -31,7 +30,6 @@
3130
{"command": "volume quota", "access_level": "readonly", "zapi": "quota-status"},
3231
{"command": "lun igroup delete", "access_level": "all", "zapi": "igroup-destroy"},
3332
{"command": "lun serial", "access_level": "all", "zapi": "lun-get-serial-number"},
34-
{"command": "volume file clone create", "access_level": "all", "zapi": "clone-create"},
3533
{"command": "lun mapping delete", "access_level": "all", "zapi": "lun-unmap"},
3634
{"command": "volume qtree delete", "access_level": "all", "zapi": "qtree-delete-async"},
3735
{"command": "snapmirror delete", "access_level": "all", "zapi": "snapmirror-destroy"},
@@ -46,7 +44,6 @@
4644
{"command": "volume destroy", "access_level": "all", "zapi": "volume-destroy-async"},
4745
{"command": "volume clone create", "access_level": "all", "zapi": "volume-clone-create"},
4846
{"command": "volume rename", "access_level": "all", "zapi": "volume-rename"},
49-
{"command": "snapmirror release", "access_level": "all", "zapi": "snapmirror-release"},
5047
{"command": "volume quota policy rule modify", "access_level": "all", "zapi": "quota-set-entry"},
5148
{"command": "volume snapshot restore", "access_level": "all", "zapi": "snapshot-restore-volume"},
5249
{"command": "vserver export-policy rule create", "access_level": "all", "zapi": "export-rule-create"},
@@ -98,7 +95,14 @@
9895
{"command": "lun online", "access_level": "all", "zapi": "lun-online"},
9996
{"command": "lun mapping", "access_level": "readonly", "zapi": "lun-map-list-info"},
10097
{"command": "lun modify", "access_level": "all", "zapi": "lun-set-attribute"},
101-
{"command": "volume recovery-queue", "access_level": "all", "zapi": "volume-recovery-queue-get-iter"},
98+
{"command": "volume recovery-queue show", "access_level": "readonly", "zapi": "volume-recovery-queue-get-iter"},
10299
{"command": "version", "access_level": "all", "zapi": "system-get-version"},
103-
{"command": "vserver peer", "access_level": "readonly", "zapi": "vserver-peer-get-iter"}
104-
]
100+
{"command": "vserver peer", "access_level": "readonly", "zapi": "vserver-peer-get-iter"},
101+
{"command": "volume destroy", "access_level": "all", "zapi": "volume-destroy"},
102+
{"command": "volume file clone create", "access_level": "all", "zapi": "clone-create"},
103+
{"command": "snapmirror release", "access_level": "all", "zapi": "snapmirror-release"},
104+
{"command": "vserver cifs share access-control create", "access_level": "all", "zapi": "cifs-share-access-control-create"},
105+
{"command": "vserver cifs share access-control delete", "access_level": "all", "zapi": "cifs-share-access-control-delete"},
106+
{"command": "volume snapshot create", "access_level": "all", "zapi": "cg-commit"},
107+
{"command": "volume snapshot create", "access_level": "all", "zapi": "cg-start"}
108+
]

‎contrib/ontap/trident_role/script/role-creator.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
usage: role-creator.py [-h] [-v VSERVER_NAME] [-r ROLE_NAME] [--zapi] [--rest] [-i HOST_IP] [-u USERNAME] [-p PASSWORD] [-j JSON]
1010
[--log-level {CRITICAL,FATAL,ERROR,WARN,WARNING,INFO,DEBUG,NOTSET}]
1111
12-
Copyright (c) 2024 NetApp, Inc. All Rights Reserved.
12+
Copyright (c) 2025 NetApp, Inc. All Rights Reserved.
1313
Licensed under the BSD 3-Clause "New or Revised" License (the "License");
1414
you may not use this file except in compliance with the License.
1515
You may obtain a copy of the License at

‎core/concurrent_core_test.go‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ package core
55
import (
66
"context"
77
"encoding/json"
8+
"fmt"
89
"sync"
910
"testing"
1011

0 commit comments

Comments
 (0)