Merge pull request #151 from garthy/gb/add-filestrorage-support

jlamillan · web-flow · commit f0074dfbc5ce · 2018-02-20T09:30:27.000-08:00
Add filestorage to flexdriver policy
diff --git a/identity/flexvolume_user.tf b/identity/flexvolume_user.tf
@@ -36,5 +36,10 @@ resource "oci_identity_policy" "flexvolume_driver_policy" {
     "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to use volumes in compartment id ${var.compartment_ocid}",
     "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to use instances in compartment id ${var.compartment_ocid}",
     "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to manage volume-attachments in compartment id ${var.compartment_ocid}",
+
+    "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to read file-systems in compartment id ${var.compartment_ocid}",
+    "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to read mount-targets in compartment id ${var.compartment_ocid}",
+    "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to read private-ips in compartment id ${var.compartment_ocid}",
+    "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to manage export-sets in compartment id ${var.compartment_ocid}",
   ]
 }

Original file line number	Diff line number	Diff line change
`@@ -36,5 +36,10 @@ resource "oci_identity_policy" "flexvolume_driver_policy" {`
`36`	`36`	`"Allow group id ${oci_identity_group.flexvolume_driver_group.id} to use volumes in compartment id ${var.compartment_ocid}",`
`37`	`37`	`"Allow group id ${oci_identity_group.flexvolume_driver_group.id} to use instances in compartment id ${var.compartment_ocid}",`
`38`	`38`	`"Allow group id ${oci_identity_group.flexvolume_driver_group.id} to manage volume-attachments in compartment id ${var.compartment_ocid}",`
	`39`	`+`
	`40`	`+ "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to read file-systems in compartment id ${var.compartment_ocid}",`
	`41`	`+ "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to read mount-targets in compartment id ${var.compartment_ocid}",`
	`42`	`+ "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to read private-ips in compartment id ${var.compartment_ocid}",`
	`43`	`+ "Allow group id ${oci_identity_group.flexvolume_driver_group.id} to manage export-sets in compartment id ${var.compartment_ocid}",`
`39`	`44`	`]`
`40`	`45`	`}`