Updating policy to allow role: baremetaluser

claudia-lola · claudia-lola · commit 72e75ba0d53e · 2025-09-29T14:42:10.000+01:00
diff --git a/etc/kayobe/kolla/config/neutron/policy.yml b/etc/kayobe/kolla/config/neutron/policy.yml
@@ -0,0 +1,2 @@
+"create_port:fixed_ips:ip_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner or role:baremetaluser"
+"create_port:mac_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner or role:baremetaluser"
diff --git a/etc/kayobe/kolla/config/nova/policy.yml b/etc/kayobe/kolla/config/nova/policy.yml
@@ -0,0 +1,2 @@
+"os_compute_api:servers:create:forced_host": "rule:context_is_admin or role:baremetaluser"
+"compute:servers:create:requested_destination": "rule:context_is_admin or role:baremetaluser"
diff --git a/etc/kayobe/pulp-ipa-image-versions.yml b/etc/kayobe/pulp-ipa-image-versions.yml
@@ -1,4 +1,4 @@
 ---
 # IPA image versioning tags
-stackhpc_rocky_9_ipa_image_version: "2025.1-20250924T145101"
-stackhpc_ubuntu_noble_ipa_image_version: "2025.1-20250924T145101"
+stackhpc_rocky_9_ipa_image_version: "2025.1-20250929T120332"
+stackhpc_ubuntu_noble_ipa_image_version: "2025.1-20250929T120332"

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+"create_port:fixed_ips:ip_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner or role:baremetaluser"`
	`2`	`+"create_port:mac_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner or role:baremetaluser"`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+"os_compute_api:servers:create:forced_host": "rule:context_is_admin or role:baremetaluser"`
	`2`	`+"compute:servers:create:requested_destination": "rule:context_is_admin or role:baremetaluser"`