Chapter 17. Policies
You can configure access policies for certain services in the overcloud. To configure policies for a service, set the respective policy parameter with a hash value containing the service’s policies. For example, OpenStack Identity (keystone) uses the KeystonePolicies
parameter. Set this parameter in the parameter_defaults
section of an environment file:
parameter_defaults: KeystonePolicies: { keystone-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
For a full list of policy parameters, see "Policy Parameters" in the Overcloud Parameters guide.