此内容没有您所选择的语言版本。
Chapter 18. Policies
You can configure access policies for certain services in the overcloud. To configure policies for a service, set the respective policy parameter with a hash value containing the service’s policies. For example:
OpenStack Identity (keystone) uses the
KeystonePoliciesparameter. Set this parameter in theparameter_defaultssection of an environment file:parameter_defaults: KeystonePolicies: { keystone-context_is_admin: { key: context_is_admin, value: 'role:admin' } }OpenStack Compute (nova) uses the
NovaApiPoliciesparameter. Set this parameter in theparameter_defaultssection of an environment file:parameter_defaults: NovaApiPolicies: { nova-context_is_admin: { key: 'compute:get_all', value: '@' } }
For a full list of policy parameters, see "Policy Parameters" in the Overcloud Parameters guide.
