openstack/openstack-helm
Code Issues Proposed changes

Merge "barbican: fix values overrides for stein and ocata"

Browse Source
This commit is contained in:
Zuul 2020-01-25 20:16:44 +00:00 committed by Gerrit Code Review
commit 91fb5219aa
5 changed files with 24 additions and 4 deletions

4
barbican/values.yaml

@ -322,14 +322,10 @@ conf:
admin_or_creator: rule:admin or rule:creator
all_but_audit: rule:admin or rule:observer or rule:creator
all_users: rule:admin or rule:observer or rule:creator or rule:audit or rule:service_admin
secret_project_match: project:%(target.secret.project_id)s
secret_acl_read: "'read':%(target.secret.read)s"
secret_private_read: "'False':%(target.secret.read_project_access)s"
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_acl_read: "'read':%(target.container.read)s"
container_private_read: "'False':%(target.container.read_project_access)s"
container_creator_user: user:%(target.container.creator_id)s
secret_non_private_read: rule:all_users and rule:secret_project_match and not rule:secret_private_read
secret_decrypt_non_private_read: rule:all_but_audit and rule:secret_project_match
and not rule:secret_private_read

6
barbican/values_overrides/ocata.yaml Normal file

@ -0,0 +1,6 @@
conf:
policy:
secret_project_match: project:%(target.secret.project_id)s
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_creator_user: user:%(target.container.creator_id)s

6
barbican/values_overrides/pike.yaml Normal file

@ -0,0 +1,6 @@
conf:
policy:
secret_project_match: project:%(target.secret.project_id)s
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_creator_user: user:%(target.container.creator_id)s

6
barbican/values_overrides/queens.yaml Normal file

@ -0,0 +1,6 @@
conf:
policy:
secret_project_match: project:%(target.secret.project_id)s
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_creator_user: user:%(target.container.creator_id)s

6
barbican/values_overrides/rocky.yaml Normal file

@ -0,0 +1,6 @@
conf:
policy:
secret_project_match: project:%(target.secret.project_id)s
secret_creator_user: user:%(target.secret.creator_id)s
container_project_match: project:%(target.container.project_id)s
container_creator_user: user:%(target.container.creator_id)s