rbac

kayrus · kayrus · commit 94fa3d17953a · 2024-07-02T13:48:07.000+02:00
diff --git a/.github/workflows/functional-networking.yaml b/.github/workflows/functional-networking.yaml
@@ -40,41 +40,6 @@ jobs:
           "create_port:binding:profile": "rule:admin_only or rule:service_api"
           "update_port:binding:profile": "rule:admin_only or rule:service_api"
           EOF
-          cat << EOF >> /tmp/neutron-policies/bgpvpn.yaml
-          ---
-          "create_bgpvpn": "rule:admin_only"
-          "get_bgpvpn": "rule:admin_or_owner"
-          "get_bgpvpn:tenant_id": "rule:admin_only"
-          "get_bgpvpn:route_targets": "rule:admin_only"
-          "get_bgpvpn:import_targets": "rule:admin_only"
-          "get_bgpvpn:export_targets": "rule:admin_only"
-          "get_bgpvpn:route_distinguishers": "rule:admin_only"
-          "update_bgpvpn": "rule:admin_or_owner"
-          "update_bgpvpn:tenant_id": "rule:admin_only"
-          "update_bgpvpn:route_targets": "rule:admin_only"
-          "update_bgpvpn:import_targets": "rule:admin_only"
-          "update_bgpvpn:export_targets": "rule:admin_only"
-          "update_bgpvpn:route_distinguishers": "rule:admin_only"
-          "delete_bgpvpn": "rule:admin_only"
-          "create_bgpvpn_network_association": "rule:admin_or_owner"
-          "get_bgpvpn_network_association": "rule:admin_or_owner"
-          "get_bgpvpn_network_association:tenant_id": "rule:admin_only"
-          "get_bgpvpn_network_associations": "rule:admin_or_owner"
-          "update_bgpvpn_network_association": "rule:admin_or_owner"
-          "delete_bgpvpn_network_association": "rule:admin_or_owner"
-          "create_bgpvpn_router_association": "rule:admin_or_owner"
-          "get_bgpvpn_router_association": "rule:admin_or_owner"
-          "get_bgpvpn_router_association:tenant_id": "rule:admin_only"
-          "get_bgpvpn_router_associations": "rule:admin_or_owner"
-          "update_bgpvpn_router_association": "rule:admin_or_owner"
-          "delete_bgpvpn_router_association": "rule:admin_or_owner"
-          "create_bgpvpn_port_association": "rule:admin_or_owner"
-          "get_bgpvpn_port_association": "rule:admin_or_owner"
-          "get_bgpvpn_port_association:tenant_id": "rule:admin_only"
-          "get_bgpvpn_port_associations": "rule:admin_or_owner"
-          "update_bgpvpn_port_association": "rule:admin_or_owner"
-          "delete_bgpvpn_port_association": "rule:admin_or_owner"
-          EOF
       - name: Deploy devstack
         uses: EmilienM/devstack-action@e82a9cbead099cba72f99537e82a360c3e319c69
         with:
@@ -88,7 +53,7 @@ jobs:
             [[post-config|\$NEUTRON_CONF]]
             [oslo_policy]
             policy_dirs = /tmp/neutron-policies
-          enabled_services: "neutron-dns,neutron-qos,neutron-segments,neutron-trunk,neutron-uplink-status-propagation,neutron-network-segment-range,neutron-port-forwarding,neutron-bgpvpn,neutron-bgpvpn-routes-control,${{ matrix.additional_services }}"
+          enabled_services: "neutron-dns,neutron-qos,neutron-segments,neutron-trunk,neutron-uplink-status-propagation,neutron-network-segment-range,neutron-port-forwarding,neutron-bgpvpn,neutron-bgpvpn-routes-control,neutron-rbac-bgpvpn,${{ matrix.additional_services }}"
       - name: Checkout go
         uses: actions/setup-go@v5
         with:
