Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-7228

cannot override default octavia policy with the operator

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • rhos-18.0.0
    • None
    • octavia-operator
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • ?
    • ?
    • ?
    • Moderate

      we should be able to override the octavia policy with the following spec:

      octaviaAPI:
        defaultConfigOverwrite:
          policy.yaml: |
            "system_admin": "role:admin"
            "system_reader": "role:admin"
            [..]

      but the file is not handled properly, it's copied to the container but with limited permission (the octavia-api process cannot read it)

      sh-5.1# ls -l /var/lib/config-data/merged/policy.yaml
      -rw-r-----. 1 root root 963 May 22 12:41 /var/lib/config-data/merged/policy.yaml

      we should do something like https://github.com/openstack-k8s-operators/nova-operator/blob/main/templates/novaapi/config/nova-api-config.json#L52-L56

       

            rhn-support-gthiemon Gregory Thiemonge
            rhn-support-gthiemon Gregory Thiemonge
            rhos-dfg-networking-squad-vans
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: