Warning
JSON formatted policy file is deprecated since Aodh 12.0.0 (Wallaby). This oslopolicy-convert-json-to-yaml tool will migrate your existing JSON-formatted policy file to YAML in a backward-compatible way.
The following is an overview of all available policies in Aodh. For a sample configuration file, refer to policy.yaml.
context_is_admin
role:admin
(no description provided)
segregation
rule:context_is_admin
(no description provided)
admin_or_owner
rule:context_is_admin or project_id:%(project_id)s
(no description provided)
default
rule:context_is_admin or project_id:%(project_id)s
(no description provided)
telemetry:get_alarm
(role:reader and system_scope:all) or (role:reader and project_id:%(project_id)s)
GET /v2/alarms/{alarm_id}
system
project
Get an alarm.
telemetry:get_alarms
(role:reader and system_scope:all) or (role:reader and project_id:%(project_id)s)
GET /v2/alarms
system
project
Get all alarms, based on the query provided.
telemetry:get_alarms:all_projects
role:reader and system_scope:all
GET /v2/alarms
system
project
Get alarms of all projects.
telemetry:query_alarm
(role:reader and system_scope:all) or (role:reader and project_id:%(project_id)s)
POST /v2/query/alarms
system
project
Get all alarms, based on the query provided.
telemetry:create_alarm
(role:admin and system_scope:all) or (role:member and project_id:%(project_id)s)
POST /v2/alarms
system
project
Create a new alarm.
telemetry:change_alarm
(role:admin and system_scope:all) or (role:member and project_id:%(project_id)s)
PUT /v2/alarms/{alarm_id}
system
project
Modify this alarm.
telemetry:delete_alarm
(role:admin and system_scope:all) or (role:member and project_id:%(project_id)s)
DELETE /v2/alarms/{alarm_id}
system
project
Delete this alarm.
telemetry:get_alarm_state
(role:reader and system_scope:all) or (role:reader and project_id:%(project_id)s)
GET /v2/alarms/{alarm_id}/state
system
project
Get the state of this alarm.
telemetry:change_alarm_state
(role:admin and system_scope:all) or (role:member and project_id:%(project_id)s)
PUT /v2/alarms/{alarm_id}/state
system
project
Set the state of this alarm.
telemetry:alarm_history
(role:reader and system_scope:all) or (role:reader and project_id:%(project_id)s)
GET /v2/alarms/{alarm_id}/history
system
project
Assembles the alarm history requested.
telemetry:query_alarm_history
(role:reader and system_scope:all) or (role:reader and project_id:%(project_id)s)
POST /v2/query/alarms/history
system
project
Define query for retrieving AlarmChange data.
telemetry:update_quotas
role:admin and system_scope:all
POST /v2/quotas
system
Update resources quotas for project.
telemetry:delete_quotas
role:admin and system_scope:all
DELETE /v2/quotas/{project_id}
system
Delete resources quotas for project.
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.