The following is an overview of all available policies in ironic inspector. For a sample configuration file, refer to Ironic Inspector Policy.
is_admin
role:admin or role:administrator or role:baremetal_admin
Full read/write API access
is_observer
role:baremetal_observer
Read-only API access
public_api
is_public_api:True
Internal flag for public API routes
default
!
Default API access policy
introspection
rule:public_api
GET /
Access the API root for available versions information
introspection:version
rule:public_api
GET /{version}
Access the versioned API root for version information
introspection:continue
rule:public_api
POST /continue
Ramdisk callback to continue introspection
introspection:status
rule:is_admin or rule:is_observer
GET /introspection
GET /introspection/{node_id}
Get introspection status
introspection:start
rule:is_admin
POST /introspection/{node_id}
Start introspection
introspection:abort
rule:is_admin
POST /introspection/{node_id}/abort
Abort introspection
introspection:data
rule:is_admin
GET /introspection/{node_id}/data
Get introspection data
introspection:reapply
rule:is_admin
POST /introspection/{node_id}/data/unprocessed
Reapply introspection on stored data
introspection:rule:get
rule:is_admin
GET /rules
GET /rules/{rule_id}
Get introspection rule(s)
introspection:rule:delete
rule:is_admin
DELETE /rules
DELETE /rules/{rule_id}
Delete introspection rule(s)
introspection:rule:create
rule:is_admin
POST /rules
Create introspection rule
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.