Jump to: navigation, search

Difference between revisions of "Nova/rbac"

Line 117: Line 117:
 
|-
 
|-
 
| servers:allow_all_filters  ||  || x ||  ||  || x ||  || || || ||  
 
| servers:allow_all_filters  ||  || x ||  ||  || x ||  || || || ||  
|-
 
| /servers/{server_id}/os-interface ||  POST  ||network:attach_external_network ||  ||  ||  ||  ||  ||  || || || ||
 
|-
 
| /servers/{server_id}/remote-consoles ||  POST  ||os-remote-consoles ||  ||  ||  ||  ||  ||  || || || ||
 
 
|-
 
|-
 
| rowspan="5" | /servers/detail || rowspan="5" | GET || servers:detail ||x  ||x  || x || x || x ||  || || || ||
 
| rowspan="5" | /servers/detail || rowspan="5" | GET || servers:detail ||x  ||x  || x || x || x ||  || || || ||
Line 227: Line 223:
 
|-
 
|-
 
| POST  (shelveOffload) || os-shelve:shelve_offload||  ||  ||  ||  ||  ||  || || || ||
 
| POST  (shelveOffload) || os-shelve:shelve_offload||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| rowspan="3" | /servers/{server_id}/os-interface ||  rowspan="2" | POST  ||network:attach_external_network ||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
|  os-attach-interfaces:create||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| GET || os-attach-interfaces:list ||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| rowspan="2" | /servers/{server_id}/os-interface/{port_id} ||  DELETE ||os-attach-interfaces:delete||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| GET || os-attach-interfaces:show ||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
|  /servers/{server_id}/os-instance-actions ||  GET ||os-instance-actions:list||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| rowspan="3" | /servers/{server_id}/os-instance-actions/{request_id} ||  rowspan="3" | GET ||os-instance-actions:show||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
|  os-instance-actions:events||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
|  os-instance-actions:events:details||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
|  /servers/{server_id}/ips||  GET ||ips:index||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
|  /servers/{server_id}/ips/{network_label} ||  GET ||ips:show||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| /servers/{server_id}/remote-consoles ||  POST  ||os-remote-consoles ||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| /servers/{server_id}/diagnostics||  POST  ||os-server-diagnostics||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| rowspan="3" | /servers/{server_id}/metadata|| PUT ||server-metadata:update_all||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
|  GET || server-metadata:index||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| POST || server-metadata:create||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| rowspan="3" | /servers/{server_id}/metadata/{key} ||  PUT ||server-metadata:update||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
|  DELETE || server-metadata:delete||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| GET || server-metadata:show||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
| rowspan="2" | /servers/{server_id}/os-server-password ||  GET ||os-server-password:show||  ||  ||  ||  ||  ||  || || || ||
 +
|-
 +
|  DELETE || os-server-password:clear||  ||  ||  ||  ||  ||  || || || ||
 
|-
 
|-
 
|}
 
|}
  
 
Questions:
 
Questions:

Revision as of 22:54, 7 November 2021

API Project-scope System-scope Domain-scope
Route Method RBAC Name reader member admin reader member admin reader member admin Notes
/ GET no-auth
/v2, v2.1 GET no-auth
/os-aggregates GET os-aggregates:index
POST os-aggregates:create x
/os-aggregates/{aggregate_id} GET os-aggregates:show
PUT os-aggregates:update x
DELETE os-aggregates:delete x
/os-aggregates/{aggregate_id}/action POST (add_host) os-aggregates:add_host
POST (remove_host) os-aggregates:remove_host x
POST (set_metadata) os-aggregates:set_metadata x
/os-aggregates/{aggregate_id}/images POST os-aggregates:images
/os-hosts GET os-hosts:list
/os-hosts/{host_name}/ GET os-hosts:show x x x x x
PUT os-hosts:update x
/os-hosts{host_name}/reboot GET (but this is write operation) os-hosts:reboot
/os-hosts{host_name}/shutdown GET (but this is write operation) os-hosts:shutdown
/os-hosts{host_name}/startup GET (but this is write operation) os-hosts:start
/os-hypervisors GET os-hypervisors:list
/os-hypervisors/details GET os-hypervisors:list-detail
/os-hypervisors/statistics GET os-hypervisors:statistics
/os-hypervisors/{hypervisor_id} GET os-hypervisors:show x
/os-hypervisors/{hypervisor_id}/uptime GET os-hypervisors:uptime x x x x x
/os-hypervisors/{hypervisor_hostname_pattern}/search GET os-hypervisors:search
/os-hypervisors/{hypervisor_hostname_pattern}/servers GET os-hypervisors:servers
/os-services GET os-services:list
/os-services/{service_id} PUT os-services:update
DELETE os-services:delete x
/os-availability-zone GET os-availability-zone:list x
/os-availability-zone/detail GET os-availability-zone:detail x x x x x
/flavors POST os-flavor-manage:create x x x x x
os-flavor-extra-specs:index -> (to show flavor extraspecs) x x
/flavors/detail GET os-flavor-extra-specs:index -> (to show flavor extraspecs) x x
/flavors/{flavor_id} PUT os-flavor-manage:update x x x x x
os-flavor-extra-specs:index -> (to show flavor extraspecs) x x
DELETE os-flavor-manage:delete x x
GET os-flavor-extra-specs:index -> (to show flavor extraspecs) x x
/flavors/{flavor_id}/os-flavor-access GET os-flavor-access x x x x x
/flavors/{flavor_id}/action POST (addTenantAccess) os-flavor-access:add_tenant_access
POST (removeTenantAccess) os-flavor-access:remove_tenant_access
/flavors/{flavor_id}/os-extra_specs/ POST os-flavor-extra-specs:create
GET os-flavor-extra-specs:index x
/flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key} GET os-flavor-extra-specs:show
PUT os-flavor-extra-specs:update x
DELETE os-flavor-extra-specs:delete x
/servers POST servers:create x x x x x
servers:create:forced_host x x
servers:create:requested_destination x x
servers:create:attach_volume x x
servers:create:attach_network x x
servers:create:trusted_certs x x
servers:create:zero_disk_flavor x x
network:attach_external_network x x
GET servers:index x x
servers:index:get_all_tenants x x
servers:allow_all_filters x x
/servers/detail GET servers:detail x x x x x
servers:detail:get_all_tenants x x
servers:allow_all_filters x x
servers:show:host_status x x
servers:show:host_status:unknown-only x x
/servers/{server_id} GET servers:show x x x x x
servers:show:host_status x x
servers:show:host_status:unknown-only x x
PUT servers:update x x
servers:show:host_status x x
servers:show:host_status:unknown-only x x
DELETE servers:delete x x
/servers/{server_id}/action POST (rebuild) servers:rebuild
servers:show:host_status x x
servers:show:host_status:unknown-only x x
servers:rebuild:trusted_certs x x
POST (confirmResize) servers:confirm_resize
POST (revertResize) servers:revert_resize
POST (resize) servers:resize
servers:resize:cross_cell x x
POST (reboot) servers:reboot
POST (createImage) servers:create_image
servers:create_image:allow_volume_backed x x
POST (os-start) servers:start
POST (os-stop) servers:stop
POST (resume) os-suspend-server:resume
POST (suspend) os-suspend-server:suspend
POST (os-resetState) os-admin-actions:reset_state
POST (injectNetworkInfo) os-admin-actions:inject_network_info
POST (changePassword) os-admin-password
POST (os-getConsoleOutput) os-console-output
POST (createBackup) os-create-backup
POST (restore) os-deferred-delete:restore
POST (forceDelete) os-deferred-delete:force
POST (evacuate) os-evacuate
POST (lock) os-lock-server:lock
POST (unlock) os-lock-server:unlock
os-lock-server:unlock:unlock_override
POST (migrate) os-migrate-server:migrate
POST (os-migrateLive) os-migrate-server:migrate_live
POST (addFixedIp) os-multinic:add
POST (removeFixedIp) os-multinic:remove
POST (pause) os-pause-server:pause
POST (unpause) os-pause-server:unpause
POST (os-getRDPConsole) os-remote-consoles
POST (os-getSerialConsole) os-remote-consoles
POST (os-getSPICEConsole) os-remote-consoles
POST (os-getVNCConsole) os-remote-consoles
POST (rescue) os-rescue
POST (rescue) os-unrescue
POST (shelve) os-shelve:shelve
POST (unshelve) os-shelve:unshelve
POST (shelveOffload) os-shelve:shelve_offload
/servers/{server_id}/os-interface POST network:attach_external_network
os-attach-interfaces:create
GET os-attach-interfaces:list
/servers/{server_id}/os-interface/{port_id} DELETE os-attach-interfaces:delete
GET os-attach-interfaces:show
/servers/{server_id}/os-instance-actions GET os-instance-actions:list
/servers/{server_id}/os-instance-actions/{request_id} GET os-instance-actions:show
os-instance-actions:events
os-instance-actions:events:details
/servers/{server_id}/ips GET ips:index
/servers/{server_id}/ips/{network_label} GET ips:show
/servers/{server_id}/remote-consoles POST os-remote-consoles
/servers/{server_id}/diagnostics POST os-server-diagnostics
/servers/{server_id}/metadata PUT server-metadata:update_all
GET server-metadata:index
POST server-metadata:create
/servers/{server_id}/metadata/{key} PUT server-metadata:update
DELETE server-metadata:delete
GET server-metadata:show
/servers/{server_id}/os-server-password GET os-server-password:show
DELETE os-server-password:clear

Questions: