Jump to: navigation, search

Difference between revisions of "Nova/rbac"

Line 141: Line 141:
 
| DELETE || servers:delete  ||  || x ||  ||  || x ||  ||   
 
| DELETE || servers:delete  ||  || x ||  ||  || x ||  ||   
 
|-
 
|-
| rowspan="41" |/servers/{server_id}/action || rowspan="4" | POST  (rebuild)|| servers:rebuild ||  ||  ||  ||  ||  ||  ||
+
| rowspan="43" |/servers/{server_id}/action || rowspan="4" | POST  (rebuild)|| servers:rebuild ||  ||  ||  ||  ||  ||  ||
 
|-
 
|-
 
| servers:show:host_status  ||  || x ||  ||  || x ||  ||
 
| servers:show:host_status  ||  || x ||  ||  || x ||  ||
Line 222: Line 222:
 
|-
 
|-
 
| POST  (shelveOffload) || os-shelve:shelve_offload||  ||  ||  ||  ||  ||  ||  
 
| POST  (shelveOffload) || os-shelve:shelve_offload||  ||  ||  ||  ||  ||  ||  
 +
|-
 +
| POST  (addFloatingIp) || os-floating-ips:add||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| POST  (removeFloatingIp) || os-floating-ips:remove||  ||  ||  ||  ||  ||  ||
 
|-
 
|-
 
| rowspan="3" | /servers/{server_id}/os-interface ||  rowspan="2" | POST  ||network:attach_external_network ||  ||  ||  ||  ||  ||  ||  
 
| rowspan="3" | /servers/{server_id}/os-interface ||  rowspan="2" | POST  ||network:attach_external_network ||  ||  ||  ||  ||  ||  ||  
Line 288: Line 292:
 
|-
 
|-
 
| DELETE|| servers:migrations:delete||  ||  ||  ||  ||  ||  ||
 
| DELETE|| servers:migrations:delete||  ||  ||  ||  ||  ||  ||
 +
|-
 +
|  /os-assisted-volume-snapshots ||  POST ||os-assisted-volume-snapshots:create||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| /os-assisted-volume-snapshots/{snapshot_id} ||  DELETE ||os-assisted-volume-snapshots:delete||  ||  ||  ||  ||  ||  ||
 +
|-
 +
|  /os-baremetal-nodes ||  GET ||os-baremetal-nodes:list||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| /os-baremetal-nodes/{node_id}  ||  GET ||os-baremetal-nodes:show||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| /os-console-auth-tokens/{console_token}  ||  GET ||os-console-auth-tokens||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| /extensions  ||  GET ||extensions||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| /extensions/{alias}  ||  GET ||extensions||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| /os-floating-ip-pools  ||  GET ||os-floating-ip-pools||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| rowspan="2" | /os-floating-ips|| GET || os-floating-ips:list||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| POST || os-floating-ips:create ||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| rowspan="2" | /os-floating-ips/{floating_ip_id}|| GET || os-floating-ips:show||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| DELETE|| os-floating-ips:delete||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| /os-instance_usage_audit_log  ||  GET ||os-instance-usage-audit-log:list||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| /os-instance_usage_audit_log/{before_timestamp}  ||  GET ||os-instance-usage-audit-log:show||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| rowspan="2" | /os-keypairs|| GET || os-keypairs:list||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| POST || os-keypairs:create ||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| rowspan="2" | /os-keypairs/{keypair_name}|| GET || os-keypairs:show||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| DELETE|| os-keypairs:delete||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| rowspan="2" | /limits|| GET || limits||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| GET|| limits:other_project||  ||  ||  ||  ||  ||  ||
 +
|-
 +
| /os-migrations  ||  GET ||os-migrations:index||  ||  ||  ||  ||  ||  ||
 
|-
 
|-
 
|}
 
|}
  
 
Questions:
 
Questions:

Revision as of 02:00, 9 November 2021

API Project-scope System-scope
Route Method RBAC Name reader member admin reader member admin Notes
/ GET no-auth
/v2, v2.1 GET no-auth
/os-aggregates GET os-aggregates:index
POST os-aggregates:create x
/os-aggregates/{aggregate_id} GET os-aggregates:show
PUT os-aggregates:update x
DELETE os-aggregates:delete x
/os-aggregates/{aggregate_id}/action POST (add_host) os-aggregates:add_host
POST (remove_host) os-aggregates:remove_host x
POST (set_metadata) os-aggregates:set_metadata x
/os-aggregates/{aggregate_id}/images POST os-aggregates:images
/os-hosts GET os-hosts:list
/os-hosts/{host_name}/ GET os-hosts:show x x x
PUT os-hosts:update x
/os-hosts{host_name}/reboot GET (but this is write operation) os-hosts:reboot
/os-hosts{host_name}/shutdown GET (but this is write operation) os-hosts:shutdown
/os-hosts{host_name}/startup GET (but this is write operation) os-hosts:start
/os-hypervisors GET os-hypervisors:list
/os-hypervisors/details GET os-hypervisors:list-detail
/os-hypervisors/statistics GET os-hypervisors:statistics
/os-hypervisors/{hypervisor_id} GET os-hypervisors:show x
/os-hypervisors/{hypervisor_id}/uptime GET os-hypervisors:uptime x x x x x
/os-hypervisors/{hypervisor_hostname_pattern}/search GET os-hypervisors:search
/os-hypervisors/{hypervisor_hostname_pattern}/servers GET os-hypervisors:servers
/os-services GET os-services:list
/os-services/{service_id} PUT os-services:update
DELETE os-services:delete x
/os-availability-zone GET os-availability-zone:list x
/os-availability-zone/detail GET os-availability-zone:detail x x x x x
/flavors POST os-flavor-manage:create x x x x x
os-flavor-extra-specs:index -> (to show flavor extraspecs) x x
/flavors/detail GET os-flavor-extra-specs:index -> (to show flavor extraspecs) x x
/flavors/{flavor_id} PUT os-flavor-manage:update x x x x x
os-flavor-extra-specs:index -> (to show flavor extraspecs) x x
DELETE os-flavor-manage:delete x x
GET os-flavor-extra-specs:index -> (to show flavor extraspecs) x x
/flavors/{flavor_id}/os-flavor-access GET os-flavor-access x x x x x
/flavors/{flavor_id}/action POST (addTenantAccess) os-flavor-access:add_tenant_access
POST (removeTenantAccess) os-flavor-access:remove_tenant_access
/flavors/{flavor_id}/os-extra_specs/ POST os-flavor-extra-specs:create
GET os-flavor-extra-specs:index x
/flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key} GET os-flavor-extra-specs:show
PUT os-flavor-extra-specs:update x
DELETE os-flavor-extra-specs:delete x
/servers POST servers:create x x x x x
servers:create:forced_host x x
servers:create:requested_destination x x
servers:create:attach_volume x x
servers:create:attach_network x x
servers:create:trusted_certs x x
servers:create:zero_disk_flavor x x
network:attach_external_network x x
GET servers:index x x
servers:index:get_all_tenants x x
servers:allow_all_filters x x
/servers/detail GET servers:detail x x x x x
servers:detail:get_all_tenants x x
servers:allow_all_filters x x
servers:show:host_status x x
servers:show:host_status:unknown-only x x
/servers/{server_id} GET servers:show x x x x x
servers:show:host_status x x
servers:show:host_status:unknown-only x x
PUT servers:update x x
servers:show:host_status x x
servers:show:host_status:unknown-only x x
DELETE servers:delete x x
/servers/{server_id}/action POST (rebuild) servers:rebuild
servers:show:host_status x x
servers:show:host_status:unknown-only x x
servers:rebuild:trusted_certs x x
POST (confirmResize) servers:confirm_resize
POST (revertResize) servers:revert_resize
POST (resize) servers:resize
servers:resize:cross_cell x x
POST (reboot) servers:reboot
POST (createImage) servers:create_image
servers:create_image:allow_volume_backed x x
POST (os-start) servers:start
POST (os-stop) servers:stop
POST (resume) os-suspend-server:resume
POST (suspend) os-suspend-server:suspend
POST (os-resetState) os-admin-actions:reset_state
POST (injectNetworkInfo) os-admin-actions:inject_network_info
POST (changePassword) os-admin-password
POST (os-getConsoleOutput) os-console-output
POST (createBackup) os-create-backup
POST (restore) os-deferred-delete:restore
POST (forceDelete) os-deferred-delete:force
POST (evacuate) os-evacuate
POST (lock) os-lock-server:lock
POST (unlock) os-lock-server:unlock
os-lock-server:unlock:unlock_override
POST (migrate) os-migrate-server:migrate
POST (os-migrateLive) os-migrate-server:migrate_live
POST (addFixedIp) os-multinic:add
POST (removeFixedIp) os-multinic:remove
POST (pause) os-pause-server:pause
POST (unpause) os-pause-server:unpause
POST (os-getRDPConsole) os-remote-consoles
POST (os-getSerialConsole) os-remote-consoles
POST (os-getSPICEConsole) os-remote-consoles
POST (os-getVNCConsole) os-remote-consoles
POST (rescue) os-rescue
POST (rescue) os-unrescue
POST (shelve) os-shelve:shelve
POST (unshelve) os-shelve:unshelve
POST (shelveOffload) os-shelve:shelve_offload
POST (addFloatingIp) os-floating-ips:add
POST (removeFloatingIp) os-floating-ips:remove
/servers/{server_id}/os-interface POST network:attach_external_network
os-attach-interfaces:create
GET os-attach-interfaces:list
/servers/{server_id}/os-interface/{port_id} DELETE os-attach-interfaces:delete
GET os-attach-interfaces:show
/servers/{server_id}/os-instance-actions GET os-instance-actions:list
/servers/{server_id}/os-instance-actions/{request_id} GET os-instance-actions:show
os-instance-actions:events
os-instance-actions:events:details
/servers/{server_id}/ips GET ips:index
/servers/{server_id}/ips/{network_label} GET ips:show
/servers/{server_id}/remote-consoles POST os-remote-consoles
/servers/{server_id}/diagnostics POST os-server-diagnostics
/servers/{server_id}/metadata PUT server-metadata:update_all
GET server-metadata:index
POST server-metadata:create
/servers/{server_id}/metadata/{key} PUT server-metadata:update
DELETE server-metadata:delete
GET server-metadata:show
/servers/{server_id}/os-server-password GET os-server-password:show
DELETE os-server-password:clear
/servers/{server_id}/tags PUT os-server-tags:update_all
GET os-server-tags:index
DELETE os-server-tags:delete_all
/servers/{server_id}/tags/{tag} PUT os-server-tags:update
DELETE os-server-tags:delete
GET os-server-tags:show
/servers/{server_id}/topology GET server:topology:index
server:topology:host:index
/servers/{server_id}/migrations GET servers:migrations:index
/servers/{server_id}/migrations/{migration_id}/action (force_complete) POST servers:migrations:force_complete
/servers/{server_id}/migrations/{migration_id} GET servers:migrations:show
DELETE servers:migrations:delete
/os-assisted-volume-snapshots POST os-assisted-volume-snapshots:create
/os-assisted-volume-snapshots/{snapshot_id} DELETE os-assisted-volume-snapshots:delete
/os-baremetal-nodes GET os-baremetal-nodes:list
/os-baremetal-nodes/{node_id} GET os-baremetal-nodes:show
/os-console-auth-tokens/{console_token} GET os-console-auth-tokens
/extensions GET extensions
/extensions/{alias} GET extensions
/os-floating-ip-pools GET os-floating-ip-pools
/os-floating-ips GET os-floating-ips:list
POST os-floating-ips:create
/os-floating-ips/{floating_ip_id} GET os-floating-ips:show
DELETE os-floating-ips:delete
/os-instance_usage_audit_log GET os-instance-usage-audit-log:list
/os-instance_usage_audit_log/{before_timestamp} GET os-instance-usage-audit-log:show
/os-keypairs GET os-keypairs:list
POST os-keypairs:create
/os-keypairs/{keypair_name} GET os-keypairs:show
DELETE os-keypairs:delete
/limits GET limits
GET limits:other_project
/os-migrations GET os-migrations:index

Questions: