Jump to: navigation, search

Nova/rbac

< Nova
Revision as of 02:01, 26 November 2021 by Ghanshyam Mann (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
API Project-scope System-scope
Route Method RBAC Name reader member admin reader member admin Notes
/ GET no-auth
/v2, v2.1 GET no-auth
/os-aggregates GET os-aggregates:index o
POST os-aggregates:create o
/os-aggregates/{aggregate_id} GET os-aggregates:show o
PUT os-aggregates:update o
DELETE os-aggregates:delete o
/os-aggregates/{aggregate_id}/action POST (add_host) os-aggregates:add_host o
POST (remove_host) os-aggregates:remove_host o
POST (set_metadata) os-aggregates:set_metadata o
/os-aggregates/{aggregate_id}/images POST os-aggregates:images o
/os-hosts GET os-hosts:list o
/os-hosts/{host_name}/ GET os-hosts:show o
PUT os-hosts:update o
/os-hosts{host_name}/reboot GET (but this is write operation) os-hosts:reboot o
/os-hosts{host_name}/shutdown GET (but this is write operation) os-hosts:shutdown o
/os-hosts{host_name}/startup GET (but this is write operation) os-hosts:start o
/os-hypervisors GET os-hypervisors:list o o
/os-hypervisors/details GET os-hypervisors:list-detail o
/os-hypervisors/statistics GET os-hypervisors:statistics o
/os-hypervisors/{hypervisor_id} GET os-hypervisors:show o
/os-hypervisors/{hypervisor_id}/uptime GET os-hypervisors:uptime o
/os-hypervisors/{hypervisor_hostname_pattern} /search GET os-hypervisors:search o
/os-hypervisors/{hypervisor_hostname_pattern} /servers GET os-hypervisors:servers o
/os-services GET os-services:list o
/os-services/{service_id} PUT os-services:update o
DELETE os-services:delete o
/os-availability-zone GET os-availability-zone:list RULE_ANY
/os-availability-zone/detail GET os-availability-zone:detail o o
/flavors POST os-flavor-manage:create o
os-flavor-extra-specs:index -> (to show flavor extraspecs) o o
/flavors/detail GET os-flavor-extra-specs:index -> (to show flavor extraspecs) o o
/flavors/{flavor_id} PUT os-flavor-manage:update o
os-flavor-extra-specs:index -> (to show flavor extraspecs) o o
DELETE os-flavor-manage:delete o
GET os-flavor-extra-specs:index -> (to show flavor extraspecs) o o
/flavors/{flavor_id}/os-flavor-access GET os-flavor-access o
/flavors/{flavor_id}/action POST (addTenantAccess) os-flavor-access:add_tenant_access o
POST (removeTenantAccess) os-flavor-access:remove_tenant_access o
/flavors/{flavor_id}/os-extra_specs/ POST os-flavor-extra-specs:create o
GET os-flavor-extra-specs:index o o
/flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key} GET os-flavor-extra-specs:show o o
PUT os-flavor-extra-specs:update o
DELETE os-flavor-extra-specs:delete o
/servers POST servers:create o
servers:create:forced_host o
servers:create:requested_destination o
servers:create:attach_volume o
servers:create:attach_network o
servers:create:trusted_certs o
servers:create:zero_disk_flavor o
network:attach_external_network o
GET servers:index o
servers:index:get_all_tenants o
servers:allow_all_filters o
/servers/detail GET servers:detail o
servers:detail:get_all_tenants o
servers:allow_all_filters o
servers:show:host_status o
servers:show:host_status:unknown-only o
os-extended-server-attributes o
os-flavor-extra-specs:index -> (to show flavor extraspecs) o
/servers/{server_id} GET servers:show o
servers:show:host_status o
servers:show:host_status:unknown-only o
os-extended-server-attributes o
os-flavor-extra-specs:index -> (to show flavor extraspecs) o
PUT servers:update o
servers:show:host_status o
servers:show:host_status:unknown-only o
os-extended-server-attributes o
os-flavor-extra-specs:index -> (to show flavor extraspecs) o
DELETE servers:delete o
/servers/{server_id}/action POST (rebuild) servers:rebuild o
servers:show:host_status o
servers:show:host_status:unknown-only o
servers:rebuild:trusted_certs o
os-extended-server-attributes o
os-flavor-extra-specs:index -> (to show flavor extraspecs) o
POST (confirmResize) servers:confirm_resize o
POST (revertResize) servers:revert_resize o
POST (resize) servers:resize o
servers:resize:cross_cell no-one by default (as per current default)
POST (reboot) servers:reboot o
POST (createImage) servers:create_image o
servers:create_image: allow_volume_backed o
POST (os-start) servers:start o
POST (os-stop) servers:stop o
POST (resume) os-suspend-server:resume o
POST (suspend) os-suspend-server:suspend o
POST (os-resetState) os-admin-actions:reset_state o
POST (injectNetworkInfo) os-admin-actions:inject_network_info o
POST (changePassword) os-admin-password o
POST (os-getConsoleOutput) os-console-output o
POST (createBackup) os-create-backup o
POST (restore) os-deferred-delete:restore o
POST (forceDelete) os-deferred-delete:force o
POST (evacuate) os-evacuate o
POST (lock) os-lock-server:lock o
POST (unlock) os-lock-server:unlock o
os-lock-server:unlock:unlock_override o
POST (migrate) os-migrate-server:migrate o
POST (os-migrateLive) os-migrate-server:migrate_live o
POST (addFixedIp) os-multinic:add o
POST (removeFixedIp) os-multinic:remove o
POST (pause) os-pause-server:pause o
POST (unpause) os-pause-server:unpause o
POST (os-getRDPConsole) os-remote-consoles o
POST (os-getSerialConsole) os-remote-consoles o
POST (os-getSPICEConsole) os-remote-consoles o
POST (os-getVNCConsole) os-remote-consoles o
POST (rescue) os-rescue o
POST (rescue) os-unrescue o
POST (shelve) os-shelve:shelve o
POST (unshelve) os-shelve:unshelve o
POST (shelveOffload) os-shelve:shelve_offload o
POST (addFloatingIp) os-floating-ips:add o
POST (removeFloatingIp) os-floating-ips:remove o
POST (addSecurityGroup) os-security-groups::add o
POST (removeSecurityGroup) os-security-groups::remove o
/servers/{server_id}/os-interface POST network:attach_external_network o
os-attach-interfaces:create o
GET os-attach-interfaces:list o
/servers/{server_id}/os-interface/{port_id} DELETE os-attach-interfaces:delete o
GET os-attach-interfaces:show o
/servers/{server_id}/os-instance-actions GET os-instance-actions:list o
/servers/{server_id}/os-instance-actions/{request_id} GET os-instance-actions:show o
os-instance-actions:events o
os-instance-actions:events:details o
/servers/{server_id}/ips GET ips:index o
/servers/{server_id}/ips/{network_label} GET ips:show o
/servers/{server_id}/remote-consoles POST os-remote-consoles o
/servers/{server_id}/diagnostics GET os-server-diagnostics o
/servers/{server_id}/metadata PUT server-metadata:update_all o
GET server-metadata:index o
POST server-metadata:create o
/servers/{server_id}/metadata/{key} PUT server-metadata:update o
DELETE server-metadata:delete o
GET server-metadata:show o
/servers/{server_id}/os-server-password GET os-server-password:show o
DELETE os-server-password:clear o
/servers/{server_id}/tags PUT os-server-tags:update_all o
GET os-server-tags:index o
DELETE os-server-tags:delete_all o
/servers/{server_id}/tags/{tag} PUT os-server-tags:update o
DELETE os-server-tags:delete o
GET os-server-tags:show o
/servers/{server_id}/topology GET server:topology:index o
server:topology:host:index o
/servers/{server_id}/migrations GET servers:migrations:index o
/servers/{server_id}/migrations/ {migration_id} /action (force_complete) POST servers:migrations:force_complete o
/servers/{server_id}/migrations/ {migration_id} GET servers:migrations:show o
DELETE servers:migrations:delete o
/servers/{server_id}/os-volume_attachments GET os-volumes-attachments:index
POST os-volumes-attachments:create
/servers/{server_id}/os-volume_attachments /{volume_id} GET os-volumes-attachments:show o
DELETE os-volumes-attachments:delete o
PUT os-volumes-attachments:update o
os-volumes-attachments:swap o
/os-assisted-volume-snapshots POST os-assisted-volume-snapshots:create o
/os-assisted-volume-snapshots/{snapshot_id} DELETE os-assisted-volume-snapshots:delete o
/os-baremetal-nodes GET os-baremetal-nodes:list o
/os-baremetal-nodes/{node_id} GET os-baremetal-nodes:show o
/os-console-auth-tokens/{console_token} GET os-console-auth-tokens o
/extensions GET extensions Everyone
/extensions/{alias} GET extensions Everyone
/os-floating-ip-pools GET os-floating-ip-pools Everyone
/os-floating-ips GET os-floating-ips:list o o
POST os-floating-ips:create o
/os-floating-ips/{floating_ip_id} GET os-floating-ips:show o o
DELETE os-floating-ips:delete o
/os-instance_usage_audit_log GET os-instance-usage-audit-log:list o
/os-instance_usage_audit_log/ {before_timestamp} GET os-instance-usage-audit-log:show o
/os-keypairs GET os-keypairs:list o
POST os-keypairs:create o
/os-keypairs/{keypair_name} GET os-keypairs:show o
DELETE os-keypairs:delete o
/limits GET limits Everyone
GET limits:other_project o
/os-migrations GET os-migrations:index o
/os-networks GET os-networks:list o o
/os-networks/{network_id} GET os-networks:show o o
/os-quota-class-sets/{quota_class} GET os-quota-class-sets:show o
PUT os-quota-class-sets:update o
/os-quota-sets/{tenant_id} DELETE os-quota-sets:delete o
PUT os-quota-sets:update o
GET os-quota-sets:show o
/os-quota-sets/{tenant_id}/detail GET os-quota-sets:detail o
/os-quota-sets/{tenant_id}/defaults GET os-quota-sets:defaults Everyone
/os-security-groups GET os-security-groups:get o
POST os-security-groups:create o
/os-security-groups/{security_group_id} DELETE os-security-groups:delete o
PUT os-security-groups:update o
GET os-security-groups:show o
/os-security-group-rules POST os-security-groups:rule:create o
/os-security-group-rules/{security_group_id} DELETE os-security-groups:rule:delete o
/servers/{server_id}/os-security-groups GET os-security-groups:list o
/os-server-external-events POST os-server-external-events:create o
/os-server-groups POST os-server-groups:create o
GET os-server-groups:index o
GET os-server-groups:index:all_projects o
/os-server-groups/{server_group_id} GET os-server-groups:show o
DELETE os-server-groups:delete o
/os-simple-tenant-usage/{tenant_id} GET os-simple-tenant-usage:show o
/os-simple-tenant-usage GET os-simple-tenant-usage:list o
/os-tenant-networks/{network_id} GET os-tenant-networks:show o
/os-tenant-networks GET os-tenant-networks:list o
/os-volumes GET os-volumes:list o
POST os-volumes:create o
/os-volumes/{volume_id} GET os-volumes:show o
DELETE os-volumes:delete o
/os-volumes/detail GET os-volumes:detail o
/os-snapshots GET os-volumes:snapshots:list o
POST os-volumes:snapshots:create o
/os-snapshots/ {snapshot_id} GET os-volumes:snapshots:show o
DELETE os-volumes:snapshots:delete o
/os-snapshots/detail GET os-volumes:snapshots:detail o

Questions: