Ú]Àã@s7dd
lm
Z

ddlmZ
ejZdZdZedZe
j	ededdd	d
dig
ƒe
j	eded
dd	d
dig
ƒe
j	edej
ddd	d
dig
ƒe
j	edej
ddd	d
dig
ƒe
j	ededdd	d
dig
ƒe
j	edej
ddd	d
didd	d
digƒe
j	ededddd
dig
ƒe
j	edej
dddd
dig
ƒe
j	ededddd
dig
ƒe
j	eded ddd
dig
ƒe
j	eed!ddd
dig
ƒe
j	ed"d#ddd
diddd
d$igƒe
j	ed%ed&dd'd
dig
ƒe
j	ed(ed)dd*d
dig
ƒe
j	ed+ed,ddd
d-ig
ƒe
j	ed.ed/ddd
d0ig
ƒe
j	ed1ed2ddd
d3ig
ƒe
j	ed4ed5ddd
d6ig
ƒe
j	ed7ed8ddd
d9ig
ƒe
j	ed:ed;ddd
d<ig
ƒe
j	ed=ed>ddd
d<ig
ƒe
j	ed?ed@ddd
dAig
ƒe
j	edBedCddd
dDig
ƒe
j	edEedFddd
dGig
ƒgZdHdI„ZdJS)Ké)
Úpolicy)
Úbasezos_compute_api:servers:%sznetwork:attach_external_networkzcreate:zero_disk_flavorÚindexzList all serversÚmethodÚGETÚpathz/serversZdetailz*List all servers with detailed informationz/servers/detailzindex:get_all_tenantsz!List all servers for all projectszdetail:get_all_tenantsz;List all servers with detailed information for all projectsZshowz
Show a serverz/servers/{server_id}zshow:host_statusz5Show a server with additional host status informationÚcreatezCreate a serverÚPOSTzcreate:forced_hostz%Create a server on the specified hostzcreate:attach_volumez8Create a server with the requested volume attached to itzcreate:attach_networkz9Create a server with the requested network attached to ita¬
This rule controls the compute API validation behavior of creating a server
with a flavor that has 0 disk, indicating the server should be volume-backed.

For a flavor with disk=0, the root disk will be set to exactly the size of the
image used to deploy the instance. However, in this case the filter_scheduler
cannot select the compute host based on the virtual image size. Therefore, 0
should only be used for volume booted instances or for testing purposes.

WARNING: It is a potential security exposure to enable this policy rule
if users can upload their own images since repeated attempts to
create a disk=0 flavor instance with a large image can exhaust
the local disk of the compute (or shared storage cluster). See bug
https://bugs.launchpad.net/nova/+bug/1739646 for details.

This rule defaults to ``rule:admin_or_owner`` for backward compatibility but
will be changed to default to ``rule:admin_api`` in a subsequent release.
z
is_admin:Truez/Attach an unshared external network to a serverz!/servers/{server_id}/os-interfaceÚdeletezDelete a serverZDELETEÚupdatezUpdate a serverÚPUTZconfirm_resizezConfirm a server resizez+/servers/{server_id}/action (confirmResize)Z
revert_resizezRevert a server resizez*/servers/{server_id}/action (revertResize)ZrebootzReboot a serverz$/servers/{server_id}/action (reboot)ÚresizezResize a serverz$/servers/{server_id}/action (resize)ZrebuildzRebuild a serverz%/servers/{server_id}/action (rebuild)Zcreate_imagezCreate an image from a serverz)/servers/{server_id}/action (createImage)z create_image:allow_volume_backedz+Create an image from a volume backed serverÚstartzStart a serverz&/servers/{server_id}/action (os-start)Ústopz
Stop a serverz%/servers/{server_id}/action (os-stop)Ztrigger_crash_dumpzTrigger crash dump in a serverz0/servers/{server_id}/action (trigger_crash_dump)c
CstS)
N)
Úrules©rrú8/usr/lib/python3/dist-packages/dmapi/policies/servers.pyÚ
list_rules!
s
rN)
Zoslo_policyrZ
nova.policiesrZRULE_ADMIN_OR_OWNERZRULE_AOOZSERVERSZNETWORK_ATTACH_EXTERNALZZERO_DISK_FLAVORZDocumentedRuleDefaultZRULE_ADMIN_APIrrrrrrÚ<module>s4