3

·‰EcÄã@s¾dd
lm
Z

ddlmZ
ejZdZdZedZ	e
j
ededdd	d
œg
ƒe
j
ededdd
d
œg
ƒe
j
edejddd	d
œg
ƒe
j
edejddd
d
œg
ƒe
j
ededddd
œg
ƒe
j
edejdddd
œdd
d
œgƒe
j
ededdd	d
œg
ƒe
j
edejddd	d
œg
ƒe
j
ededdd	d
œg
ƒe
j
ededdd	d
œg
ƒe
j
e	ed dd	d
œg
ƒe
j
ed!d"dd	d
œdd#d
œgƒe
j
ed$ed%d&dd
œg
ƒe
j
ed'ed(d)dd
œg
ƒe
j
ed*ed+dd,d
œg
ƒe
j
ed-ed.dd/d
œg
ƒe
j
ed0ed1dd2d
œg
ƒe
j
ed3ed4dd5d
œg
ƒe
j
ed6ed7dd8d
œg
ƒe
j
ed9ed:dd;d
œg
ƒe
j
ed<ed=dd;d
œg
ƒe
j
ed>ed?dd@d
œg
ƒe
j
edAedBddCd
œg
ƒe
j
edDedEddFd
œg
ƒgZdGdH„Z
dIS)Jé)
Úpolicy)
Úpolicieszos_compute_api:servers:%sznetwork:attach_external_networkzcreate:zero_disk_flavorÚindexzList all serversZGETz/servers)ÚmethodÚpathZdetailz*List all servers with detailed informationz/servers/detailzindex:get_all_tenantsz!List all servers for all projectszdetail:get_all_tenantsz;List all servers with detailed information for all projectsZshowz
Show a serverz/servers/{server_id}zshow:host_statusz5Show a server with additional host status informationZcreatezCreate a serverZPOSTzcreate:forced_hostz%Create a server on the specified hostzcreate:attach_volumez8Create a server with the requested volume attached to itzcreate:attach_networkz9Create a server with the requested network attached to ita¬
This rule controls the compute API validation behavior of creating a server
with a flavor that has 0 disk, indicating the server should be volume-backed.

For a flavor with disk=0, the root disk will be set to exactly the size of the
image used to deploy the instance. However, in this case the filter_scheduler
cannot select the compute host based on the virtual image size. Therefore, 0
should only be used for volume booted instances or for testing purposes.

WARNING: It is a potential security exposure to enable this policy rule
if users can upload their own images since repeated attempts to
create a disk=0 flavor instance with a large image can exhaust
the local disk of the compute (or shared storage cluster). See bug
https://bugs.launchpad.net/nova/+bug/1739646 for details.

This rule defaults to ``rule:admin_or_owner`` for backward compatibility but
will be changed to default to ``rule:admin_api`` in a subsequent release.
z
is_admin:Truez/Attach an unshared external network to a serverz!/servers/{server_id}/os-interfaceÚdeletezDelete a serverZDELETEÚupdatezUpdate a serverZPUTZconfirm_resizezConfirm a server resizez+/servers/{server_id}/action (confirmResize)Z
revert_resizezRevert a server resizez*/servers/{server_id}/action (revertResize)ZrebootzReboot a serverz$/servers/{server_id}/action (reboot)ZresizezResize a serverz$/servers/{server_id}/action (resize)ZrebuildzRebuild a serverz%/servers/{server_id}/action (rebuild)Zcreate_imagezCreate an image from a serverz)/servers/{server_id}/action (createImage)z create_image:allow_volume_backedz+Create an image from a volume backed serverÚstartzStart a serverz&/servers/{server_id}/action (os-start)Ústopz
Stop a serverz%/servers/{server_id}/action (os-stop)Ztrigger_crash_dumpzTrigger crash dump in a serverz0/servers/{server_id}/action (trigger_crash_dump)c
CstS)
N)
Úrules©rrú/usr/lib/python3.6/servers.pyÚ
list_rules!
s
rN)Zoslo_policyrZdmapirÚbaseZRULE_ADMIN_OR_OWNERZRULE_AOOZSERVERSZNETWORK_ATTACH_EXTERNALZZERO_DISK_FLAVORZDocumentedRuleDefaultZRULE_ADMIN_APIrrrrrr
Ú<module>s4