"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "openstack_dashboard/conf/default_policies/nova.yaml" between
horizon-22.1.0.tar.gz and horizon-23.0.0.tar.gz

About: OpenStack Horizon (Optional Service: Dashboard) provides a web-based self-service portal to interact with underlying OpenStack services, such as launching an instance, assigning IP addresses and configuring access controls.
The "Zed" series (latest release).

nova.yaml  (horizon-22.1.0):nova.yaml  (horizon-23.0.0)
skipping to change at line 43 skipping to change at line 43
capabilities. Old policies are deprecated and silently going to be ignored capabilities. Old policies are deprecated and silently going to be ignored
in nova 23.0.0 release. in nova 23.0.0 release.
' '
deprecated_since: 21.0.0 deprecated_since: 21.0.0
description: Default rule for most Admin APIs. description: Default rule for most Admin APIs.
name: admin_api name: admin_api
operations: [] operations: []
scope_types: null scope_types: null
- check_str: role:admin and project_id:%(project_id)s
deprecated_reason: null
deprecated_rule:
check_str: is_admin:True
name: rule:admin_api
deprecated_since: null
description: Default rule for Project level admin APIs.
name: project_admin_api
operations: []
scope_types: null
- check_str: role:member and project_id:%(project_id)s - check_str: role:member and project_id:%(project_id)s
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: is_admin:True or project_id:%(project_id)s check_str: is_admin:True or project_id:%(project_id)s
name: rule:admin_or_owner name: rule:admin_or_owner
deprecated_since: null deprecated_since: null
description: Default rule for Project level non admin APIs. description: Default rule for Project level non admin APIs.
name: project_member_api name: project_member_api
operations: [] operations: []
scope_types: null scope_types: null
- check_str: role:reader and project_id:%(project_id)s - check_str: role:reader and project_id:%(project_id)s
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: is_admin:True or project_id:%(project_id)s check_str: is_admin:True or project_id:%(project_id)s
name: rule:admin_or_owner name: rule:admin_or_owner
deprecated_since: null deprecated_since: null
description: Default rule for Project level read only APIs. description: Default rule for Project level read only APIs.
name: project_reader_api name: project_reader_api
operations: [] operations: []
scope_types: null scope_types: null
- check_str: rule:project_member_api or rule:context_is_admin
deprecated_reason: null
deprecated_rule:
check_str: is_admin:True or project_id:%(project_id)s
name: rule:admin_or_owner
deprecated_since: null
description: Default rule for Project Member or admin APIs.
name: project_member_or_admin
operations: []
scope_types: null
- check_str: rule:project_reader_api or rule:context_is_admin - check_str: rule:project_reader_api or rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: is_admin:True or project_id:%(project_id)s check_str: is_admin:True or project_id:%(project_id)s
name: rule:admin_or_owner name: rule:admin_or_owner
deprecated_since: null deprecated_since: null
description: Default rule for Project reader and admin APIs. description: Default rule for Project reader or admin APIs.
name: project_reader_or_admin name: project_reader_or_admin
operations: [] operations: []
scope_types: null scope_types: null
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Reset the state of a given server description: Reset the state of a given server
name: os_compute_api:os-admin-actions:reset_state name: os_compute_api:os-admin-actions:reset_state
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (os-resetState) path: /servers/{server_id}/action (os-resetState)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Inject network information into the server description: Inject network information into the server
name: os_compute_api:os-admin-actions:inject_network_info name: os_compute_api:os-admin-actions:inject_network_info
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (injectNetworkInfo) path: /servers/{server_id}/action (injectNetworkInfo)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Change the administrative password for a server description: Change the administrative password for a server
name: os_compute_api:os-admin-password name: os_compute_api:os-admin-password
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (changePassword) path: /servers/{server_id}/action (changePassword)
scope_types: scope_types:
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Create or replace metadata for an aggregate description: Create or replace metadata for an aggregate
name: os_compute_api:os-aggregates:set_metadata name: os_compute_api:os-aggregates:set_metadata
operations: operations:
- method: POST - method: POST
path: /os-aggregates/{aggregate_id}/action (set_metadata) path: /os-aggregates/{aggregate_id}/action (set_metadata)
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Add a host to an aggregate description: Add a host to an aggregate
name: os_compute_api:os-aggregates:add_host name: os_compute_api:os-aggregates:add_host
operations: operations:
- method: POST - method: POST
path: /os-aggregates/{aggregate_id}/action (add_host) path: /os-aggregates/{aggregate_id}/action (add_host)
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Create an aggregate description: Create an aggregate
name: os_compute_api:os-aggregates:create name: os_compute_api:os-aggregates:create
operations: operations:
- method: POST - method: POST
path: /os-aggregates path: /os-aggregates
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Remove a host from an aggregate description: Remove a host from an aggregate
name: os_compute_api:os-aggregates:remove_host name: os_compute_api:os-aggregates:remove_host
operations: operations:
- method: POST - method: POST
path: /os-aggregates/{aggregate_id}/action (remove_host) path: /os-aggregates/{aggregate_id}/action (remove_host)
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Update name and/or availability zone for an aggregate description: Update name and/or availability zone for an aggregate
name: os_compute_api:os-aggregates:update name: os_compute_api:os-aggregates:update
operations: operations:
- method: PUT - method: PUT
path: /os-aggregates/{aggregate_id} path: /os-aggregates/{aggregate_id}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: List all aggregates description: List all aggregates
name: os_compute_api:os-aggregates:index name: os_compute_api:os-aggregates:index
operations: operations:
- method: GET - method: GET
path: /os-aggregates path: /os-aggregates
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Delete an aggregate description: Delete an aggregate
name: os_compute_api:os-aggregates:delete name: os_compute_api:os-aggregates:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-aggregates/{aggregate_id} path: /os-aggregates/{aggregate_id}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Show details for an aggregate description: Show details for an aggregate
name: os_compute_api:os-aggregates:show name: os_compute_api:os-aggregates:show
operations: operations:
- method: GET - method: GET
path: /os-aggregates/{aggregate_id} path: /os-aggregates/{aggregate_id}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Request image caching for an aggregate description: Request image caching for an aggregate
name: compute:aggregates:images name: compute:aggregates:images
operations: operations:
- method: POST - method: POST
path: /os-aggregates/{aggregate_id}/images path: /os-aggregates/{aggregate_id}/images
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Create an assisted volume snapshot description: Create an assisted volume snapshot
name: os_compute_api:os-assisted-volume-snapshots:create name: os_compute_api:os-assisted-volume-snapshots:create
operations: operations:
- method: POST - method: POST
path: /os-assisted-volume-snapshots path: /os-assisted-volume-snapshots
scope_types: scope_types:
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Delete an assisted volume snapshot description: Delete an assisted volume snapshot
name: os_compute_api:os-assisted-volume-snapshots:delete name: os_compute_api:os-assisted-volume-snapshots:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-assisted-volume-snapshots/{snapshot_id} path: /os-assisted-volume-snapshots/{snapshot_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-attach-interfaces name: os_compute_api:os-attach-interfaces
deprecated_since: null deprecated_since: null
description: List port interfaces attached to a server description: List port interfaces attached to a server
name: os_compute_api:os-attach-interfaces:list name: os_compute_api:os-attach-interfaces:list
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-interface path: /servers/{server_id}/os-interface
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-attach-interfaces name: os_compute_api:os-attach-interfaces
deprecated_since: null deprecated_since: null
description: Show details of a port interface attached to a server description: Show details of a port interface attached to a server
name: os_compute_api:os-attach-interfaces:show name: os_compute_api:os-attach-interfaces:show
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-interface/{port_id} path: /servers/{server_id}/os-interface/{port_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-attach-interfaces name: os_compute_api:os-attach-interfaces
deprecated_since: null deprecated_since: null
description: Attach an interface to a server description: Attach an interface to a server
name: os_compute_api:os-attach-interfaces:create name: os_compute_api:os-attach-interfaces:create
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/os-interface path: /servers/{server_id}/os-interface
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-attach-interfaces name: os_compute_api:os-attach-interfaces
deprecated_since: null deprecated_since: null
description: Detach an interface from a server description: Detach an interface from a server
name: os_compute_api:os-attach-interfaces:delete name: os_compute_api:os-attach-interfaces:delete
operations: operations:
- method: DELETE - method: DELETE
path: /servers/{server_id}/os-interface/{port_id} path: /servers/{server_id}/os-interface/{port_id}
scope_types: scope_types:
- project - project
- check_str: '@' - check_str: '@'
description: List availability zone information without host information description: List availability zone information without host information
name: os_compute_api:os-availability-zone:list name: os_compute_api:os-availability-zone:list
operations: operations:
- method: GET - method: GET
path: /os-availability-zone path: /os-availability-zone
scope_types: scope_types:
- system
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: List detailed availability zone information with host information description: List detailed availability zone information with host information
name: os_compute_api:os-availability-zone:detail name: os_compute_api:os-availability-zone:detail
operations: operations:
- method: GET - method: GET
path: /os-availability-zone/detail path: /os-availability-zone/detail
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-baremetal-nodes name: os_compute_api:os-baremetal-nodes
deprecated_since: null deprecated_since: null
description: 'List and show details of bare metal nodes. description: 'List and show details of bare metal nodes.
These APIs are proxy calls to the Ironic service and are deprecated. These APIs are proxy calls to the Ironic service and are deprecated.
' '
name: os_compute_api:os-baremetal-nodes:list name: os_compute_api:os-baremetal-nodes:list
operations: operations:
- method: GET - method: GET
path: /os-baremetal-nodes path: /os-baremetal-nodes
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-baremetal-nodes name: os_compute_api:os-baremetal-nodes
deprecated_since: null deprecated_since: null
description: Show action details for a server. description: Show action details for a server.
name: os_compute_api:os-baremetal-nodes:show name: os_compute_api:os-baremetal-nodes:show
operations: operations:
- method: GET - method: GET
path: /os-baremetal-nodes/{node_id} path: /os-baremetal-nodes/{node_id}
scope_types: scope_types:
- system - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Show console connection information for a given console authentic ation description: Show console connection information for a given console authentic ation
check_str: <span class="insert">rule:context_is_admin</span>
token token
name: os_compute_api:os-console-auth-tokens name: os_compute_api:os-console-auth-tokens
operations: operations:
- method: GET - method: GET
path: /os-console-auth-tokens/{console_token} path: /os-console-auth-tokens/{console_token}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Show console output for a server description: Show console output for a server
name: os_compute_api:os-console-output name: os_compute_api:os-console-output
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (os-getConsoleOutput) path: /servers/{server_id}/action (os-getConsoleOutput)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Create a back up of a server description: Create a back up of a server
name: os_compute_api:os-create-backup name: os_compute_api:os-create-backup
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (createBackup) path: /servers/{server_id}/action (createBackup)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-deferred-delete name: os_compute_api:os-deferred-delete
deprecated_since: null deprecated_since: null
description: Restore a soft deleted server description: Restore a soft deleted server
name: os_compute_api:os-deferred-delete:restore name: os_compute_api:os-deferred-delete:restore
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (restore) path: /servers/{server_id}/action (restore)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-deferred-delete name: os_compute_api:os-deferred-delete
deprecated_since: null deprecated_since: null
description: Force delete a server before deferred cleanup description: Force delete a server before deferred cleanup
name: os_compute_api:os-deferred-delete:force name: os_compute_api:os-deferred-delete:force
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (forceDelete) path: /servers/{server_id}/action (forceDelete)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Evacuate a server from a failed host to a new host description: Evacuate a server from a failed host to a new host
name: os_compute_api:os-evacuate name: os_compute_api:os-evacuate
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (evacuate) path: /servers/{server_id}/action (evacuate)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: 'Return extended attributes for server. description: 'Return extended attributes for server.
This rule will control the visibility for a set of servers attributes: This rule will control the visibility for a set of servers attributes:
- ``OS-EXT-SRV-ATTR:host`` - ``OS-EXT-SRV-ATTR:host``
- ``OS-EXT-SRV-ATTR:instance_name`` - ``OS-EXT-SRV-ATTR:instance_name``
- ``OS-EXT-SRV-ATTR:reservation_id`` (since microversion 2.3) - ``OS-EXT-SRV-ATTR:reservation_id`` (since microversion 2.3)
skipping to change at line 413 skipping to change at line 412
- check_str: '@' - check_str: '@'
description: List available extensions and show information for an extension b y description: List available extensions and show information for an extension b y
alias alias
name: os_compute_api:extensions name: os_compute_api:extensions
operations: operations:
- method: GET - method: GET
path: /extensions path: /extensions
- method: GET - method: GET
path: /extensions/{alias} path: /extensions/{alias}
scope_types: scope_types:
- system
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Add flavor access to a tenant description: Add flavor access to a tenant
name: os_compute_api:os-flavor-access:add_tenant_access name: os_compute_api:os-flavor-access:add_tenant_access
operations: operations:
- method: POST - method: POST
path: /flavors/{flavor_id}/action (addTenantAccess) path: /flavors/{flavor_id}/action (addTenantAccess)
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Remove flavor access from a tenant description: Remove flavor access from a tenant
name: os_compute_api:os-flavor-access:remove_tenant_access name: os_compute_api:os-flavor-access:remove_tenant_access
operations: operations:
- method: POST - method: POST
path: /flavors/{flavor_id}/action (removeTenantAccess) path: /flavors/{flavor_id}/action (removeTenantAccess)
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-flavor-access name: os_compute_api:os-flavor-access
deprecated_since: null deprecated_since: null
description: 'List flavor access information description: 'List flavor access information
Allows access to the full list of tenants that have access Allows access to the full list of tenants that have access
to a flavor via an os-flavor-access API. to a flavor via an os-flavor-access API.
' '
name: os_compute_api:os-flavor-access name: os_compute_api:os-flavor-access
operations: operations:
- method: GET - method: GET
path: /flavors/{flavor_id}/os-flavor-access path: /flavors/{flavor_id}/os-flavor-access
scope_types: scope_types:
- system - project
- check_str: rule:project_reader_or_admin - check_str: rule:project_reader_or_admin
description: Show an extra spec for a flavor description: Show an extra spec for a flavor
name: os_compute_api:os-flavor-extra-specs:show name: os_compute_api:os-flavor-extra-specs:show
operations: operations:
- method: GET - method: GET
path: /flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key} path: /flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key}
scope_types: scope_types:
- system
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Create extra specs for a flavor description: Create extra specs for a flavor
name: os_compute_api:os-flavor-extra-specs:create name: os_compute_api:os-flavor-extra-specs:create
operations: operations:
- method: POST - method: POST
path: /flavors/{flavor_id}/os-extra_specs/ path: /flavors/{flavor_id}/os-extra_specs/
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Update an extra spec for a flavor description: Update an extra spec for a flavor
name: os_compute_api:os-flavor-extra-specs:update name: os_compute_api:os-flavor-extra-specs:update
operations: operations:
- method: PUT - method: PUT
path: /flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key} path: /flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Delete an extra spec for a flavor description: Delete an extra spec for a flavor
name: os_compute_api:os-flavor-extra-specs:delete name: os_compute_api:os-flavor-extra-specs:delete
operations: operations:
- method: DELETE - method: DELETE
path: /flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key} path: /flavors/{flavor_id}/os-extra_specs/{flavor_extra_spec_key}
scope_types: scope_types:
- system - project
- check_str: rule:project_reader_or_admin - check_str: rule:project_reader_or_admin
description: List extra specs for a flavor. Starting with microversion 2.61, e xtra description: List extra specs for a flavor. Starting with microversion 2.61, e xtra
specs may be returned in responses for the flavor resource. specs may be returned in responses for the flavor resource.
name: os_compute_api:os-flavor-extra-specs:index name: os_compute_api:os-flavor-extra-specs:index
operations: operations:
- method: GET - method: GET
path: /flavors/{flavor_id}/os-extra_specs/ path: /flavors/{flavor_id}/os-extra_specs/
- method: POST - method: POST
path: /flavors path: /flavors
- method: GET - method: GET
path: /flavors/detail path: /flavors/detail
- method: GET - method: GET
path: /flavors/{flavor_id} path: /flavors/{flavor_id}
- method: PUT - method: PUT
path: /flavors/{flavor_id} path: /flavors/{flavor_id}
scope_types: scope_types:
- system
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Create a flavor description: Create a flavor
name: os_compute_api:os-flavor-manage:create name: os_compute_api:os-flavor-manage:create
operations: operations:
- method: POST - method: POST
path: /flavors path: /flavors
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Update a flavor description: Update a flavor
name: os_compute_api:os-flavor-manage:update name: os_compute_api:os-flavor-manage:update
operations: operations:
- method: PUT - method: PUT
path: /flavors/{flavor_id} path: /flavors/{flavor_id}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Delete a flavor description: Delete a flavor
name: os_compute_api:os-flavor-manage:delete name: os_compute_api:os-flavor-manage:delete
operations: operations:
- method: DELETE - method: DELETE
path: /flavors/{flavor_id} path: /flavors/{flavor_id}
scope_types: scope_types:
- system - project
- check_str: '@' - check_str: '@'
description: List floating IP pools. This API is deprecated. description: List floating IP pools. This API is deprecated.
name: os_compute_api:os-floating-ip-pools name: os_compute_api:os-floating-ip-pools
operations: operations:
- method: GET - method: GET
path: /os-floating-ip-pools path: /os-floating-ip-pools
scope_types: scope_types:
- system
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-floating-ips name: os_compute_api:os-floating-ips
deprecated_since: null deprecated_since: null
description: Associate floating IPs to server. This API is deprecated. description: Associate floating IPs to server. This API is deprecated.
name: os_compute_api:os-floating-ips:add name: os_compute_api:os-floating-ips:add
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (addFloatingIp) path: /servers/{server_id}/action (addFloatingIp)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-floating-ips name: os_compute_api:os-floating-ips
deprecated_since: null deprecated_since: null
description: Disassociate floating IPs to server. This API is deprecated. description: Disassociate floating IPs to server. This API is deprecated.
name: os_compute_api:os-floating-ips:remove name: os_compute_api:os-floating-ips:remove
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (removeFloatingIp) path: /servers/{server_id}/action (removeFloatingIp)
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-floating-ips name: os_compute_api:os-floating-ips
deprecated_since: null deprecated_since: null
description: List floating IPs. This API is deprecated. description: List floating IPs. This API is deprecated.
name: os_compute_api:os-floating-ips:list name: os_compute_api:os-floating-ips:list
operations: operations:
- method: GET - method: GET
path: /os-floating-ips path: /os-floating-ips
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-floating-ips name: os_compute_api:os-floating-ips
deprecated_since: null deprecated_since: null
description: Create floating IPs. This API is deprecated. description: Create floating IPs. This API is deprecated.
name: os_compute_api:os-floating-ips:create name: os_compute_api:os-floating-ips:create
operations: operations:
- method: POST - method: POST
path: /os-floating-ips path: /os-floating-ips
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-floating-ips name: os_compute_api:os-floating-ips
deprecated_since: null deprecated_since: null
description: Show floating IPs. This API is deprecated. description: Show floating IPs. This API is deprecated.
name: os_compute_api:os-floating-ips:show name: os_compute_api:os-floating-ips:show
operations: operations:
- method: GET - method: GET
path: /os-floating-ips/{floating_ip_id} path: /os-floating-ips/{floating_ip_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-floating-ips name: os_compute_api:os-floating-ips
deprecated_since: null deprecated_since: null
description: Delete floating IPs. This API is deprecated. description: Delete floating IPs. This API is deprecated.
name: os_compute_api:os-floating-ips:delete name: os_compute_api:os-floating-ips:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-floating-ips/{floating_ip_id} path: /os-floating-ips/{floating_ip_id}
skipping to change at line 626 skipping to change at line 621
name: os_compute_api:os-hosts name: os_compute_api:os-hosts
deprecated_since: null deprecated_since: null
description: 'List physical hosts. description: 'List physical hosts.
This API is deprecated in favor of os-hypervisors and os-services.' This API is deprecated in favor of os-hypervisors and os-services.'
name: os_compute_api:os-hosts:list name: os_compute_api:os-hosts:list
operations: operations:
- method: GET - method: GET
path: /os-hosts path: /os-hosts
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hosts name: os_compute_api:os-hosts
deprecated_since: null deprecated_since: null
description: 'Show physical host. description: 'Show physical host.
This API is deprecated in favor of os-hypervisors and os-services.' This API is deprecated in favor of os-hypervisors and os-services.'
name: os_compute_api:os-hosts:show name: os_compute_api:os-hosts:show
operations: operations:
- method: GET - method: GET
path: /os-hosts/{host_name} path: /os-hosts/{host_name}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hosts name: os_compute_api:os-hosts
deprecated_since: null deprecated_since: null
description: 'Update physical host. description: 'Update physical host.
This API is deprecated in favor of os-hypervisors and os-services.' This API is deprecated in favor of os-hypervisors and os-services.'
name: os_compute_api:os-hosts:update name: os_compute_api:os-hosts:update
operations: operations:
- method: PUT - method: PUT
path: /os-hosts/{host_name} path: /os-hosts/{host_name}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hosts name: os_compute_api:os-hosts
deprecated_since: null deprecated_since: null
description: 'Reboot physical host. description: 'Reboot physical host.
This API is deprecated in favor of os-hypervisors and os-services.' This API is deprecated in favor of os-hypervisors and os-services.'
name: os_compute_api:os-hosts:reboot name: os_compute_api:os-hosts:reboot
operations: operations:
- method: GET - method: GET
path: /os-hosts/{host_name}/reboot path: /os-hosts/{host_name}/reboot
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hosts name: os_compute_api:os-hosts
deprecated_since: null deprecated_since: null
description: 'Shutdown physical host. description: 'Shutdown physical host.
This API is deprecated in favor of os-hypervisors and os-services.' This API is deprecated in favor of os-hypervisors and os-services.'
name: os_compute_api:os-hosts:shutdown name: os_compute_api:os-hosts:shutdown
operations: operations:
- method: GET - method: GET
path: /os-hosts/{host_name}/shutdown path: /os-hosts/{host_name}/shutdown
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hosts name: os_compute_api:os-hosts
deprecated_since: null deprecated_since: null
description: 'Start physical host. description: 'Start physical host.
This API is deprecated in favor of os-hypervisors and os-services.' This API is deprecated in favor of os-hypervisors and os-services.'
name: os_compute_api:os-hosts:start name: os_compute_api:os-hosts:start
operations: operations:
- method: GET - method: GET
path: /os-hosts/{host_name}/startup path: /os-hosts/{host_name}/startup
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hypervisors name: os_compute_api:os-hypervisors
deprecated_since: null deprecated_since: null
description: List all hypervisors. description: List all hypervisors.
name: os_compute_api:os-hypervisors:list name: os_compute_api:os-hypervisors:list
operations: operations:
- method: GET - method: GET
path: /os-hypervisors path: /os-hypervisors
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hypervisors name: os_compute_api:os-hypervisors
deprecated_since: null deprecated_since: null
description: List all hypervisors with details description: List all hypervisors with details
name: os_compute_api:os-hypervisors:list-detail name: os_compute_api:os-hypervisors:list-detail
operations: operations:
- method: GET - method: GET
path: /os-hypervisors/details path: /os-hypervisors/details
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hypervisors name: os_compute_api:os-hypervisors
deprecated_since: null deprecated_since: null
description: Show summary statistics for all hypervisors over all compute node s. description: Show summary statistics for all hypervisors over all compute node s.
name: os_compute_api:os-hypervisors:statistics name: os_compute_api:os-hypervisors:statistics
operations: operations:
- method: GET - method: GET
path: /os-hypervisors/statistics path: /os-hypervisors/statistics
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hypervisors name: os_compute_api:os-hypervisors
deprecated_since: null deprecated_since: null
description: Show details for a hypervisor. description: Show details for a hypervisor.
name: os_compute_api:os-hypervisors:show name: os_compute_api:os-hypervisors:show
operations: operations:
- method: GET - method: GET
path: /os-hypervisors/{hypervisor_id} path: /os-hypervisors/{hypervisor_id}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hypervisors name: os_compute_api:os-hypervisors
deprecated_since: null deprecated_since: null
description: Show the uptime of a hypervisor. description: Show the uptime of a hypervisor.
name: os_compute_api:os-hypervisors:uptime name: os_compute_api:os-hypervisors:uptime
operations: operations:
- method: GET - method: GET
path: /os-hypervisors/{hypervisor_id}/uptime path: /os-hypervisors/{hypervisor_id}/uptime
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hypervisors name: os_compute_api:os-hypervisors
deprecated_since: null deprecated_since: null
description: Search hypervisor by hypervisor_hostname pattern. description: Search hypervisor by hypervisor_hostname pattern.
name: os_compute_api:os-hypervisors:search name: os_compute_api:os-hypervisors:search
operations: operations:
- method: GET - method: GET
path: /os-hypervisors/{hypervisor_hostname_pattern}/search path: /os-hypervisors/{hypervisor_hostname_pattern}/search
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-hypervisors name: os_compute_api:os-hypervisors
deprecated_since: null deprecated_since: null
description: List all servers on hypervisors that can match the provided hyper visor_hostname description: List all servers on hypervisors that can match the provided hyper visor_hostname
pattern. pattern.
name: os_compute_api:os-hypervisors:servers name: os_compute_api:os-hypervisors:servers
operations: operations:
- method: GET - method: GET
path: /os-hypervisors/{hypervisor_hostname_pattern}/servers path: /os-hypervisors/{hypervisor_hostname_pattern}/servers
scope_types: scope_types:
- system - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: 'Add "details" key in action events for a server. description: 'Add "details" key in action events for a server.
check_str: <span class="insert">rule:context_is_admin</span>
This check is performed only after the check This check is performed only after the check
os_compute_api:os-instance-actions:show passes. Beginning with Microversion os_compute_api:os-instance-actions:show passes. Beginning with Microversion
2.84, new field ''details'' is exposed via API which can have more details a bout 2.84, new field ''details'' is exposed via API which can have more details a bout
event failure. That field is controlled by this policy which is system reade r event failure. That field is controlled by this policy which is system reade r
skipping to change at line 820 skipping to change at line 815
(e.g. the type of the hypervisor). (e.g. the type of the hypervisor).
' '
name: os_compute_api:os-instance-actions:events:details name: os_compute_api:os-instance-actions:events:details
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-instance-actions/{request_id} path: /servers/{server_id}/os-instance-actions/{request_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: 'Add events details in action details for a server. description: 'Add events details in action details for a server.
This check is performed only after the check This check is performed only after the check
os_compute_api:os-instance-actions:show passes. Beginning with Microversion os_compute_api:os-instance-actions:show passes. Beginning with Microversion
2.51, events details are always included; traceback information is provided 2.51, events details are always included; traceback information is provided
per event if policy enforcement passes. Beginning with Microversion 2.62, per event if policy enforcement passes. Beginning with Microversion 2.62,
each event includes a hashed host identifier and, if policy enforcement each event includes a hashed host identifier and, if policy enforcement
passes, the name of the host.' passes, the name of the host.'
name: os_compute_api:os-instance-actions:events name: os_compute_api:os-instance-actions:events
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-instance-actions/{request_id} path: /servers/{server_id}/os-instance-actions/{request_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-instance-actions name: os_compute_api:os-instance-actions
deprecated_since: null deprecated_since: null
description: List actions for a server. description: List actions for a server.
name: os_compute_api:os-instance-actions:list name: os_compute_api:os-instance-actions:list
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-instance-actions path: /servers/{server_id}/os-instance-actions
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-instance-actions name: os_compute_api:os-instance-actions
deprecated_since: null deprecated_since: null
description: Show action details for a server. description: Show action details for a server.
name: os_compute_api:os-instance-actions:show name: os_compute_api:os-instance-actions:show
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-instance-actions/{request_id} path: /servers/{server_id}/os-instance-actions/{request_id}
skipping to change at line 878 skipping to change at line 873
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-instance-usage-audit-log name: os_compute_api:os-instance-usage-audit-log
deprecated_since: null deprecated_since: null
description: List all usage audits. description: List all usage audits.
name: os_compute_api:os-instance-usage-audit-log:list name: os_compute_api:os-instance-usage-audit-log:list
operations: operations:
- method: GET - method: GET
path: /os-instance_usage_audit_log path: /os-instance_usage_audit_log
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-instance-usage-audit-log name: os_compute_api:os-instance-usage-audit-log
deprecated_since: null deprecated_since: null
description: List all usage audits occurred before a specified time for all se rvers description: List all usage audits occurred before a specified time for all se rvers
on all compute hosts where usage auditing is configured on all compute hosts where usage auditing is configured
name: os_compute_api:os-instance-usage-audit-log:show name: os_compute_api:os-instance-usage-audit-log:show
operations: operations:
- method: GET - method: GET
path: /os-instance_usage_audit_log/{before_timestamp} path: /os-instance_usage_audit_log/{before_timestamp}
scope_types: scope_types:
- system - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: Show IP addresses details for a network label of a server description: Show IP addresses details for a network label of a server
check_str: <span class="insert">rule:project_reader_or_admin</span>
name: os_compute_api:ips:show name: os_compute_api:ips:show
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/ips/{network_label} path: /servers/{server_id}/ips/{network_label}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: List IP addresses that are assigned to a server description: List IP addresses that are assigned to a server
name: os_compute_api:ips:index name: os_compute_api:ips:index
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/ips path: /servers/{server_id}/ips
scope_types: scope_types:
- project - project
- check_str: (rule:context_is_admin) or user_id:%(user_id)s - check_str: (rule:context_is_admin) or user_id:%(user_id)s
description: List all keypairs description: List all keypairs
name: os_compute_api:os-keypairs:index name: os_compute_api:os-keypairs:index
operations: operations:
- method: GET - method: GET
path: /os-keypairs path: /os-keypairs
scope_types: scope_types:
- system
- project - project
- check_str: (rule:context_is_admin) or user_id:%(user_id)s - check_str: (rule:context_is_admin) or user_id:%(user_id)s
description: Create a keypair description: Create a keypair
name: os_compute_api:os-keypairs:create name: os_compute_api:os-keypairs:create
operations: operations:
- method: POST - method: POST
path: /os-keypairs path: /os-keypairs
scope_types: scope_types:
- system
- project - project
- check_str: (rule:context_is_admin) or user_id:%(user_id)s - check_str: (rule:context_is_admin) or user_id:%(user_id)s
description: Delete a keypair description: Delete a keypair
name: os_compute_api:os-keypairs:delete name: os_compute_api:os-keypairs:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-keypairs/{keypair_name} path: /os-keypairs/{keypair_name}
scope_types: scope_types:
- system
- project - project
- check_str: (rule:context_is_admin) or user_id:%(user_id)s - check_str: (rule:context_is_admin) or user_id:%(user_id)s
description: Show details of a keypair description: Show details of a keypair
name: os_compute_api:os-keypairs:show name: os_compute_api:os-keypairs:show
operations: operations:
- method: GET - method: GET
path: /os-keypairs/{keypair_name} path: /os-keypairs/{keypair_name}
scope_types: scope_types:
- system
- project - project
- check_str: '@' - check_str: '@'
description: Show rate and absolute limits for the current user project description: Show rate and absolute limits for the current user project
name: os_compute_api:limits name: os_compute_api:limits
operations: operations:
- method: GET - method: GET
path: /limits path: /limits
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-used-limits name: os_compute_api:os-used-limits
deprecated_since: null deprecated_since: null
description: 'Show rate and absolute limits of other project. description: 'Show rate and absolute limits of other project.
This policy only checks if the user has access to the requested This policy only checks if the user has access to the requested
project limits. And this check is performed only after the check project limits. And this check is performed only after the check
os_compute_api:limits passes' os_compute_api:limits passes'
name: os_compute_api:limits:other_project name: os_compute_api:limits:other_project
operations: operations:
- method: GET - method: GET
path: /limits path: /limits
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Lock a server description: Lock a server
name: os_compute_api:os-lock-server:lock name: os_compute_api:os-lock-server:lock
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (lock) path: /servers/{server_id}/action (lock)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Unlock a server description: Unlock a server
name: os_compute_api:os-lock-server:unlock name: os_compute_api:os-lock-server:unlock
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (unlock) path: /servers/{server_id}/action (unlock)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: 'Unlock a server, regardless who locked the server. description: 'Unlock a server, regardless who locked the server.
This check is performed only after the check This check is performed only after the check
os_compute_api:os-lock-server:unlock passes' os_compute_api:os-lock-server:unlock passes'
name: os_compute_api:os-lock-server:unlock:unlock_override name: os_compute_api:os-lock-server:unlock:unlock_override
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (unlock) path: /servers/{server_id}/action (unlock)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Cold migrate a server to a host description: Cold migrate a server to a host
name: os_compute_api:os-migrate-server:migrate name: os_compute_api:os-migrate-server:migrate
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (migrate) path: /servers/{server_id}/action (migrate)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Live migrate a server to a new host without a reboot description: Live migrate a server to a new host without a reboot
name: os_compute_api:os-migrate-server:migrate_live name: os_compute_api:os-migrate-server:migrate_live
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (os-migrateLive) path: /servers/{server_id}/action (os-migrateLive)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: List migrations description: List migrations
name: os_compute_api:os-migrations:index name: os_compute_api:os-migrations:index
operations: operations:
- method: GET - method: GET
path: /os-migrations path: /os-migrations
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-multinic name: os_compute_api:os-multinic
deprecated_since: null deprecated_since: null
description: 'Add a fixed IP address to a server. description: 'Add a fixed IP address to a server.
This API is proxy calls to the Network service. This is This API is proxy calls to the Network service. This is
deprecated.' deprecated.'
name: os_compute_api:os-multinic:add name: os_compute_api:os-multinic:add
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (addFixedIp) path: /servers/{server_id}/action (addFixedIp)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-multinic name: os_compute_api:os-multinic
deprecated_since: null deprecated_since: null
description: 'Remove a fixed IP address from a server. description: 'Remove a fixed IP address from a server.
This API is proxy calls to the Network service. This is This API is proxy calls to the Network service. This is
deprecated.' deprecated.'
name: os_compute_api:os-multinic:remove name: os_compute_api:os-multinic:remove
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (removeFixedIp) path: /servers/{server_id}/action (removeFixedIp)
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-networks:view name: os_compute_api:os-networks:view
deprecated_since: null deprecated_since: null
description: 'List networks for the project. description: 'List networks for the project.
This API is proxy calls to the Network service. This is deprecated.' This API is proxy calls to the Network service. This is deprecated.'
name: os_compute_api:os-networks:list name: os_compute_api:os-networks:list
operations: operations:
- method: GET - method: GET
path: /os-networks path: /os-networks
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-networks:view name: os_compute_api:os-networks:view
deprecated_since: null deprecated_since: null
description: 'Show network details. description: 'Show network details.
This API is proxy calls to the Network service. This is deprecated.' This API is proxy calls to the Network service. This is deprecated.'
name: os_compute_api:os-networks:show name: os_compute_api:os-networks:show
operations: operations:
- method: GET - method: GET
path: /os-networks/{network_id} path: /os-networks/{network_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Pause a server description: Pause a server
name: os_compute_api:os-pause-server:pause name: os_compute_api:os-pause-server:pause
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (pause) path: /servers/{server_id}/action (pause)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Unpause a paused server description: Unpause a paused server
name: os_compute_api:os-pause-server:unpause name: os_compute_api:os-pause-server:unpause
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (unpause) path: /servers/{server_id}/action (unpause)
scope_types: scope_types:
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: List quotas for specific quota classs description: List quotas for specific quota classs
name: os_compute_api:os-quota-class-sets:show name: os_compute_api:os-quota-class-sets:show
operations: operations:
- method: GET - method: GET
path: /os-quota-class-sets/{quota_class} path: /os-quota-class-sets/{quota_class}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Update quotas for specific quota class description: Update quotas for specific quota class
name: os_compute_api:os-quota-class-sets:update name: os_compute_api:os-quota-class-sets:update
operations: operations:
- method: PUT - method: PUT
path: /os-quota-class-sets/{quota_class} path: /os-quota-class-sets/{quota_class}
scope_types: scope_types:
- system - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Update the quotas description: Update the quotas
check_str: <span class="insert">rule:context_is_admin</span>
name: os_compute_api:os-quota-sets:update name: os_compute_api:os-quota-sets:update
operations: operations:
- method: PUT - method: PUT
path: /os-quota-sets/{tenant_id} path: /os-quota-sets/{tenant_id}
scope_types: scope_types:
- project - project
- check_str: '@' - check_str: '@'
description: List default quotas description: List default quotas
name: os_compute_api:os-quota-sets:defaults name: os_compute_api:os-quota-sets:defaults
operations: operations:
- method: GET - method: GET
path: /os-quota-sets/{tenant_id}/defaults path: /os-quota-sets/{tenant_id}/defaults
scope_types: scope_types:
- system
- project - project
- check_str: (rule:project_reader_api) or role:admin - check_str: rule:project_reader_or_admin
description: Show a quota description: Show a quota
name: os_compute_api:os-quota-sets:show name: os_compute_api:os-quota-sets:show
operations: operations:
- method: GET - method: GET
path: /os-quota-sets/{tenant_id} path: /os-quota-sets/{tenant_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Revert quotas to defaults description: Revert quotas to defaults
name: os_compute_api:os-quota-sets:delete name: os_compute_api:os-quota-sets:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-quota-sets/{tenant_id} path: /os-quota-sets/{tenant_id}
scope_types: scope_types:
- project - project
- check_str: (rule:project_reader_api) or role:admin - check_str: rule:project_reader_or_admin
description: Show the detail of quota description: Show the detail of quota
name: os_compute_api:os-quota-sets:detail name: os_compute_api:os-quota-sets:detail
operations: operations:
- method: GET - method: GET
path: /os-quota-sets/{tenant_id}/detail path: /os-quota-sets/{tenant_id}/detail
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: 'Generate a URL to access remove server console. description: 'Generate a URL to access remove server console.
This policy is for ``POST /remote-consoles`` API and below Server actions AP Is This policy is for ``POST /remote-consoles`` API and below Server actions AP Is
are deprecated: are deprecated:
- ``os-getRDPConsole`` - ``os-getRDPConsole``
- ``os-getSerialConsole`` - ``os-getSerialConsole``
skipping to change at line 1189 skipping to change at line 1179
- method: POST - method: POST
path: /servers/{server_id}/action (os-getSerialConsole) path: /servers/{server_id}/action (os-getSerialConsole)
- method: POST - method: POST
path: /servers/{server_id}/action (os-getSPICEConsole) path: /servers/{server_id}/action (os-getSPICEConsole)
- method: POST - method: POST
path: /servers/{server_id}/action (os-getVNCConsole) path: /servers/{server_id}/action (os-getVNCConsole)
- method: POST - method: POST
path: /servers/{server_id}/remote-consoles path: /servers/{server_id}/remote-consoles
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Rescue a server description: Rescue a server
name: os_compute_api:os-rescue name: os_compute_api:os-rescue
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (rescue) path: /servers/{server_id}/action (rescue)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-rescue name: os_compute_api:os-rescue
deprecated_since: null deprecated_since: null
description: Unrescue a server description: Unrescue a server
name: os_compute_api:os-unrescue name: os_compute_api:os-unrescue
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (unrescue) path: /servers/{server_id}/action (unrescue)
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: List security groups. This API is deprecated. description: List security groups. This API is deprecated.
name: os_compute_api:os-security-groups:get name: os_compute_api:os-security-groups:get
operations: operations:
- method: GET - method: GET
path: /os-security-groups path: /os-security-groups
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: Show security group. This API is deprecated. description: Show security group. This API is deprecated.
name: os_compute_api:os-security-groups:show name: os_compute_api:os-security-groups:show
operations: operations:
- method: GET - method: GET
path: /os-security-groups/{security_group_id} path: /os-security-groups/{security_group_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: Create security group. This API is deprecated. description: Create security group. This API is deprecated.
name: os_compute_api:os-security-groups:create name: os_compute_api:os-security-groups:create
operations: operations:
- method: POST - method: POST
path: /os-security-groups path: /os-security-groups
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: Update security group. This API is deprecated. description: Update security group. This API is deprecated.
name: os_compute_api:os-security-groups:update name: os_compute_api:os-security-groups:update
operations: operations:
- method: PUT - method: PUT
path: /os-security-groups/{security_group_id} path: /os-security-groups/{security_group_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: Delete security group. This API is deprecated. description: Delete security group. This API is deprecated.
name: os_compute_api:os-security-groups:delete name: os_compute_api:os-security-groups:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-security-groups/{security_group_id} path: /os-security-groups/{security_group_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: Create security group Rule. This API is deprecated. description: Create security group Rule. This API is deprecated.
name: os_compute_api:os-security-groups:rule:create name: os_compute_api:os-security-groups:rule:create
operations: operations:
- method: POST - method: POST
path: /os-security-group-rules path: /os-security-group-rules
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: Delete security group Rule. This API is deprecated. description: Delete security group Rule. This API is deprecated.
name: os_compute_api:os-security-groups:rule:delete name: os_compute_api:os-security-groups:rule:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-security-group-rules/{security_group_id} path: /os-security-group-rules/{security_group_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: List security groups of server. description: List security groups of server.
name: os_compute_api:os-security-groups:list name: os_compute_api:os-security-groups:list
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-security-groups path: /servers/{server_id}/os-security-groups
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: Add security groups to server. description: Add security groups to server.
name: os_compute_api:os-security-groups:add name: os_compute_api:os-security-groups:add
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (addSecurityGroup) path: /servers/{server_id}/action (addSecurityGroup)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-security-groups name: os_compute_api:os-security-groups
deprecated_since: null deprecated_since: null
description: Remove security groups from server. description: Remove security groups from server.
name: os_compute_api:os-security-groups:remove name: os_compute_api:os-security-groups:remove
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (removeSecurityGroup) path: /servers/{server_id}/action (removeSecurityGroup)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Show the usage data for a server description: Show the usage data for a server
name: os_compute_api:os-server-diagnostics name: os_compute_api:os-server-diagnostics
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/diagnostics path: /servers/{server_id}/diagnostics
scope_types: scope_types:
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Create one or more external events description: Create one or more external events
name: os_compute_api:os-server-external-events:create name: os_compute_api:os-server-external-events:create
operations: operations:
- method: POST - method: POST
path: /os-server-external-events path: /os-server-external-events
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Create a new server group description: Create a new server group
name: os_compute_api:os-server-groups:create name: os_compute_api:os-server-groups:create
operations: operations:
- method: POST - method: POST
path: /os-server-groups path: /os-server-groups
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Delete a server group description: Delete a server group
name: os_compute_api:os-server-groups:delete name: os_compute_api:os-server-groups:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-server-groups/{server_group_id} path: /os-server-groups/{server_group_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: List all server groups description: List all server groups
name: os_compute_api:os-server-groups:index name: os_compute_api:os-server-groups:index
operations: operations:
- method: GET - method: GET
path: /os-server-groups path: /os-server-groups
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: List all server groups for all projects description: List all server groups for all projects
name: os_compute_api:os-server-groups:index:all_projects name: os_compute_api:os-server-groups:index:all_projects
operations: operations:
- method: GET - method: GET
path: /os-server-groups path: /os-server-groups
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: Show details of a server group description: Show details of a server group
name: os_compute_api:os-server-groups:show name: os_compute_api:os-server-groups:show
operations: operations:
- method: GET - method: GET
path: /os-server-groups/{server_group_id} path: /os-server-groups/{server_group_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: List all metadata of a server description: List all metadata of a server
name: os_compute_api:server-metadata:index name: os_compute_api:server-metadata:index
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/metadata path: /servers/{server_id}/metadata
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: Show metadata for a server description: Show metadata for a server
name: os_compute_api:server-metadata:show name: os_compute_api:server-metadata:show
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/metadata/{key} path: /servers/{server_id}/metadata/{key}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Create metadata for a server description: Create metadata for a server
name: os_compute_api:server-metadata:create name: os_compute_api:server-metadata:create
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/metadata path: /servers/{server_id}/metadata
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Replace metadata for a server description: Replace metadata for a server
name: os_compute_api:server-metadata:update_all name: os_compute_api:server-metadata:update_all
operations: operations:
- method: PUT - method: PUT
path: /servers/{server_id}/metadata path: /servers/{server_id}/metadata
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Update metadata from a server description: Update metadata from a server
name: os_compute_api:server-metadata:update name: os_compute_api:server-metadata:update
operations: operations:
- method: PUT - method: PUT
path: /servers/{server_id}/metadata/{key} path: /servers/{server_id}/metadata/{key}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Delete metadata from a server description: Delete metadata from a server
name: os_compute_api:server-metadata:delete name: os_compute_api:server-metadata:delete
operations: operations:
- method: DELETE - method: DELETE
path: /servers/{server_id}/metadata/{key} path: /servers/{server_id}/metadata/{key}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-server-password name: os_compute_api:os-server-password
deprecated_since: null deprecated_since: null
description: Show the encrypted administrative password of a server description: Show the encrypted administrative password of a server
name: os_compute_api:os-server-password:show name: os_compute_api:os-server-password:show
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-server-password path: /servers/{server_id}/os-server-password
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-server-password name: os_compute_api:os-server-password
deprecated_since: null deprecated_since: null
description: Clear the encrypted administrative password of a server description: Clear the encrypted administrative password of a server
name: os_compute_api:os-server-password:clear name: os_compute_api:os-server-password:clear
operations: operations:
- method: DELETE - method: DELETE
path: /servers/{server_id}/os-server-password path: /servers/{server_id}/os-server-password
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Delete all the server tags description: Delete all the server tags
name: os_compute_api:os-server-tags:delete_all name: os_compute_api:os-server-tags:delete_all
operations: operations:
- method: DELETE - method: DELETE
path: /servers/{server_id}/tags path: /servers/{server_id}/tags
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: List all tags for given server description: List all tags for given server
name: os_compute_api:os-server-tags:index name: os_compute_api:os-server-tags:index
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/tags path: /servers/{server_id}/tags
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Replace all tags on specified server with the new set of tags. description: Replace all tags on specified server with the new set of tags.
name: os_compute_api:os-server-tags:update_all name: os_compute_api:os-server-tags:update_all
operations: operations:
- method: PUT - method: PUT
path: /servers/{server_id}/tags path: /servers/{server_id}/tags
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Delete a single tag from the specified server description: Delete a single tag from the specified server
name: os_compute_api:os-server-tags:delete name: os_compute_api:os-server-tags:delete
operations: operations:
- method: DELETE - method: DELETE
path: /servers/{server_id}/tags/{tag} path: /servers/{server_id}/tags/{tag}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Add a single tag to the server if server has no specified tag description: Add a single tag to the server if server has no specified tag
name: os_compute_api:os-server-tags:update name: os_compute_api:os-server-tags:update
operations: operations:
- method: PUT - method: PUT
path: /servers/{server_id}/tags/{tag} path: /servers/{server_id}/tags/{tag}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: Check tag existence on the server. description: Check tag existence on the server.
name: os_compute_api:os-server-tags:show name: os_compute_api:os-server-tags:show
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/tags/{tag} path: /servers/{server_id}/tags/{tag}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: Show the NUMA topology data for a server description: Show the NUMA topology data for a server
name: compute:server:topology:index name: compute:server:topology:index
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/topology path: /servers/{server_id}/topology
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Show the NUMA topology data for a server with host NUMA ID and CP U description: Show the NUMA topology data for a server with host NUMA ID and CP U
pinning information pinning information
name: compute:server:topology:host:index name: compute:server:topology:host:index
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/topology path: /servers/{server_id}/topology
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: List all servers description: List all servers
name: os_compute_api:servers:index name: os_compute_api:servers:index
operations: operations:
- method: GET - method: GET
path: /servers path: /servers
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: List all servers with detailed information description: List all servers with detailed information
name: os_compute_api:servers:detail name: os_compute_api:servers:detail
operations: operations:
- method: GET - method: GET
path: /servers/detail path: /servers/detail
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: List all servers for all projects description: List all servers for all projects
name: os_compute_api:servers:index:get_all_tenants name: os_compute_api:servers:index:get_all_tenants
operations: operations:
- method: GET - method: GET
path: /servers path: /servers
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: List all servers with detailed information for all projects description: List all servers with detailed information for all projects
name: os_compute_api:servers:detail:get_all_tenants name: os_compute_api:servers:detail:get_all_tenants
operations: operations:
- method: GET - method: GET
path: /servers/detail path: /servers/detail
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Allow all filters when listing servers description: Allow all filters when listing servers
name: os_compute_api:servers:allow_all_filters name: os_compute_api:servers:allow_all_filters
operations: operations:
- method: GET - method: GET
path: /servers path: /servers
- method: GET - method: GET
path: /servers/detail path: /servers/detail
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: Show a server description: Show a server
name: os_compute_api:servers:show name: os_compute_api:servers:show
operations: operations:
- method: GET - method: GET
path: /servers/{server_id} path: /servers/{server_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: ' deprecated_reason: '
Policies for showing flavor extra specs in server APIs response is Policies for showing flavor extra specs in server APIs response is
seprated as new policy. This policy is deprecated only for that but seprated as new policy. This policy is deprecated only for that but
not for list extra specs and showing it in flavor API response. not for list extra specs and showing it in flavor API response.
' '
deprecated_rule: deprecated_rule:
skipping to change at line 1614 skipping to change at line 1604
- method: GET - method: GET
path: /servers/detail path: /servers/detail
- method: GET - method: GET
path: /servers/{server_id} path: /servers/{server_id}
- method: PUT - method: PUT
path: /servers/{server_id} path: /servers/{server_id}
- method: POST - method: POST
path: /servers/{server_id}/action (rebuild) path: /servers/{server_id}/action (rebuild)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: ' description: '
Show a server with additional host status information. Show a server with additional host status information.
This means host_status will be shown irrespective of status value. If showin g This means host_status will be shown irrespective of status value. If showin g
only host_status UNKNOWN is desired, use the only host_status UNKNOWN is desired, use the
``os_compute_api:servers:show:host_status:unknown-only`` policy rule. ``os_compute_api:servers:show:host_status:unknown-only`` policy rule.
skipping to change at line 1646 skipping to change at line 1636
- method: GET - method: GET
path: /servers/{server_id} path: /servers/{server_id}
- method: GET - method: GET
path: /servers/detail path: /servers/detail
- method: PUT - method: PUT
path: /servers/{server_id} path: /servers/{server_id}
- method: POST - method: POST
path: /servers/{server_id}/action (rebuild) path: /servers/{server_id}/action (rebuild)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: ' description: '
Show a server with additional host status information, only if host status i s Show a server with additional host status information, only if host status i s
UNKNOWN. UNKNOWN.
This policy rule will only be enforced when the This policy rule will only be enforced when the
``os_compute_api:servers:show:host_status`` policy rule does not pass for th e ``os_compute_api:servers:show:host_status`` policy rule does not pass for th e
skipping to change at line 1678 skipping to change at line 1668
- method: GET - method: GET
path: /servers/{server_id} path: /servers/{server_id}
- method: GET - method: GET
path: /servers/detail path: /servers/detail
- method: PUT - method: PUT
path: /servers/{server_id} path: /servers/{server_id}
- method: POST - method: POST
path: /servers/{server_id}/action (rebuild) path: /servers/{server_id}/action (rebuild)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Create a server description: Create a server
name: os_compute_api:servers:create name: os_compute_api:servers:create
operations: operations:
- method: POST - method: POST
path: /servers path: /servers
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: ' description: '
Create a server on the specified host and/or node. Create a server on the specified host and/or node.
In this case, the server is forced to launch on the specified In this case, the server is forced to launch on the specified
host and/or node by bypassing the scheduler filters unlike the host and/or node by bypassing the scheduler filters unlike the
``compute:servers:create:requested_destination`` rule. ``compute:servers:create:requested_destination`` rule.
' '
name: os_compute_api:servers:create:forced_host name: os_compute_api:servers:create:forced_host
operations: operations:
- method: POST - method: POST
path: /servers path: /servers
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: ' description: '
Create a server on the requested compute service host and/or Create a server on the requested compute service host and/or
hypervisor_hostname. hypervisor_hostname.
In this case, the requested host and/or hypervisor_hostname is In this case, the requested host and/or hypervisor_hostname is
validated by the scheduler filters unlike the validated by the scheduler filters unlike the
``os_compute_api:servers:create:forced_host`` rule. ``os_compute_api:servers:create:forced_host`` rule.
' '
name: compute:servers:create:requested_destination name: compute:servers:create:requested_destination
operations: operations:
- method: POST - method: POST
path: /servers path: /servers
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Create a server with the requested volume attached to it description: Create a server with the requested volume attached to it
name: os_compute_api:servers:create:attach_volume name: os_compute_api:servers:create:attach_volume
operations: operations:
- method: POST - method: POST
path: /servers path: /servers
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Create a server with the requested network attached to it description: Create a server with the requested network attached to it
name: os_compute_api:servers:create:attach_network name: os_compute_api:servers:create:attach_network
operations: operations:
- method: POST - method: POST
path: /servers path: /servers
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Create a server with trusted image certificate IDs description: Create a server with trusted image certificate IDs
name: os_compute_api:servers:create:trusted_certs name: os_compute_api:servers:create:trusted_certs
operations: operations:
- method: POST - method: POST
path: /servers path: /servers
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: ' description: '
This rule controls the compute API validation behavior of creating a server This rule controls the compute API validation behavior of creating a server
with a flavor that has 0 disk, indicating the server should be volume-backed . with a flavor that has 0 disk, indicating the server should be volume-backed .
For a flavor with disk=0, the root disk will be set to exactly the size of t he For a flavor with disk=0, the root disk will be set to exactly the size of t he
image used to deploy the instance. However, in this case the filter_schedule r image used to deploy the instance. However, in this case the filter_schedule r
skipping to change at line 1780 skipping to change at line 1770
https://bugs.launchpad.net/nova/+bug/1739646 for details. https://bugs.launchpad.net/nova/+bug/1739646 for details.
' '
name: os_compute_api:servers:create:zero_disk_flavor name: os_compute_api:servers:create:zero_disk_flavor
operations: operations:
- method: POST - method: POST
path: /servers path: /servers
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Attach an unshared external network to a server description: Attach an unshared external network to a server
name: network:attach_external_network name: network:attach_external_network
operations: operations:
- method: POST - method: POST
path: /servers path: /servers
- method: POST - method: POST
path: /servers/{server_id}/os-interface path: /servers/{server_id}/os-interface
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Delete a server description: Delete a server
name: os_compute_api:servers:delete name: os_compute_api:servers:delete
operations: operations:
- method: DELETE - method: DELETE
path: /servers/{server_id} path: /servers/{server_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Update a server description: Update a server
name: os_compute_api:servers:update name: os_compute_api:servers:update
operations: operations:
- method: PUT - method: PUT
path: /servers/{server_id} path: /servers/{server_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Confirm a server resize description: Confirm a server resize
name: os_compute_api:servers:confirm_resize name: os_compute_api:servers:confirm_resize
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (confirmResize) path: /servers/{server_id}/action (confirmResize)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Revert a server resize description: Revert a server resize
name: os_compute_api:servers:revert_resize name: os_compute_api:servers:revert_resize
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (revertResize) path: /servers/{server_id}/action (revertResize)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Reboot a server description: Reboot a server
name: os_compute_api:servers:reboot name: os_compute_api:servers:reboot
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (reboot) path: /servers/{server_id}/action (reboot)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Resize a server description: Resize a server
name: os_compute_api:servers:resize name: os_compute_api:servers:resize
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (resize) path: /servers/{server_id}/action (resize)
scope_types: scope_types:
- project - project
- check_str: '!' - check_str: '!'
description: 'Resize a server across cells. By default, this is disabled for a ll description: 'Resize a server across cells. By default, this is disabled for a ll
users and recommended to be tested in a deployment for admin users before op ening users and recommended to be tested in a deployment for admin users before op ening
it up to non-admin users. Resizing within a cell is the default preferred be havior it up to non-admin users. Resizing within a cell is the default preferred be havior
even if this is enabled. ' even if this is enabled. '
name: compute:servers:resize:cross_cell name: compute:servers:resize:cross_cell
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (resize) path: /servers/{server_id}/action (resize)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Rebuild a server description: Rebuild a server
name: os_compute_api:servers:rebuild name: os_compute_api:servers:rebuild
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (rebuild) path: /servers/{server_id}/action (rebuild)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Rebuild a server with trusted image certificate IDs description: Rebuild a server with trusted image certificate IDs
name: os_compute_api:servers:rebuild:trusted_certs name: os_compute_api:servers:rebuild:trusted_certs
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (rebuild) path: /servers/{server_id}/action (rebuild)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Create an image from a server description: Create an image from a server
name: os_compute_api:servers:create_image name: os_compute_api:servers:create_image
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (createImage) path: /servers/{server_id}/action (createImage)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Create an image from a volume backed server description: Create an image from a volume backed server
name: os_compute_api:servers:create_image:allow_volume_backed name: os_compute_api:servers:create_image:allow_volume_backed
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (createImage) path: /servers/{server_id}/action (createImage)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Start a server description: Start a server
name: os_compute_api:servers:start name: os_compute_api:servers:start
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (os-start) path: /servers/{server_id}/action (os-start)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Stop a server description: Stop a server
name: os_compute_api:servers:stop name: os_compute_api:servers:stop
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (os-stop) path: /servers/{server_id}/action (os-stop)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Trigger crash dump in a server description: Trigger crash dump in a server
name: os_compute_api:servers:trigger_crash_dump name: os_compute_api:servers:trigger_crash_dump
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (trigger_crash_dump) path: /servers/{server_id}/action (trigger_crash_dump)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Show details for an in-progress live migration for a given server description: Show details for an in-progress live migration for a given server
name: os_compute_api:servers:migrations:show name: os_compute_api:servers:migrations:show
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/migrations/{migration_id} path: /servers/{server_id}/migrations/{migration_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Force an in-progress live migration for a given server to complet e description: Force an in-progress live migration for a given server to complet e
name: os_compute_api:servers:migrations:force_complete name: os_compute_api:servers:migrations:force_complete
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/migrations/{migration_id}/action (force_complete) path: /servers/{server_id}/migrations/{migration_id}/action (force_complete)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Delete(Abort) an in-progress live migration description: Delete(Abort) an in-progress live migration
name: os_compute_api:servers:migrations:delete name: os_compute_api:servers:migrations:delete
operations: operations:
- method: DELETE - method: DELETE
path: /servers/{server_id}/migrations/{migration_id} path: /servers/{server_id}/migrations/{migration_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Lists in-progress live migrations for a given server description: Lists in-progress live migrations for a given server
name: os_compute_api:servers:migrations:index name: os_compute_api:servers:migrations:index
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/migrations path: /servers/{server_id}/migrations
scope_types: scope_types:
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-services name: os_compute_api:os-services
deprecated_since: null deprecated_since: null
description: List all running Compute services in a region. description: List all running Compute services in a region.
name: os_compute_api:os-services:list name: os_compute_api:os-services:list
operations: operations:
- method: GET - method: GET
path: /os-services path: /os-services
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-services name: os_compute_api:os-services
deprecated_since: null deprecated_since: null
description: Update a Compute service. description: Update a Compute service.
name: os_compute_api:os-services:update name: os_compute_api:os-services:update
operations: operations:
- method: PUT - method: PUT
path: /os-services/{service_id} path: /os-services/{service_id}
scope_types: scope_types:
- system - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_api check_str: rule:admin_api
name: os_compute_api:os-services name: os_compute_api:os-services
deprecated_since: null deprecated_since: null
description: Delete a Compute service. description: Delete a Compute service.
name: os_compute_api:os-services:delete name: os_compute_api:os-services:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-services/{service_id} path: /os-services/{service_id}
scope_types: scope_types:
- system - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Shelve server description: Shelve server
check_str: <span class="insert">rule:project_member_or_admin</span>
name: os_compute_api:os-shelve:shelve name: os_compute_api:os-shelve:shelve
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (shelve) path: /servers/{server_id}/action (shelve)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Unshelve (restore) shelved server description: Unshelve (restore) shelved server
name: os_compute_api:os-shelve:unshelve name: os_compute_api:os-shelve:unshelve
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (unshelve) path: /servers/{server_id}/action (unshelve)
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: Unshelve (restore) shelve offloaded server to a specific host
name: os_compute_api:os-shelve:unshelve_to_host
operations:
- method: POST
path: /servers/{server_id}/action (unshelve)
scope_types:
- project
- check_str: rule:context_is_admin
description: Shelf-offload (remove) server description: Shelf-offload (remove) server
name: os_compute_api:os-shelve:shelve_offload name: os_compute_api:os-shelve:shelve_offload
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (shelveOffload) path: /servers/{server_id}/action (shelveOffload)
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: Show usage statistics for a specific tenant description: Show usage statistics for a specific tenant
name: os_compute_api:os-simple-tenant-usage:show name: os_compute_api:os-simple-tenant-usage:show
operations: operations:
- method: GET - method: GET
path: /os-simple-tenant-usage/{tenant_id} path: /os-simple-tenant-usage/{tenant_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_admin_api - check_str: rule:context_is_admin
description: List per tenant usage statistics for all tenants description: List per tenant usage statistics for all tenants
name: os_compute_api:os-simple-tenant-usage:list name: os_compute_api:os-simple-tenant-usage:list
operations: operations:
- method: GET - method: GET
path: /os-simple-tenant-usage path: /os-simple-tenant-usage
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Resume suspended server description: Resume suspended server
name: os_compute_api:os-suspend-server:resume name: os_compute_api:os-suspend-server:resume
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (resume) path: /servers/{server_id}/action (resume)
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Suspend server description: Suspend server
name: os_compute_api:os-suspend-server:suspend name: os_compute_api:os-suspend-server:suspend
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/action (suspend) path: /servers/{server_id}/action (suspend)
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_api
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
skipping to change at line 2062 skipping to change at line 2060
deprecated_since: null deprecated_since: null
description: 'Show project network details. description: 'Show project network details.
This API is proxy calls to the Network service. This is deprecated.' This API is proxy calls to the Network service. This is deprecated.'
name: os_compute_api:os-tenant-networks:show name: os_compute_api:os-tenant-networks:show
operations: operations:
- method: GET - method: GET
path: /os-tenant-networks/{network_id} path: /os-tenant-networks/{network_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'List volumes. description: 'List volumes.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:list name: os_compute_api:os-volumes:list
operations: operations:
- method: GET - method: GET
path: /os-volumes path: /os-volumes
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'Create volume. description: 'Create volume.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:create name: os_compute_api:os-volumes:create
operations: operations:
- method: POST - method: POST
path: /os-volumes path: /os-volumes
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'List volumes detail. description: 'List volumes detail.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:detail name: os_compute_api:os-volumes:detail
operations: operations:
- method: GET - method: GET
path: /os-volumes/detail path: /os-volumes/detail
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'Show volume. description: 'Show volume.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:show name: os_compute_api:os-volumes:show
operations: operations:
- method: GET - method: GET
path: /os-volumes/{volume_id} path: /os-volumes/{volume_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'Delete volume. description: 'Delete volume.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:delete name: os_compute_api:os-volumes:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-volumes/{volume_id} path: /os-volumes/{volume_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'List snapshots. description: 'List snapshots.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:snapshots:list name: os_compute_api:os-volumes:snapshots:list
operations: operations:
- method: GET - method: GET
path: /os-snapshots path: /os-snapshots
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'Create snapshots. description: 'Create snapshots.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:snapshots:create name: os_compute_api:os-volumes:snapshots:create
operations: operations:
- method: POST - method: POST
path: /os-snapshots path: /os-snapshots
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'List snapshots details. description: 'List snapshots details.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:snapshots:detail name: os_compute_api:os-volumes:snapshots:detail
operations: operations:
- method: GET - method: GET
path: /os-snapshots/detail path: /os-snapshots/detail
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'Show snapshot. description: 'Show snapshot.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:snapshots:show name: os_compute_api:os-volumes:snapshots:show
operations: operations:
- method: GET - method: GET
path: /os-snapshots/{snapshot_id} path: /os-snapshots/{snapshot_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
deprecated_reason: null deprecated_reason: null
deprecated_rule: deprecated_rule:
check_str: rule:admin_or_owner check_str: rule:admin_or_owner
name: os_compute_api:os-volumes name: os_compute_api:os-volumes
deprecated_since: null deprecated_since: null
description: 'Delete snapshot. description: 'Delete snapshot.
This API is a proxy call to the Volume service. It is deprecated.' This API is a proxy call to the Volume service. It is deprecated.'
name: os_compute_api:os-volumes:snapshots:delete name: os_compute_api:os-volumes:snapshots:delete
operations: operations:
- method: DELETE - method: DELETE
path: /os-snapshots/{snapshot_id} path: /os-snapshots/{snapshot_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: List volume attachments for an instance description: List volume attachments for an instance
name: os_compute_api:os-volumes-attachments:index name: os_compute_api:os-volumes-attachments:index
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-volume_attachments path: /servers/{server_id}/os-volume_attachments
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Attach a volume to an instance description: Attach a volume to an instance
name: os_compute_api:os-volumes-attachments:create name: os_compute_api:os-volumes-attachments:create
operations: operations:
- method: POST - method: POST
path: /servers/{server_id}/os-volume_attachments path: /servers/{server_id}/os-volume_attachments
scope_types: scope_types:
- project - project
- check_str: rule:project_reader_api - check_str: rule:project_reader_or_admin
description: Show details of a volume attachment description: Show details of a volume attachment
name: os_compute_api:os-volumes-attachments:show name: os_compute_api:os-volumes-attachments:show
operations: operations:
- method: GET - method: GET
path: /servers/{server_id}/os-volume_attachments/{volume_id} path: /servers/{server_id}/os-volume_attachments/{volume_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: 'Update a volume attachment. description: 'Update a volume attachment.
New ''update'' policy about ''swap + update'' request (which is possible New ''update'' policy about ''swap + update'' request (which is possible
only >2.85) only <swap policy> is checked. We expect <swap policy> to be only >2.85) only <swap policy> is checked. We expect <swap policy> to be
always superset of this policy permission. always superset of this policy permission.
' '
name: os_compute_api:os-volumes-attachments:update name: os_compute_api:os-volumes-attachments:update
skipping to change at line 2260 skipping to change at line 2258
scope_types: scope_types:
- project - project
- check_str: rule:context_is_admin - check_str: rule:context_is_admin
description: Update a volume attachment with a different volumeId description: Update a volume attachment with a different volumeId
name: os_compute_api:os-volumes-attachments:swap name: os_compute_api:os-volumes-attachments:swap
operations: operations:
- method: PUT - method: PUT
path: /servers/{server_id}/os-volume_attachments/{volume_id} path: /servers/{server_id}/os-volume_attachments/{volume_id}
scope_types: scope_types:
- project - project
- check_str: rule:project_member_api - check_str: rule:project_member_or_admin
description: Detach a volume from an instance description: Detach a volume from an instance
name: os_compute_api:os-volumes-attachments:delete name: os_compute_api:os-volumes-attachments:delete
operations: operations:
- method: DELETE - method: DELETE
path: /servers/{server_id}/os-volume_attachments/{volume_id} path: /servers/{server_id}/os-volume_attachments/{volume_id}
scope_types: scope_types:
- project - project
 End of changes. 188 change blocks. 
201 lines changed or deleted 194 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)