adding comment to policy files to

claudia-lola · claudia-lola · commit 0897b0b85394 · 2025-11-21T13:04:00.000Z
note commented out policy is default.
diff --git a/etc/kayobe/environments/baremetal-policy/kolla/config/neutron/policy.yml b/etc/kayobe/environments/baremetal-policy/kolla/config/neutron/policy.yml
@@ -1,3 +1,4 @@
+# Comments show default policy for neutron.
 #"create_port:fixed_ips:ip_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner"
 "create_port:fixed_ips:ip_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner or role:baremetaluser"
 #"create_port:mac_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner"
diff --git a/etc/kayobe/environments/baremetal-policy/kolla/config/nova/policy.yml b/etc/kayobe/environments/baremetal-policy/kolla/config/nova/policy.yml
@@ -1,3 +1,4 @@
+# Comments show default policy for nova.
 #"os_compute_api:servers:create:forced_host": "rule:context_is_admin"
 "os_compute_api:servers:create:forced_host": "rule:context_is_admin or role:baremetaluser"
 #"compute:servers:create:requested_destination": "rule:context_is_admin"

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+# Comments show default policy for neutron.`
`1`	`2`	`#"create_port:fixed_ips:ip_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner"`
`2`	`3`	`"create_port:fixed_ips:ip_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner or role:baremetaluser"`
`3`	`4`	`#"create_port:mac_address": "(rule:admin_only) or (rule:service_api) or role:manager and project_id:%(project_id)s or role:member and rule:network_owner"`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+# Comments show default policy for nova.`
`1`	`2`	`#"os_compute_api:servers:create:forced_host": "rule:context_is_admin"`
`2`	`3`	`"os_compute_api:servers:create:forced_host": "rule:context_is_admin or role:baremetaluser"`
`3`	`4`	`#"compute:servers:create:requested_destination": "rule:context_is_admin"`