oslopolicy-list-redundant¶
Synopsis¶
oslopolicy-list-redundant [-h] [--config-dir DIR] [--config-file PATH]
[--namespace NAMESPACE]
Description¶
The oslopolicy-list-redundant tool is useful for detecting policies that
are specified in policy files that are the same as the defaults provided by the
service. Operators can use this tool to find policies that they can remove from
their policy files, making maintenance easier.
This tool assumes a policy file containing overrides exists and is specified through configuration.
Options¶
-
-h,--help¶ Show help message and exit.
-
--config-dirDIR¶ Path to a config directory to pull
*.conffiles from. This file set is sorted, so as to provide a predictable parse order if individual options are overridden. The set is parsed after the file(s) specified via previous--config-file, arguments hence overridden options in the directory take precedence.This option must be set from the command-line.
-
--config-filePATH¶ Path to a config file to use. Multiple config files can be specified, with values in later files taking precedence. Defaults to None. This option must be set from the command-line.
-
--namespaceNAMESPACE¶ Option namespace under “oslo.policy.enforcer” in which to look for a
policy.Enforcer.
Examples¶
To list redundant default policies:
oslopolicy-list-redundant --namespace keystone --config-dir /etc/keystone
For more information regarding the options supported by this tool:
oslopolicy-list-redundant --help
See Also¶
oslopolicy-sample-generator, oslopolicy-policy-generator, oslopolicy-checker