<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div>There's currently no built in automation for Horizon to pull the policy file, so you'll have to update it yourself on the Horizon instances.</div><div><br></div><div>Thanks,</div><div>Brad</div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Michael Gale <<a href="mailto:gale.michael@gmail.com">gale.michael@gmail.com</a>><br><span style="font-weight:bold">Date: </span> Wednesday, March 23, 2016 at 2:31 PM<br><span style="font-weight:bold">To: </span> "<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>" <<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br><span style="font-weight:bold">Subject: </span> [Openstack] OpenStack OSAD and Horizon policy updates<br></div><div><br></div><div dir="ltr">Hello,<div><br></div><div> I have a quick question around Horizon policy files and corresponding service policy files.
</div><div><br></div><div>I am using OpenStack OSAD (<a href="http://docs.openstack.org/developer/openstack-ansible/liberty/install-guide/configure-openstack.html">http://docs.openstack.org/developer/openstack-ansible/liberty/install-guide/configure-openstack.html</a>) to deploy an AIO setup from 12.0.8</div><div><br></div><div>I am using keystone_policy_overrides in my user_variables.py to place a copy of policy.v3cloudsample.conf on the keystone instances.</div><div><br></div><div>However there does not seem to be a way to provide Horizon with an updated policy file :( </div><div><br></div><div>Will Horizon pull the policy from the keystone service or do I still need to update the keystone_policy.json on the Horizon instances?</div><div><br></div><div>Thanks</div><div>Michael</div></div></span></body></html>