From c1fccc6537b6dc1a07ee38fbcf6a76a147e095b8 Mon Sep 17 00:00:00 2001 From: Vincent Cojot Date: Wed, 19 Apr 2017 01:29:53 +0530 Subject: Update README.md --- README.md | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 3647257..633cd55 100644 --- a/README.md +++ b/README.md @@ -12,4 +12,20 @@ This project includes several areas: both the undercloud and overcloud. An ASCII version of the MOP is provided in this repository. -This work on the 'readonly' was a request of the VZW HQ Planning group. \ No newline at end of file +This work on the 'readonly' was a request of the VZW HQ Planning group. + +Here is how it works: + +On the undercloud, as the 'stack' user perform the following steps: + +1) source stackrc +2) git clone https://gitlab.cee.redhat.com/vcojot/OSP-Readonly-Policies/tree/master +3) ./policydir/files/push_readonly_policies_to_overcloud.sh + +(this will auto-detect the controllers and push the appropriate policies) + +To restrict a user, then simply do add the 'readonly' role to the user, do a: +openstack role add --project --user readonly + +To lift the restrictions and re-enable modifications to the overcloud, do a: +openstack role remove --project --user readonly -- cgit