add zero quota policy to powermax (#174)

dell · Feb 22, 2023 · 18af78c · 18af78c
1 parent f55c59d
commit 18af78c
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/operatorconfig/moduleconfig/authorization/v1.6.0/policies.yaml b/operatorconfig/moduleconfig/authorization/v1.6.0/policies.yaml
@@ -181,6 +181,18 @@ data:
       common.roles[v].system_types[input.systemtype].system_ids[input.storagesystemid].pool_quotas[input.storagepool] >= to_number(input.request.volumeSizeInKb)
       y := to_number(common.roles[v].system_types[input.systemtype].system_ids[input.storagesystemid].pool_quotas[input.storagepool])
     }
+
+    permitted_roles[v] = y {
+      claimed_roles := split(input.claims.roles, ",")
+
+      some i
+      a := claimed_roles[i]
+      common.roles[a]
+
+      v := claimed_roles[i]
+      common.roles[v].system_types[input.systemtype].system_ids[input.storagesystemid].pool_quotas[input.storagepool] == 0
+      y := to_number(common.roles[v].system_types[input.systemtype].system_ids[input.storagesystemid].pool_quotas[input.storagepool])
+    }
 ---
 apiVersion: v1
 kind: ConfigMap