From 6ca443888e789f87cd833414cc9223a67686fa87 Mon Sep 17 00:00:00 2001 From: Airat Arifullin Date: Thu, 22 Feb 2024 12:41:55 +0300 Subject: [PATCH] [#64] adm: Create default Allow policy for root namespace Signed-off-by: Airat Arifullin --- Makefile | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Makefile b/Makefile index 4caa292..051aa7d 100644 --- a/Makefile +++ b/Makefile @@ -76,6 +76,10 @@ up/bootstrap: get vendor/hosts @$(foreach SVC, $(START_BOOTSTRAP), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d)) @source ./bin/helper.sh @./vendor/frostfs-adm --config frostfs-adm.yml morph init --contracts vendor/contracts + echo "Set rule chain to policy contract" + @./vendor/frostfs-adm --config frostfs-adm.yml morph \ + ape add-rule-chain --target-type namespace --target-name "" \ + --rule 'allow Container.* *' --chain-id "allow_container_ops" @for f in ./services/storage/wallet*.json; do \ echo "Transfer GAS to wallet $${f}" \ && ./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 \ -- 2.45.2