/opt/chainguard/openstack-designate-2025.2/bin/oslopolicy-checker

usage: oslopolicy-checker [-h] [--access ACCESS] [--config-dir DIR] [--config-file PATH]
                          [--enforcer_config ENFORCER_CONFIG] [--is_admin] [--nois_admin]
                          [--policy POLICY] [--rule RULE] [--shell_completion SHELL_COMPLETION]
                          [--target TARGET]

options:
  -h, --help            show this help message and exit
  --access ACCESS       path to a file containing OpenStack Identity API access info in JSON
                        format.
  --config-dir DIR      Path to a config directory to pull `*.conf` files from. This file set is
                        sorted, so as to provide a predictable parse order if individual options
                        are over-ridden. The set is parsed after the file(s) specified via
                        previous --config-file, arguments hence over-ridden options in the
                        directory take precedence. This option must be set from the command-line.
  --config-file PATH    Path to a config file to use. Multiple config files can be specified, with
                        values in later files taking precedence. Defaults to None. This option
                        must be set from the command-line.
  --enforcer_config ENFORCER_CONFIG
                        configuration file for the oslopolicy-checker enforcer
  --is_admin            set is_admin=True on the credentials used for the evaluation.
  --nois_admin          The inverse of --is_admin
  --policy POLICY       path to a policy file.
  --rule RULE           rule to test.
  --shell_completion SHELL_COMPLETION
                        Display a shell completion script Allowed values: bash, zsh
  --target TARGET       path to a file containing custom target info in JSON format. This will be
                        used to evaluate the policy with.