Add support for policy directories per service

This change introduces the POLICY_DIRS setting which adds the ability
to define multiple policy directories per service.

Blueprint: policy-dirs
Change-Id: Ie42f1aa68539b7388661ddfe2c265255cd574736

1 files changed, 17 insertions, 0 deletions

diff --git a/doc/source/configuration/index.rst b/doc/source/configuration/index.rst
index 5b581b0..06c300b 100644
--- a/doc/source/configuration/index.rst
+++ b/doc/source/configuration/index.rst
@@ -222,6 +222,23 @@ will deny the access and users must contact an admin to change their password.
 Setting this value to ``N`` days means the user will be alerted when the
 password expires in less than ``N+1`` days. ``-1`` disables the feature.
 
+``POLICY_DIRS``
+----------------
+
+Default: ``{}``
+
+Specifies a list of policy directories per service types. The directories
+are relative to ``POLICY_FILES_PATH``. Services whose additional policies
+are defined here must be defined in ``POLICY_FILES`` too. Otherwise,
+additional policies specified in ``POLICY_DIRS`` are not loaded.
+
+Example::
+
+    POLICY_DIRS = {
+        'identity': 'keystone_policy.d',
+        'compute': 'nova_policy.d'
+    }
+
 ``POLICY_FILES``
 ----------------