Updating policy for neutron and nova to include role: baremetaluser

[claudia-lola]

Updating policy to allow role: baremetaluser to map baremetal instances to specific ironic nodes (this is desirable so that the instance name = ironic node name, making debugging less confusing)

[gemini-code-assist]

Code Review

This pull request updates Neutron and Nova policies to grant the baremetaluser role additional permissions, aligning with the goal of simplifying baremetal instance management. The changes in the Nova policy file are clear and correct. For the Neutron policy file, I've suggested a minor improvement to enhance readability and prevent potential issues by explicitly grouping and conditions with parentheses. Overall, the changes look good and address the intended purpose.

[gemini-code-assist]

For improved readability and to avoid any ambiguity with operator precedence, it's a good practice to wrap and expressions in parentheses. While and has higher precedence than or in OpenStack policy rules, explicit grouping makes the policy easier to understand and maintain.

"create_port:fixed_ips:ip_address": "(rule:admin_only) or (rule:service_api) or (role:manager and project_id:%(project_id)s) or (role:member and rule:network_owner) or role:baremetaluser"
"create_port:mac_address": "(rule:admin_only) or (rule:service_api) or (role:manager and project_id:%(project_id)s) or (role:member and rule:network_owner) or role:baremetaluser"