a644b3c62b
According to the neutron API-REF [1] port's "binding:profile" field is intended to be used for the "machine-machine communication for compute services like Nova, Ironic or Zun to pass information to a Neutron back-end." so it should be by allowed only for the users with the SERVICE role granted, not even for ADMIN. This patch updates that policies to be available only for SERVICE role when new, secure RBAC policies are enabled. Additionally this patch updates some policies for create, update and get port APIs to make them all work in the same way and allow them for the SERVICE users too. Finally this new policy for create/update_port:binding:profile have to be overwritten in the fullstack tests to be allowed also for admin user. It is done by adding custom policy file for the fullstack tests only. [1] https://docs.openstack.org/api-ref/network/v2/index.html#create-port Closes-Bug: #2052937 Change-Id: I5c0094ff21439fe8977cfc623789a09067e6a895 |
||
|---|---|---|
| api-ref | ||
| devstack | ||
| doc | ||
| etc | ||
| neutron | ||
| playbooks | ||
| rally-jobs | ||
| releasenotes | ||
| roles | ||
| tools | ||
| vagrant/ovn | ||
| zuul.d | ||
| .coveragerc | ||
| .gitignore | ||
| .gitreview | ||
| .mailmap | ||
| .pylintrc | ||
| .stestr.conf | ||
| CONTRIBUTING.rst | ||
| HACKING.rst | ||
| LICENSE | ||
| README.rst | ||
| TESTING.rst | ||
| bindep.txt | ||
| plugin.spec | ||
| requirements.txt | ||
| setup.cfg | ||
| setup.py | ||
| test-requirements.txt | ||
| tox.ini | ||
README.rst
OpenStack Neutron
Neutron is an OpenStack project to provide "network connectivity as a service" between interface devices (e.g., vNICs) managed by other OpenStack services (e.g., Nova).
To learn more about neutron:
- Documentation: https://docs.openstack.org/neutron/latest/
- Features: https://specs.openstack.org/openstack/neutron-specs
- Defects: https://launchpad.net/neutron
- Release notes: https://docs.openstack.org/releasenotes/neutron/index.html
- Source: https://opendev.org/openstack/neutron
If you would like to contribute to Neutron, please read the file CONTRIBUTING.rst or see the Neutron contributor guide:
https://docs.openstack.org/neutron/latest/contributor/contributing.html
Get in touch via email. Use [Neutron] in your subject.