Glance needs a config option to limit the number of tags

[Brian Rosmaita]

Glance v2 allows users to put "tags" on an image. There is no limit to the number of tags.

This is a (linear) DoS attack vector.

The fix for this should be done similar to the fix for https://bugs.launchpad.net/glance/+bug/1251518 to keep configuration consistent.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/58056

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/58056
Committed: http://github.com/openstack/glance/commit/4e7d9cdaf9e6d1c260a61f232e4ec0e21819ac0e
Submitter: Jenkins
Branch: master

commit 4e7d9cdaf9e6d1c260a61f232e4ec0e21819ac0e
Author: Alex Meade <email address hidden>
Date: Fri Nov 22 15:54:06 2013 +0000

    Add config option to limit image tags

    This patch adds the image_tag_quota config option. This allows a deployer
    to limit the number of image tags allowed on an image for v2. The default value
    is 128. If an image is somehow over the limit, tags can still be removed but no
    more may be added.

    Fixes bug 1252337
    docImpact

    Change-Id: I2036e2a88601d7c5aa85fad32d90fe0ed30b84c8