[2.5] Pods are not filter based on RBAC resource pool roles
Bug #1807020 reported by
Blake Rouse
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| MAAS |
Fix Released
|
High
|
Blake Rouse | ||
Bug Description
Currently the pods are not being filtered based on the resource pool that the pod belongs.
Related branches
~blake-rouse/maas:fix-pod-rbac
- Alberto Donato (community): Approve
- MAAS Lander: Approve
-
Diff: 1060 lines (+594/-33)16 files modifiedsrc/maasserver/api/machines.py (+6/-2)
src/maasserver/api/pods.py (+14/-9)
src/maasserver/api/tests/test_machines.py (+46/-1)
src/maasserver/models/__init__.py (+62/-8)
src/maasserver/models/bmc.py (+66/-1)
src/maasserver/models/resourcepool.py (+4/-2)
src/maasserver/models/tests/test_bmc.py (+114/-1)
src/maasserver/models/tests/test_resourcepool.py (+11/-0)
src/maasserver/permissions.py (+14/-0)
src/maasserver/testing/api.py (+12/-0)
src/maasserver/testing/fixtures.py (+7/-0)
src/maasserver/tests/test_auth.py (+163/-0)
src/maasserver/websockets/handlers/pod.py (+61/-9)
src/maasserver/websockets/handlers/tests/test_pod.py (+8/-0)
src/maasserver/websockets/handlers/tests/test_user.py (+3/-0)
src/maasserver/websockets/handlers/user.py (+3/-0)
Revision history for this message
| Andres Rodriguez (andreserl) wrote | #1 |
Revision history for this message
| Blake Rouse (blake-rouse) wrote | #2 |
| Changed in maas: | |
| status: | In Progress → Fix Committed |
| Changed in maas: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
How do we want this to work? We have a few options:
1. A pod only serves 1 resource pool.
2. A pod serves multiple resource pools.
3. An admin can pre-create a VM from a pod and assign it to a resource pool, but lot allow users to get anything from it directly from the pod.