Juniper Openstack

rbac: system objects created by api-server as part of dbe_create needs to have system-tenant ownership

  1. Series r3.0
  2. Bug #1528796
Bug #1528796 reported by Senthilnathan Murugappan
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R3.0
Fix Committed
Critical
Deepinder Setia
Juniper Openstack r3.0.3.0
Trunk
Fix Committed
Critical
Deepinder Setia
Juniper Openstack r3.2.0.0-fcs "r3.2.0.0"

Bug Description

We create RoutingInstance as part of post_dbe_create if the VN is created via neutron in which case the tenant owner of the created object is set to null which should ideally be the contrailAdmin tenant since its a system created object.

Tags: config rbac
Revision history for this message
Senthilnathan Murugappan (msenthil) wrote :

Also observed that the VM and VMI objects also doesnt have the tenant owner set

Senthilnathan Murugappan (msenthil)
tags: added: blocker
OpenContrail Admin (ci-admin-f)
tags: removed: blocker
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/20787
Submitter: Deepinder Setia (<email address hidden>)

Nagabhushana R (bhushana)
no longer affects: juniperopenstack/r3.0
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/20787
Committed: http://github.org/Juniper/contrail-controller/commit/f1335051ef8f9845d2345e6c1176a9a8f1627881
Submitter: Zuul
Branch: master

commit f1335051ef8f9845d2345e6c1176a9a8f1627881
Author: Deepinder Setia <email address hidden>
Date: Tue May 31 10:39:54 2016 -0700

Do no override default owner unless tenant ID is present in incoming token.

Change-Id: Iac495978ec5a50bd0dc9340699e3b14ffb4680fd
Closes-Bug: #1528796

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R3.0

Review in progress for https://review.opencontrail.org/23335
Submitter: Deepinder Setia (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/23335
Committed: http://github.org/Juniper/contrail-controller/commit/c6acb5fdefe90c6b6b0a23bee4ec15d53f35dc5a
Submitter: Zuul
Branch: R3.0

commit c6acb5fdefe90c6b6b0a23bee4ec15d53f35dc5a
Author: Deepinder Setia <email address hidden>
Date: Tue May 31 10:39:54 2016 -0700

Do no override default owner unless tenant ID is present in incoming token.

Closes-Bug: #1528796

Conflicts:
 src/config/api-server/vnc_cfg_api_server.py

Change-Id: Ib1d8ab65e97e6081b28bff3bf932a8c755c378ed

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/23707
Submitter: Deepinder Setia (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/23707
Committed: http://github.org/Juniper/contrail-controller/commit/669474c9817b89f7783bfa88356ea02ec072ef12
Submitter: Zuul
Branch: master

commit 669474c9817b89f7783bfa88356ea02ec072ef12
Author: Deepinder Setia <email address hidden>
Date: Tue May 31 10:39:54 2016 -0700

Do no override default owner unless tenant ID is present in incoming token.

Closes-Bug: #1528796

Change-Id: Ib1d8ab65e97e6081b28bff3bf932a8c755c378ed

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.