neutron http policy check broken
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
oslo-incubator |
Fix Released
|
Medium
|
Maruti Kamat |
Bug Description
Neutron in theory should support HttpCheck as a policy element:
https:/
So I ran a little http server on localhost and added this line to the policy.json file:
"create_
It turns out the http post never made it to the http server.
Here, the code is trying to populate a json string with variable target:
https:/
And in execution, we have:
2013-10-01 14:22:32.092 ERROR neutron.
creds={'user_id': u'0495af214c2c4
url=http://
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 ERROR neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
2013-10-01 14:22:32.092 TRACE neutron.
Basically, the target variable looks like this when converted to string:
{'router:external': <object object at 0x7fc3ae693170>, u'name': u'net1', 'provider:
I wonder if we should change the action to the url parameter and post the target as the post body.
tags: | removed: neutron poligy |
Changed in neutron: | |
status: | New → Invalid |
description: | updated |
Changed in neutron: | |
status: | Invalid → New |
Changed in neutron: | |
importance: | Undecided → Wishlist |
status: | New → Triaged |
tags: | added: api neutron-core |
Changed in neutron: | |
milestone: | none → next |
Changed in neutron: | |
assignee: | nobody → Maruti Kamat (marutik) |
Changed in neutron: | |
status: | Triaged → In Progress |
Changed in oslo-incubator: | |
assignee: | nobody → Maruti Kamat (marutik) |
Changed in oslo-incubator: | |
status: | New → In Progress |
importance: | Undecided → Medium |
Changed in oslo-incubator: | |
milestone: | none → kilo-1 |
status: | Fix Committed → Fix Released |
Changed in oslo-incubator: | |
milestone: | kilo-1 → 2015.1.0 |
no longer affects: | neutron |
I assume you have tested the same policy against other projects and that worked fine.
In which case it might be necessary to refresh oslo policy code in neutron.