RBAC for Firewall Policies

Bug #1664814 reported by Reedip
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
neutron
Won't Fix
Wishlist
Unassigned

Bug Description

High Level Description:
Currently, Firewall Policies support a Publicly shared scope , which allows all tenants to view and use the shared policy.

Use Case:
However, as a use case, Cloud Admins may want to separate policies so that some of the policies are visible to all tenants, while another set of the policies are visible to a select group of tenants.

The above scenario requires extending RBAC to Firewalls.

Changed in neutron:
assignee: nobody → Reedip (reedip-banerjee)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron-fwaas (master)

Fix proposed to branch: master
Review: https://review.openstack.org/491704

Changed in neutron:
status: New → In Progress
Revision history for this message
Armando Migliaccio (armando-migliaccio) wrote : auto-abandon-script

This bug has had a related patch abandoned and has been automatically un-assigned due to inactivity. Please re-assign yourself if you are continuing work or adjust the state as appropriate if it is no longer valid.

Changed in neutron:
assignee: Reedip (reedip-banerjee) → nobody
status: In Progress → New
tags: added: timeout-abandon
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on neutron-fwaas (master)

Change abandoned by Armando Migliaccio (<email address hidden>) on branch: master
Review: https://review.openstack.org/491704
Reason: This review is > 4 weeks without comment, and failed Jenkins the last time it was checked. We are abandoning this for now. Feel free to reactivate the review by pressing the restore button and leaving a 'recheck' comment to get fresh test results.

tags: added: rfe
removed: timeout-abandon
Changed in neutron:
importance: Undecided → Wishlist
Revision history for this message
Miguel Lavalle (minsel) wrote :

We should have someone from the FWaaS team weigh in.

@Reedip,

Still interested in pursuing this RFE?

Changed in neutron:
assignee: nobody → Reedip (reedip-banerjee)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Change abandoned by Reedip (<email address hidden>) on branch: master
Review: https://review.opendev.org/491704
Reason: Not able to work on it currently, open to others to continue

Revision history for this message
Slawek Kaplonski (slaweq) wrote :

Regarding to current status of neutron-fwaas project and that there is (almost) no upstream fwaas team anymore, I'm marking this as won't fix for now as probably nobody will step in to work on it.

Changed in neutron:
assignee: Reedip (reedip-banerjee) → nobody
status: In Progress → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.