neutron

[rfe] add rbac for security groups

Bug #1817119 reported by Doug Wiegley
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Wishlist
Doug Wiegley

Bug Description

This change started as a small performance fix, allowing hundreds of tenants to share one 3000+ rule group, instead of having hundreds of them.

Adds "security_group" as a supported RBAC type:

Neutron-lib:
https://review.openstack.org/635313

Neutron:
https://review.openstack.org/635311

Tempest tests:
https://review.openstack.org/635312

Client:
https://review.openstack.org/636760

Tags: rfe-approved
OpenStack Infra (hudson-openstack)
Changed in neutron:
status: New → In Progress
Revision history for this message
Miguel Lavalle (minsel) wrote :

This makes sense to me. Let's discuss it in the drivers meeting

tags: added: rfe-triaged
removed: rfe
Changed in neutron:
importance: Undecided → Wishlist
Revision history for this message
Miguel Lavalle (minsel) wrote :

This RFE was discussed and approved by the drivers team

tags: added: rfe-approved
removed: rfe-triaged
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron-lib (master)

Reviewed: https://review.openstack.org/635313
Committed: https://git.openstack.org/cgit/openstack/neutron-lib/commit/?id=c0a6d727c85b92ed22f5eda434f4f6576177180d
Submitter: Zuul
Branch: master

commit c0a6d727c85b92ed22f5eda434f4f6576177180d
Author: Doug Wiegley <email address hidden>
Date: Wed Feb 6 13:45:43 2019 -0700

    Add security-group as parameter to RBAC api

    Partial-Bug: #1817119
    Change-Id: I88fe8d3fd5ed6a2dafe3602182d595b8875bb15b

OpenStack Infra (hudson-openstack)
Changed in neutron:
assignee: Doug Wiegley (dougwig) → Miguel Lavalle (minsel)
Miguel Lavalle (minsel)
Changed in neutron:
assignee: Miguel Lavalle (minsel) → Doug Wiegley (dougwig)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.openstack.org/635311
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=5e0fc3d2da6fbc5154debcc4a98bb8b6419326f9
Submitter: Zuul
Branch: master

commit 5e0fc3d2da6fbc5154debcc4a98bb8b6419326f9
Author: Doug Wiegley <email address hidden>
Date: Wed Feb 6 14:05:26 2019 -0700

    Allow sharing of security groups via RBAC mechanism

    Neutron-lib api ref: https://review.openstack.org/#/c/635313/
    Tempest tests: https://review.openstack.org/#/c/635312/
    Client: https://review.openstack.org/#/c/635428/

    Partial-Bug: #1817119
    Depends-On: https://review.openstack.org/635313
    Change-Id: I974b0a603b6ca75cf080fb7b0751c7fb87df8443

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron-tempest-plugin (master)

Reviewed: https://review.openstack.org/635312
Committed: https://git.openstack.org/cgit/openstack/neutron-tempest-plugin/commit/?id=5b85ad8c3f2f13003143b0810679466341dd95bc
Submitter: Zuul
Branch: master

commit 5b85ad8c3f2f13003143b0810679466341dd95bc
Author: Doug Wiegley <email address hidden>
Date: Wed Feb 6 13:51:03 2019 -0700

    Add tempest api tests for security groups RBAC

    Partial-Bug: #1817119
    Depends-On: https://review.openstack.org/635311
    Change-Id: I806d0c1763a0abc4f07a7c85922949b056ad78d8

Slawek Kaplonski (slaweq)
Changed in neutron:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.