[rfe] add rbac for security groups

Bug #1817119 reported by Doug Wiegley on 2019-02-21
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
neutron
Wishlist
Doug Wiegley

Bug Description

This change started as a small performance fix, allowing hundreds of tenants to share one 3000+ rule group, instead of having hundreds of them.

Adds "security_group" as a supported RBAC type:

Neutron-lib:
https://review.openstack.org/635313

Neutron:
https://review.openstack.org/635311

Tempest tests:
https://review.openstack.org/635312

Client:
https://review.openstack.org/636760

Changed in neutron:
status: New → In Progress
Miguel Lavalle (minsel) wrote :

This makes sense to me. Let's discuss it in the drivers meeting

tags: added: rfe-triaged
removed: rfe
Changed in neutron:
importance: Undecided → Wishlist
Miguel Lavalle (minsel) wrote :

This RFE was discussed and approved by the drivers team

tags: added: rfe-approved
removed: rfe-triaged

Reviewed: https://review.openstack.org/635313
Committed: https://git.openstack.org/cgit/openstack/neutron-lib/commit/?id=c0a6d727c85b92ed22f5eda434f4f6576177180d
Submitter: Zuul
Branch: master

commit c0a6d727c85b92ed22f5eda434f4f6576177180d
Author: Doug Wiegley <email address hidden>
Date: Wed Feb 6 13:45:43 2019 -0700

    Add security-group as parameter to RBAC api

    Partial-Bug: #1817119
    Change-Id: I88fe8d3fd5ed6a2dafe3602182d595b8875bb15b

Changed in neutron:
assignee: Doug Wiegley (dougwig) → Miguel Lavalle (minsel)
Miguel Lavalle (minsel) on 2019-03-10
Changed in neutron:
assignee: Miguel Lavalle (minsel) → Doug Wiegley (dougwig)

Reviewed: https://review.openstack.org/635311
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=5e0fc3d2da6fbc5154debcc4a98bb8b6419326f9
Submitter: Zuul
Branch: master

commit 5e0fc3d2da6fbc5154debcc4a98bb8b6419326f9
Author: Doug Wiegley <email address hidden>
Date: Wed Feb 6 14:05:26 2019 -0700

    Allow sharing of security groups via RBAC mechanism

    Neutron-lib api ref: https://review.openstack.org/#/c/635313/
    Tempest tests: https://review.openstack.org/#/c/635312/
    Client: https://review.openstack.org/#/c/635428/

    Partial-Bug: #1817119
    Depends-On: https://review.openstack.org/635313
    Change-Id: I974b0a603b6ca75cf080fb7b0751c7fb87df8443

Reviewed: https://review.openstack.org/635312
Committed: https://git.openstack.org/cgit/openstack/neutron-tempest-plugin/commit/?id=5b85ad8c3f2f13003143b0810679466341dd95bc
Submitter: Zuul
Branch: master

commit 5b85ad8c3f2f13003143b0810679466341dd95bc
Author: Doug Wiegley <email address hidden>
Date: Wed Feb 6 13:51:03 2019 -0700

    Add tempest api tests for security groups RBAC

    Partial-Bug: #1817119
    Depends-On: https://review.openstack.org/635311
    Change-Id: I806d0c1763a0abc4f07a7c85922949b056ad78d8

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers