[rfe] Add RBAC for subnet pools

[Igor Malinovskiy]

Currently, RBAC for subnet pool is missing in Neutron but it will valuable feature for cloud administrators.

This feature depends on RBAC support for AS.
When SNP is shared via RBAC policy to a target project, we should check that the target project has permissions to appropriate AS.

Adds "subnetpool" as a supported RBAC type:

Neutron-lib:
https://review.opendev.org/#/c/705998

Neutron:
WIP

Tempest tests:
TBD

Client:
TBD

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/705998

[Lajos Katona (lajos-katona)]

This should be a topic for the driver's meeting as this is an rfe

[Slawek Kaplonski (slaweq)]

Hi,

I will add this RFE to the agenda of our next drivers meeting: http://eavesdrop.openstack.org/#Neutron_drivers_Meeting - so it would be great if You could join there if there would be any additional questions. But RFE should be discussed even if You will not be able to attend this meeting.

[Akihiro Motoki (amotoki)]

RBAC for address scope is proposed in bug 1862968.
Address scope and subnet pool are related things, so I think both are worth discussing together.

[Slawek Kaplonski (slaweq)]

On the drivers meeting we decided to approve this RFE together with https://bugs.launchpad.net/neutron/+bug/1862968
We will likely see proposed spec which will describe in more details relationship between those 2 RFEs before going with implementation of it.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/710755

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/705998
Committed: https://git.openstack.org/cgit/openstack/neutron-lib/commit/?id=ae5eb24c78bddb0b7be89b47b6ca49965f20ff73
Submitter: Zuul
Branch: master

commit ae5eb24c78bddb0b7be89b47b6ca49965f20ff73
Author: Igor Malinovskiy <email address hidden>
Date: Wed Feb 5 17:50:47 2020 +0200

    Introduce rbac-subnetpool api extension

    This extension makes it possible to add subnetpools to RBAC policies.

    Change-Id: I1238430c40fe7132bad4eea573a638c0c47a5e78
    Depends-On: https://review.openstack.org/707407
    Partial-Bug: #1862032

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/711656

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/710755
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=56b971bb42c69ea6865bed9b5fbc4ff372af0027
Submitter: Zuul
Branch: master

commit 56b971bb42c69ea6865bed9b5fbc4ff372af0027
Author: Igor Malinovskiy <email address hidden>
Date: Mon Feb 10 17:20:36 2020 +0200

    Allow sharing of subnet pools via RBAC mechanism

    Neutron-lib api ref: https://review.opendev.org/705998/
    Client: https://review.opendev.org/#/c/712705/
    Tempest tests: https://review.opendev.org/#/c/711656/

    Change-Id: I1d6125513cd8cb088b84c92497866f78955019a9
    Partial-Bug: #1862032
    Depends-On: https://review.opendev.org/709122

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/711656
Committed: https://git.openstack.org/cgit/openstack/neutron-tempest-plugin/commit/?id=649c018b3e7998e796ca9d8ac8624664b8f03f98
Submitter: Zuul
Branch: master

commit 649c018b3e7998e796ca9d8ac8624664b8f03f98
Author: Igor Malinovskiy <email address hidden>
Date: Fri Mar 6 17:30:47 2020 +0200

    Add tempest api tests for subnet pools RBAC

    Change-Id: Ie6e26acd5e9c3acd2ee86a9c354c4a2934aa4bce
    Partial-Bug: #1862032
    Depends-On: https://review.opendev.org/#/c/710755/