Security guide suggests plugin agents require database access

Bug #1544641 reported by Ihar Hrachyshka
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openstack-manuals
Fix Released
Low
Michael Glaser

Bug Description

http://docs.openstack.org/security-guide/networking/architecture.html

"The neutron-server and plugin agents require access to a database for persistent storage and access to a message queue for inter-communication."

In Neutron, only neutron-server has access to database, agents talk to neutron-server thru AMQP.

Revision history for this message
Piyush (pirsriva) wrote :

Yeah the line seems ambiguous. On reading, at first, even i felt that agents / server require DIRECT access to DB which is NOT the case. Better to clarify it.
Something like-
"The neutron-server and plugin agents require information in a database for persistent storage. The plugin directly accesses the DB. The agents access DB via server... "

Changed in openstack-manuals:
status: New → Confirmed
assignee: nobody → Piyush Raman Srivastava (pirsriva)
Piyush (pirsriva)
Changed in openstack-manuals:
assignee: Piyush Raman Srivastava (pirsriva) → nobody
Chason Chan (chen-xing)
Changed in openstack-manuals:
assignee: nobody → Xing Chen (chen-xing)
tags: added: sec-guide
tags: added: low-hanging-fruit neutron
Changed in openstack-manuals:
importance: Undecided → Low
assignee: Chason (chen-xing) → nobody
Changed in openstack-manuals:
assignee: nobody → Michael Glaser (mikeg451)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to security-doc (master)

Fix proposed to branch: master
Review: https://review.openstack.org/424801

Changed in openstack-manuals:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to security-doc (master)

Reviewed: https://review.openstack.org/424801
Committed: https://git.openstack.org/cgit/openstack/security-doc/commit/?id=2b7b6318e70ead3e284157b186ef144b3cd3f280
Submitter: Jenkins
Branch: master

commit 2b7b6318e70ead3e284157b186ef144b3cd3f280
Author: MikeG451 <email address hidden>
Date: Tue Jan 24 18:54:52 2017 +0000

    Networking architecture of Security guide implies direct DB conn.

    Revise Networking architecture of Security guide to describe
    there is no direct database access from the agents.

    Change-Id: I45bd29c88ffc9eabfaab5f7dc9bce17d64c5ca18
    Closes-bug: #1544641

Changed in openstack-manuals:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.