network rbac --target-project default should be wildcard

Bug #1704834 reported by Daniel RJ Rooke
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python-openstackclient
Fix Released
Undecided
Dongcan Ye

Bug Description

in neutronclient rbac.py, default for target-tenant is "*". Without this, I cannot find a way to reset all projects external access to a network.

from rbac.py:

        parser.add_argument(
            '--target-tenant',
            default='*',
            help=_('ID of the tenant to which the RBAC '
                   'policy will be enforced.'))

--external option in openstackclient network does not recreate wildcard rbac policy if external is already in force (I have a network with 2 access_as_external policies and no wildcard). I had to use neutronclient.

Dongcan Ye (hellochosen)
Changed in python-openstackclient:
assignee: nobody → Dongcan Ye (hellochosen)
Changed in python-openstackclient:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-openstackclient (master)

Reviewed: https://review.openstack.org/516211
Committed: https://git.openstack.org/cgit/openstack/python-openstackclient/commit/?id=9ca99b991947c5b932a0c916591cd71568f2ac17
Submitter: Zuul
Branch: master

commit 9ca99b991947c5b932a0c916591cd71568f2ac17
Author: Dongcan Ye <email address hidden>
Date: Sun Nov 5 01:16:48 2017 -0500

    Network: Add supports rbac target-all-projects

    Add a boolean option "target-all-projects",
    which allows creating rbac policy for all projects.

    Change-Id: Ie3af83a1bba7dd66e83b0595bb276bf8fd105831
    Closes-Bug: #1728525
    Closes-Bug: #1704834

Changed in python-openstackclient:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-openstackclient 3.13.0

This issue was fixed in the openstack/python-openstackclient 3.13.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.