network rbac --target-project default should be wildcard
Bug #1704834 reported by
Daniel RJ Rooke
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
python-openstackclient |
Fix Released
|
Undecided
|
Dongcan Ye |
Bug Description
in neutronclient rbac.py, default for target-tenant is "*". Without this, I cannot find a way to reset all projects external access to a network.
from rbac.py:
--external option in openstackclient network does not recreate wildcard rbac policy if external is already in force (I have a network with 2 access_as_external policies and no wildcard). I had to use neutronclient.
Changed in python-openstackclient: | |
assignee: | nobody → Dongcan Ye (hellochosen) |
Changed in python-openstackclient: | |
status: | New → In Progress |
To post a comment you must log in.
Reviewed: https:/ /review. openstack. org/516211 /git.openstack. org/cgit/ openstack/ python- openstackclient /commit/ ?id=9ca99b99194 7c5b932a0c91659 1cd71568f2ac17
Committed: https:/
Submitter: Zuul
Branch: master
commit 9ca99b991947c5b 932a0c916591cd7 1568f2ac17
Author: Dongcan Ye <email address hidden>
Date: Sun Nov 5 01:16:48 2017 -0500
Network: Add supports rbac target-all-projects
Add a boolean option "target- all-projects" ,
which allows creating rbac policy for all projects.
Change-Id: Ie3af83a1bba7dd 66e83b0595bb276 bf8fd105831
Closes-Bug: #1728525
Closes-Bug: #1704834