neutron/etc
Slawek Kaplonski a644b3c62b [S-RBAC] Change policies for port's binding:profile field
According to the neutron API-REF [1] port's "binding:profile" field is
intended to be used for the "machine-machine communication for compute
services like Nova, Ironic or Zun to pass information to a Neutron
back-end." so it should be by allowed only for the users with the
SERVICE role granted, not even for ADMIN.
This patch updates that policies to be available only for SERVICE role
when new, secure RBAC policies are enabled.

Additionally this patch updates some policies for create, update and get
port APIs to make them all work in the same way and allow them for the
SERVICE users too.

Finally this new policy for create/update_port:binding:profile have to
be overwritten in the fullstack tests to be allowed also for admin user.
It is done by adding custom policy file for the fullstack tests only.

[1] https://docs.openstack.org/api-ref/network/v2/index.html#create-port

Closes-Bug: #2052937
Change-Id: I5c0094ff21439fe8977cfc623789a09067e6a895
2024-02-16 16:10:43 +01:00
..
neutron Add an env variable "PROCESS_TAG" in `ProcessManager` 2022-12-24 10:30:16 +01:00
oslo-config-generator Remove ovn.ini example file 2023-09-06 15:19:30 -04:00
oslo-policy-generator Convert policy.json into policy-in-code 2018-12-13 20:37:53 +00:00
api-paste.ini Add fake_project_id middleware for noauth 2021-07-05 21:18:09 +05:30
fullstack_tests_policy.yaml [S-RBAC] Change policies for port's binding:profile field 2024-02-16 16:10:43 +01:00
README.policy.yaml.txt Rename README.policy.json.txt 2019-01-07 12:45:15 -05:00
README.txt Automatically generate neutron core configuration files 2015-11-27 15:22:59 +00:00
rootwrap.conf Sync rootwrap.conf from oslo.rootwrap 2022-01-03 09:17:04 +09:00

To generate the sample neutron configuration files, run the following
command from the top level of the neutron directory:

tox -e genconfig

If a 'tox' environment is unavailable, then you can run the following script
instead to generate the configuration files:

./tools/generate_config_file_samples.sh