Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-26652

[OS::Neutron::RBACPolicy] Please allow all RBAC policy types

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • openstack-heat
    • None
    • EDPM Sprint 20, EDPM Sprint 21
    • 2
    • Moderate

      Currently Heat only supports 'network' and 'qos_policy' object types when creating RBAC policies.

      It would be nice to support all Neutron RBAC policy types, meaning adding: security-group, address-scope, subnetpool and address-group.

      Example that would be nice to have working:

       

      {{ rbac_secgroup: type: OS::Neutron::RBACPolicy properties: object_type: security_group object_id:

      { get_resource: my_secgroup }

      action: access_as_shared target_tenant:

      { get_param: project_id }

      }}

              rh-ee-dhrusing Dhruvendra Singh
              rh-ee-dhrusing Dhruvendra Singh
              rhos-dfg-df
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: