yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #51902
[Bug 1583958] Re: non-admin can create and list bgpspeakers but can not show or update speaker
Reviewed: https://review.openstack.org/319558
Committed: https://git.openstack.org/cgit/openstack/neutron-dynamic-routing/commit/?id=62cb5c418442adc71469d74106839ad041b940ff
Submitter: Jenkins
Branch: master
commit 62cb5c418442adc71469d74106839ad041b940ff
Author: Na <nazhu@xxxxxxxxxx>
Date: Sat May 21 05:49:50 2016 -0700
Fix the policy check for BGP APIs
Only admin can configure BGP, this patch add policy check
for BGP APIs.
Change-Id: I5ce602202c52542792cc5b22e58e0ed074e09d7d
Closes-Bug: #1583958
** Changed in: neutron
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1583958
Title:
non-admin can create and list bgpspeakers but can not show or update
speaker
Status in neutron:
Fix Released
Bug description:
Here is the configuration:
[root@SG-dev-flynn-3-fwaas devstack]# source openrc demo demo
WARNING: setting legacy OS_TENANT_NAME to support cli tools.
[root@SG-dev-flynn-3-fwaas devstack]# nova list
+----+------+--------+------------+-------------+----------+
| ID | Name | Status | Task State | Power State | Networks |
+----+------+--------+------------+-------------+----------+
+----+------+--------+------------+-------------+----------+
[root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-create --ip-version 4 --local-as 777 106
Created a new bgp_speaker:
+-----------------------------------+--------------------------------------+
| Field | Value |
+-----------------------------------+--------------------------------------+
| advertise_floating_ip_host_routes | True |
| advertise_tenant_networks | True |
| id | ee03ac3c-81c8-46ce-abad-e3fac4877e87 |
| ip_version | 4 |
| local_as | 777 |
| name | 106 |
| networks | |
| peers | |
| tenant_id | 01c10991df8749d8a79694dad6dfb836 |
+-----------------------------------+--------------------------------------+
[root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-create --ip-version 4 --local-as 7788 101
Created a new bgp_speaker:
+-----------------------------------+--------------------------------------+
| Field | Value |
+-----------------------------------+--------------------------------------+
| advertise_floating_ip_host_routes | True |
| advertise_tenant_networks | True |
| id | cb0a27e5-42a6-44c1-914b-9bce85a4d1e1 |
| ip_version | 4 |
| local_as | 7788 |
| name | 101 |
| networks | |
| peers | |
| tenant_id | 01c10991df8749d8a79694dad6dfb836 |
+-----------------------------------+--------------------------------------+
[root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-list
+--------------------------------------+------+----------+------------+
| id | name | local_as | ip_version |
+--------------------------------------+------+----------+------------+
| cb0a27e5-42a6-44c1-914b-9bce85a4d1e1 | 101 | 7788 | 4 |
| ee03ac3c-81c8-46ce-abad-e3fac4877e87 | 106 | 777 | 4 |
+--------------------------------------+------+----------+------------+
[root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-show cb0a27e5-42a6-44c1-914b-9bce85a4d1e1
Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found.
Neutron server returns request_ids: ['req-bff87635-2767-4bfd-b6e0-cc1399136d88']
[root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-show 101
Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found.
Neutron server returns request_ids: ['req-fd336b49-70e3-4a20-ba2d-9ca9889ea05c']
[root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-show 106
Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found.
Neutron server returns request_ids: ['req-70354c3c-d59a-4f69-ba3a-54edbce12e44']
[root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-update --advertise-floating-ip-host-routes=False 106
Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found.
Neutron server returns request_ids: ['req-a13edca8-7d55-4568-a94f-a6bd228923fc']
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1583958/+subscriptions
References