yahoo-eng-team team mailing list archive

[Lukas Koenen <2011547@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

When sharing a security group using rbac policies

    openstack network rbac create --target-project PROJECT_UUID --action \
        access_as_shared --type security_group SEC_GROUP_UUID

the shared policy is not visible in the project it is shared to when
using Horizon. Not in the security group overview and not when editing
an instance. The only way to assign the shared security group is using
the openstack cli (only UUIDs work). After assigning the shared security
group is only visible in Horizon when inspecting the instance.

Furthermore when editing the assigned security groups of an instance
using Horizon the shared security group (assigned via cli) gets removed
automatically.

Steps to reproduce:

    1. create security group
    2. share security group
        openstack network rbac create --target-project PROJECT_UUID \
            --action access_as_shared \
            --type security_group SEC_GROUP_UUID
    3. assign security group
        openstack server add security group INSTANCE_UUID SEC_GROUP_UUID

** Affects: horizon
     Importance: Undecided
         Status: New

** Description changed:

  When sharing a security group using rbac policies
  
-     openstack network rbac create --target-project PROJECT_UUID --action \ 
-         access_as_shared --type security_group SEC_GROUP_UUID
+     openstack network rbac create --target-project PROJECT_UUID --action \
+         access_as_shared --type security_group SEC_GROUP_UUID
  
  the shared policy is not visible in the project it is shared to when
  using Horizon. Not in the security group overview and not when editing
  an instance. The only way to assign the shared security group is using
  the openstack cli (only UUIDs work). After assigning the shared security
  group is only visible in Horizon when inspecting the instance.
  
  Furthermore when editing the assigned security groups of an instance
  using Horizon the shared security group (assigned via cli) gets removed
  automatically.
  
  Steps to reproduce:
  
-     1. create security group
-     2. share security group   
-         openstack network rbac create --target-project PROJECT_UUID --action \ 
-             access_as_shared --type security_group SEC_GROUP_UUID
-     3. assign security group 
-         openstack server add security group INSTANCE_UUID SEC_GROUP_UUID
+     1. create security group
+     2. share security group
+         openstack network rbac create --target-project PROJECT_UUID \
+             --action access_as_shared \
+             --type security_group SEC_GROUP_UUID
+     3. assign security group
+         openstack server add security group INSTANCE_UUID SEC_GROUP_UUID

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/2011547

Title:
  RBAC Shared Security Groups Are Not Visible In Horizon Dashboard

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  When sharing a security group using rbac policies

      openstack network rbac create --target-project PROJECT_UUID --action \
          access_as_shared --type security_group SEC_GROUP_UUID

  the shared policy is not visible in the project it is shared to when
  using Horizon. Not in the security group overview and not when editing
  an instance. The only way to assign the shared security group is using
  the openstack cli (only UUIDs work). After assigning the shared
  security group is only visible in Horizon when inspecting the
  instance.

  Furthermore when editing the assigned security groups of an instance
  using Horizon the shared security group (assigned via cli) gets
  removed automatically.

  Steps to reproduce:

      1. create security group
      2. share security group
          openstack network rbac create --target-project PROJECT_UUID \
              --action access_as_shared \
              --type security_group SEC_GROUP_UUID
      3. assign security group
          openstack server add security group INSTANCE_UUID SEC_GROUP_UUID

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/2011547/+subscriptions