yahoo-eng-team team mailing list archive

[Lajos Katona <1612050@xxxxxxxxxxxxxxxxxx>]

We can close this as I see, the notifications are much more detailed
since, for rbac:

INFO oslo.messaging.notification.rbac_policy.create.end [None
req-b98f02a2-b65c-4331-ab51-966186dc7fd0 None admin] {"message_id":
"15f5fe6b-5254-4b67-9303-6250119376d1", "publisher_id":
"network.newtaas", "event_type": "rbac_policy.create.end","priority":
"INFO", "payload": {"rbac_policy": {"id":
"4f11ca6e-9c98-4dcf-8797-cd8ce13103d0", "project_id":
"6fa72026f37a480d8727409aa7b3f7b6", "action": "access_as_shared",
"object_id":"5c93e716-b195-4f91-915a-7120bcddec39", "target_tenant":
"*", "object_type": "network", "tenant_id":
"6fa72026f37a480d8727409aa7b3f7b6"}}, "timestamp": "2023-11-15
16:19:36.764328"}


and for rbac delete:

INFO oslo.messaging.notification.rbac_policy.delete.end [None
req-6a29b809-9c27-4577-86e9-9a486178b49d None admin] {"message_id":
"1a8ff78c-4be5-4582-82b4-0518434053b7",
"publisher_id":"network.newtaas","event_type": "rbac_policy.delete.end",
"priority": "INFO", "payload": {"rbac_policy_id":
"4f11ca6e-9c984dcf-8797-cd8ce13103d0", "rbac_policy": {"id":
"4f11ca6e-9c98-4dcf-8797-cd8ce13103d0",
"project_id":"6fa72026f37a480d8727409aa7b3f7b6", "action":
"access_as_shared", "object_id": "5c93e716-b195-4f91-915a7120bcddec39",
"target_tenant": "*", "object_type": "network",
"tenant_id":"6fa72026f37a480d8727409aa7b3f7b6"}}, "timestamp":
"2023-11-15 16:20:30.891196"}

** Changed in: neutron
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1612050

Title:
  Need more data added for RBAC policy notifications

Status in neutron:
  Fix Released

Bug description:
  For the Searchlight project, we are receiving notifications for the
  RBAC policy commands.

      rbac-create
      rbac-delete

  The payload for rbac_policy.create.end is complete and allows
  Searchlight to update our state to reflect the policy changes.

  The payload for rbac_policy.delete.end is not as complete. The payload
  we receive is:

  {
  "event_type": "rbac_policy.delete.end",
  "payload":
  { "rbac_policy_id": "d7491be9-ee3d-40d7-9880-0ce82c7c12f6" }

  }

  Since the RBAC policy is being deleted, we cannot query the details of
  the policy through the Neutron API using the policy ID. Doing so
  results in a race condition where the majority of the time the policy
  has already been deleted.

  This means we need to store the details of the policy upon
  rbac_policy.create.end time, which requires extraneous state in
  Searchlight.

  We would like a change to the rbac_policy.delete.end payload to
  include all policy's details. Mirroring the same information provided
  by the rbac_policy.create.end notification:

  {
  "event_type": "rbac_policy.delete.end",
  "payload":
  { "target_tenant": "admin", "tenant_id": "c4b424b17cc04cefa7211b40c5c893c2", "object_type": "network", "object_id": "64f00d1c-a6b6-4c00-a800-10eb9360a976", "action": "access_as_shared", "id": "d7491be9-ee3d-40d7-9880-0ce82c7c12f6" }

  }

  At a bare minimum, we would need "tenant_id", "object_id" and "id" to
  be returned.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1612050/+subscriptions