OpenStack Image Management (Glance)
Go to file
bhagyashris 89feef0e2f Move 'upload_image' policy check to the controller
There are two methods to create images:-

Method A)
POST /v2/images
PUT /v2/images/{image_id}/file

Method B)
POST /v2/images
PUT /v2/images/{image_id}/stage
POST /v2/images/{image_id}/import

The traditional image upload API (PUT /v2/images/{image_id}/file)
uses 'upload_image' policy which is same for
Method B (POST /v2/images/{image_id}/import)
image-create-via-import(new API for image create) API.

The long term goal is to make users use method B to create images
and cross services to use Method A until changes are made to
use Method B.
To restrict normal users from using Method A to create images both
these APIs (/v2/images/{image_id}/file and /v2/images/{image_id}/import)
should have a distinct policy.

This patch move the 'upload_image' policy check from imge.set_data()
to the controller and not introduce any new policies at this point
for import API call (POST /v2/images/{image_id}/import)
on the theory that an operator can stop import by restricting the
'image_create' policy. And also this fix will not change the semantics
of the 'upload_image' policy from the operator perspective.

Closes-Bug: #1732141
Change-Id: Icc62add5f8d48549aac94c8058d66d6b77b56d41
2017-12-11 19:58:18 +05:30
api-ref/source Update api-ref about 403 for image location changes 2017-10-19 18:45:42 -04:00
doc/source Update the documentation links 2017-12-06 06:32:42 +00:00
etc Correct related section for enable_image_import 2017-11-17 18:33:45 +00:00
glance Move 'upload_image' policy check to the controller 2017-12-11 19:58:18 +05:30
httpd Update http deploy docs to be a bit more explicit 2017-11-02 01:19:19 -04:00
rally-jobs Update Rally Job related files 2017-09-25 01:12:40 -07:00
releasenotes Remove setting of version/release from releasenotes 2017-11-16 10:45:32 -06:00
tools Prepare for using standard python tests 2017-02-03 20:11:48 +01:00
.coveragerc Update .coveragerc after the removal of openstack directory 2016-10-17 17:09:56 +05:30
.gitignore tests: replace .testr.conf with .stestr.conf 2017-10-13 23:42:03 +00:00
.gitreview Add .gitreview config file for gerrit. 2011-10-24 11:02:16 -04:00
.mailmap Add a mailmap entry for myself 2014-02-11 12:00:44 +08:00
.stestr.conf tests: replace .testr.conf with .stestr.conf 2017-10-13 23:42:03 +00:00
CONTRIBUTING.rst Update the documention for doc migration 2017-08-02 07:22:46 +00:00
HACKING.rst Stop enforcing translations on logs 2017-05-31 11:35:53 +01:00
LICENSE Add a LICENSE file. 2012-01-03 10:14:01 -05:00
README.rst Revert "Remove team:diverse-affiliation from tags" 2017-09-25 17:53:49 -04:00
babel.cfg Added first step of babel-based translations. 2012-02-28 02:00:37 -08:00
bandit.yaml Move bandit into pep8 2016-02-26 08:12:45 +01:00
bindep.txt Add a local bindep.txt override 2017-05-25 23:13:21 +02:00
pylintrc Typo in pylintrc file 2015-03-25 11:21:16 +01:00
requirements.txt Updated from global requirements 2017-12-05 03:02:18 +00:00
setup.cfg Add default configuration files to data_files 2017-09-21 17:39:43 +00:00
setup.py Updated from global requirements 2017-03-04 01:43:26 +00:00
test-requirements.txt Updated from global requirements 2017-11-16 11:03:18 +00:00
tox.ini Merge "tests: replace .testr.conf with .stestr.conf" 2017-10-30 21:49:20 +00:00

README.rst

Team and repository tags

The following tags have been asserted for the Glance project:
"project:official",
"tc:approved-release",
"stable:follows-policy",
"tc:starter-kit:compute",
"vulnerability:managed",
"team:diverse-affiliation",
"assert:supports-upgrade",
"assert:follows-standard-deprecation".
Follow the link for an explanation of these tags.

Glance

Glance is a project that provides services and associated libraries to store, browse, share, distribute and manage bootable disk images, other data closely associated with initializing compute resources, and metadata definitions.

Use the following resources to learn more:

API

To learn how to use Glance's API, consult the documentation available online at:

Developers

For information on how to contribute to Glance, please see the contents of the CONTRIBUTING.rst in this repository.

Any new code must follow the development guidelines detailed in the HACKING.rst file, and pass all unit tests.

Further developer focused documentation is available at:

Operators

To learn how to deploy and configure OpenStack Glance, consult the documentation available online at:

In the unfortunate event that bugs are discovered, they should be reported to the appropriate bug tracker. You can raise bugs here:

Other Information

During each design summit, we agree on what the whole community wants to focus on for the upcoming release. You can see image service plans:

For more information about the Glance project please see: