openstack/glance
Code Issues Proposed changes
OpenStack Image Management (Glance)
6,836 Commits 11 Branches 53 Tags 129 MiB
Python 99.9%
d2cc0dc566
Go to file
Rick Bartra d2cc0dc566 Add Policy enforcement for several Metadata Definition delete APIs 
Several Metadata Definition delete APIs do not have RBAC. This
patchset add policy enforcment to the following APIs:

    - `Delete namespace`
    - `Delete object`
    - `Remove resource type association`
    - `Remove property definition`
    - `Delete tag definition`
    - `Delete all tag definitions`

The following actions are enforce and added to the policy.json:

    - `delete_metadef_namespace`
    - `delete_metadef_object`
    - `remove_metadef_resource_type_association`
    - `remove_metadef_property`
    - `delete_metadef_tag`
    - `delete_metadef_tags`

Most other APIs have policy enforcement, so the ones above should as
well. Without adding policy enforcement for the above APIs, all roles
can peform the delete APIs noted above.

Change-Id: I8cd6eb26b0d3401fa4667384c31e4c56d838d42b
Closes-Bug: #1782840
Co-Authored-By: julian.sy@att.com
2020-04-06 14:47:05 +00:00
api-ref/source Correct reference to 2 import methods 2020-02-26 17:35:27 -05:00
doc Add Policy enforcement for several Metadata Definition delete APIs 2020-04-06 14:47:05 +00:00
etc Merge "Remove empty policy.json" 2020-03-05 17:40:36 +00:00
glance Add Policy enforcement for several Metadata Definition delete APIs 2020-04-06 14:47:05 +00:00
httpd Update http deploy docs to be a bit more explicit 2017-11-02 01:19:19 -04:00
playbooks/legacy/glance-dsvm-grenade-multinode Migrate grenade jobs to py3 2019-11-19 22:24:01 +00:00
rally-jobs Update some url links of rally/README.rst 2018-02-27 00:29:38 -08:00
releasenotes Add Policy enforcement for several Metadata Definition delete APIs 2020-04-06 14:47:05 +00:00
tools Use group_regex to serialize scrubber tests 2018-06-07 09:25:04 -04:00
.coveragerc Update .coveragerc after the removal of openstack directory 2016-10-17 17:09:56 +05:30
.gitignore Move policy defaults into code 2020-01-06 12:56:30 -05:00
.gitreview OpenDev Migration Patch 2019-04-19 19:45:31 +00:00
.mailmap Add a mailmap entry for myself 2014-02-11 12:00:44 +08:00
.stestr.conf Use group_regex to serialize scrubber tests 2018-06-07 09:25:04 -04:00
.zuul.yaml Merge "Amend tempest-irrelevant-files to avoid false positives" 2020-03-05 17:40:38 +00:00
babel.cfg Added first step of babel-based translations. 2012-02-28 02:00:37 -08:00
bindep.txt add libpq-dev to build psycopg2 2019-04-09 18:06:35 -05:00
CONTRIBUTING.rst Community Goal: Project PTL & Contrib Docs Update 2020-03-11 06:09:47 +00:00
HACKING.rst Add doc8 to pep8 check for glance project 2018-01-19 08:20:56 +00:00
LICENSE Add a LICENSE file. 2012-01-03 10:14:01 -05:00
lower-constraints.txt Update hacking and reenable local checks 2020-04-02 18:00:44 +02:00
pylintrc Typo in pylintrc file 2015-03-25 11:21:16 +01:00
README.rst Start README.rst with a better title 2019-11-13 17:03:44 +01:00
requirements.txt Add support for oslo.reports 2019-09-20 05:17:58 +00:00
setup.cfg Cleanup old cruft 2020-03-28 08:18:01 +01:00
setup.py Cleanup old cruft 2020-03-28 08:18:01 +01:00
test-requirements.txt Update hacking and reenable local checks 2020-04-02 18:00:44 +02:00
tox.ini Update hacking and reenable local checks 2020-04-02 18:00:44 +02:00

README.rst

OpenStack Glance

The following tags have been asserted for the Glance project: "project:official", "tc:approved-release", "stable:follows-policy", "tc:starter-kit:compute", "vulnerability:managed", "assert:supports-upgrade", "assert:follows-standard-deprecation". Follow the link for an explanation of these tags.

Glance is an OpenStack project that provides services and associated libraries to store, browse, share, distribute and manage bootable disk images, other data closely associated with initializing compute resources, and metadata definitions.

Use the following resources to learn more:

API

To learn how to use Glance's API, consult the documentation available online at:

Developers

For information on how to contribute to Glance, please see the contents of the CONTRIBUTING.rst in this repository.

Any new code must follow the development guidelines detailed in the HACKING.rst file, and pass all unit tests.

Further developer focused documentation is available at:

Operators

To learn how to deploy and configure OpenStack Glance, consult the documentation available online at:

In the unfortunate event that bugs are discovered, they should be reported to the appropriate bug tracker. You can raise bugs here:

Release notes

To learn more about Glance's new features, optimizations, and changes between versions, consult the release notes online at:

Other Information

During each design summit, we agree on what the whole community wants to focus on for the upcoming release. You can see image service plans:

For more information about the Glance project please see: