198ef70c2b
this patch introduces an oslo.policy-based API access policy
enforcement engine to ironic-inspector.
As part of implementation, a proper oslo.context-based request
context is also generated and assigned to each request.
Short overview of changes:
- added custom RequestContext class
- extends oslo.context to handle of "is_public_api" flag
(False by default)
- added context to request in each API route
- '/continue' api sets the "is_public_api" flag to True
- added documented definitions for API access policies and their
defaults
- added enforcement of these policies on API requests
- added oslo.policy-specific entry points to setup.cfg
- added autogenerated policy sample file with defaults
- added documentation with autogenerated policies
Change-Id: Iff6f98fa9950d78608f0a7c325d132c11a1383b3
Closes-Bug: #1719812
35 lines
1.2 KiB
Plaintext
35 lines
1.2 KiB
Plaintext
# The order of packages is significant, because pip processes them in the order
|
|
# of appearance. Changing the order has an impact on the overall integration
|
|
# process, which may cause wedges in the gate later.
|
|
automaton>=1.9.0 # Apache-2.0
|
|
alembic>=0.8.10 # MIT
|
|
Babel!=2.4.0,>=2.3.4 # BSD
|
|
construct>=2.8.10 # MIT
|
|
eventlet!=0.18.3,!=0.20.1,<0.21.0,>=0.18.2 # MIT
|
|
Flask!=0.11,<1.0,>=0.10 # BSD
|
|
futurist>=1.2.0 # Apache-2.0
|
|
ironic-lib>=2.5.0 # Apache-2.0
|
|
jsonpath-rw<2.0,>=1.2.0 # Apache-2.0
|
|
jsonschema<3.0.0,>=2.6.0 # MIT
|
|
keystoneauth1>=3.2.0 # Apache-2.0
|
|
keystonemiddleware>=4.17.0 # Apache-2.0
|
|
netaddr>=0.7.18 # BSD
|
|
pbr!=2.1.0,>=2.0.0 # Apache-2.0
|
|
python-ironicclient>=1.14.0 # Apache-2.0
|
|
python-swiftclient>=3.2.0 # Apache-2.0
|
|
pytz>=2013.6 # MIT
|
|
oslo.concurrency>=3.20.0 # Apache-2.0
|
|
oslo.config>=4.6.0 # Apache-2.0
|
|
oslo.context>=2.14.0,!=2.19.1 # Apache-2.0
|
|
oslo.db>=4.27.0 # Apache-2.0
|
|
oslo.i18n>=3.15.3 # Apache-2.0
|
|
oslo.log>=3.30.0 # Apache-2.0
|
|
oslo.middleware>=3.31.0 # Apache-2.0
|
|
oslo.policy>=1.23.0 # Apache-2.0
|
|
oslo.rootwrap>=5.8.0 # Apache-2.0
|
|
oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0
|
|
oslo.utils>=3.28.0 # Apache-2.0
|
|
six>=1.9.0 # MIT
|
|
stevedore>=1.20.0 # Apache-2.0
|
|
SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT
|