openstack/magnum
Code Issues Proposed changes
Container Infrastructure Management Service for OpenStack
2,971 Commits 7 Branches 57 Tags 92 MiB
Python 73%
Shell 26.7%
Dockerfile 0.3%
f895b2bd09
Go to file
Johannes Grassler f895b2bd09 Fix global stack list in periodic task 
The periodic task unneccessarily lists Heat stacks in the
global tenant (across all tenants) which the Magnum service
user may lack permission for. Also, the most restrictive way
to let it use global stack-list is chose a Keystone role and
open that operation to any user in any project holding that
role.

This commit substitutes a direct lookup of all bays' stack_id
attributes for this global stack list. This direct lookup will
yield the same net result. In order to get the neccessary
permissions it will use each bay's stored Keystone trust to
act on behalf of the bay's creating user.

Co-Authored-By: Jiri Suchomel <jiri.suchomel@suse.com>
Closes-Bug: #1589955
Change-Id: I67b176c137c463e37e037970cc4e468d51db30c9
2016-07-27 10:11:51 +02:00
contrib/templates/example Update default version of heat template 2016-07-12 12:06:41 +05:30
devstack Add x509keypair_cert_manager to store certs in DB 2016-06-23 09:08:52 +05:30
doc Fix global stack list in periodic task 2016-07-27 10:11:51 +02:00
etc/magnum Remove service object 2016-06-02 10:46:13 +01:00
install-guide/source Fix global stack list in periodic task 2016-07-27 10:11:51 +02:00
magnum Fix global stack list in periodic task 2016-07-27 10:11:51 +02:00
releasenotes Remove unused POT files 2016-06-14 16:17:29 +00:00
specs Merge "Fix typos for Magnum" 2016-07-04 03:03:57 +00:00
tools Improve tox.ini to easy developer's life 2015-11-03 17:44:38 +08:00
.coveragerc Improve unit test coverage 2016-06-29 12:49:40 +00:00
.gitignore Add reno to Magnum 2016-04-05 08:45:43 +08:00
.gitreview Update .gitreview for project rename 2015-03-28 00:20:40 +00:00
.mailmap Initial commit from github (squashed) 2014-11-18 09:23:37 -05:00
.testr.conf Remove minion dependency on master 2016-03-04 07:41:12 -05:00
babel.cfg Initial commit from github (squashed) 2014-11-18 09:23:37 -05:00
CONTRIBUTING.rst Workflow documentation is now in infra-manual 2014-12-05 03:30:45 +00:00
Dockerfile Fix the docker build image issue 2015-05-18 11:11:25 +08:00
functional_creds.conf.sample Use the latest atomic image name 2016-05-09 13:35:18 +00:00
HACKING.rst Add hacking check to ensure not use xrange() 2016-03-23 11:19:59 +05:30
LICENSE Initial commit from github (squashed) 2014-11-18 09:23:37 -05:00
MANIFEST.in Copy Ironic's database model codebase 2014-12-02 15:04:31 -07:00
README.rst Fix the representation of REST 2015-09-01 08:40:39 +05:30
requirements.txt Updated from global requirements 2016-07-19 15:15:00 +00:00
setup.cfg Merge "Add Python 3.5 classifier and venv" 2016-07-14 05:10:27 +00:00
setup.py Updated from global requirements 2015-09-17 12:12:49 +00:00
test-requirements.txt Updated from global requirements 2016-07-22 04:00:02 +00:00
tox.ini Add Python 3.5 classifier and venv 2016-07-12 17:20:05 +05:30

README.rst

Magnum

Magnum is an OpenStack project which offers container orchestration engines for deploying and managing containers as first class resources in OpenStack.

For more information, please refer to the following resources: