openstack/neutron-lib
Code Issues Proposed changes

[S-RBAC] Add note about port:binding:profile field and SERVICE role

Browse Source 
With new default API policies binding:profile attribute of the port can
be only set or updated by the SERVICE user. This patch adds small note
about this to the Neutron API-REF document.

Related-Bug: #2052937
Change-Id: I0b2f2225e29537c9fd2de53b0945a451b9bcdde3
This commit is contained in:
Slawek Kaplonski 2024-02-19 09:08:54 +01:00
parent 1fedbae833
commit 3aec8fdfee
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
api-ref/source/v2/ports.inc
View File

@ -118,6 +118,16 @@ The extension defines several attributes whose names have a prefix
``binding:`` including ``binding:host_id``, ``binding:vnic_type``,
``binding:vif_type``, ``binding:vif_details``, and ``binding:profile``.
.. warning::
When new defaults for the API policies are enabled (``enforce_new_defaults``
set to ``True`` in the Neutron's configuration), ``binding:profile`` can
be set or updated only by the user with granted ``SERVICE`` role. In
case when it needs to be set by ``admin`` user e.g. for debugging
purpose, default API policies for ``create_port:binding:profile`` and/or
``update_port:binding:profile`` needs to be overwritten in the
``policy.yaml`` file.
Port hints
==========