OpenStack Networking (Neutron)
Go to file
Kevin Benton 4595899f7f Neutron RBAC API and network support
This adds the new API endpoint to create, update, and delete
role-based access control entries. These entries enable tenants
to grant access to other tenants to perform an action on an object
they do not own.

This was previously done using a single 'shared' flag; however, this
was too coarse because an object would either be private to a tenant
or it would be shared with every tenant.

In addition to introducing the API, this patch also adds support to
for the new entries in Neutron networks. This means tenants can now
share their networks with specific tenants as long as they know the
tenant ID.

This feature is backwards-compatible with the previous 'shared'
attribute in the API. So if a deployer doesn't want this new feature
enabled, all of the RBAC operations can be blocked in policy.json and
networks can still be globally shared in the legacy manner.

Even though this feature is referred to as role-based access control,
this first version only supports sharing networks with specific
tenant IDs because Neutron currently doesn't have integration with
Keystone to handle changes in a tenant's roles/groups/etc.


Change-Id: Ib90e2a931df068f417faf26e9c3780dc3c468867
Partially-Implements: blueprint rbac-networks
2015-08-20 20:00:17 -07:00
bin Replace 'import json' with oslo_serialization 2015-08-11 06:05:37 -07:00
doc Add a fullstack fake VM, basic connectivity test 2015-08-19 20:09:55 +03:00
etc Neutron RBAC API and network support 2015-08-20 20:00:17 -07:00
neutron Neutron RBAC API and network support 2015-08-20 20:00:17 -07:00
rally-jobs Changes in rally-jobs/README.rst 2015-06-04 10:34:15 -04:00
tools Remove quotes from subshell call in tools/ 2015-08-07 21:17:20 +08:00
.coveragerc Update .coveragerc after the removal of Cisco Nexus monolithic plugin 2015-03-31 02:25:06 +00:00
.gitignore Remove quantum untracked files from .gitignore 2015-06-25 11:59:37 +00:00
.gitreview Fix .gitreview to not point at a branch 2015-08-17 13:51:51 -06:00
.mailmap Add mailmap entry 2014-05-16 13:40:04 -04:00
.pylintrc pylint: enable `duplicate-key` check 2015-06-04 13:10:44 +10:00
.testr.conf Add an explicit tox job for functional tests 2014-02-05 17:11:52 +00:00
CONTRIBUTING.rst Workflow documentation is now in infra-manual 2014-12-05 03:30:37 +00:00
HACKING.rst Python3: use six.iteritems() instead of dict.iteritems() 2015-06-01 23:13:42 +02:00
LICENSE Adding Apache Version 2.0 license file. This is the official license agreement under which Quantum code is available to 2011-08-08 12:31:04 -07:00 Rename Quantum to Neutron 2013-07-06 15:02:43 -04:00
README.rst Updated the README.rst 2014-12-02 14:33:30 -06:00
TESTING.rst Add testing coverage .rst, missing test infrastructure to-dos 2015-08-10 20:37:23 -04:00
babel.cfg Use babel to generate translation file 2013-01-24 00:20:32 +08:00
openstack-common.conf Switch to the oslo_utils.fileutils 2015-07-15 08:09:26 +03:00
requirements.txt Updated from global requirements 2015-08-18 01:35:13 +00:00 Remove check for bash usage 2015-04-07 15:15:33 +00:00
setup.cfg Final decomposition of ML2 Cisco UCSM driver 2015-08-19 11:32:03 -04:00 Updated from global requirements 2015-07-18 16:06:06 +00:00
test-requirements.txt Updated from global requirements 2015-08-13 02:14:42 +00:00
tox.ini Merge "Python 3: fix test_utils" 2015-08-18 21:00:13 +00:00



You have come across a cloud computing network fabric controller. It has identified itself as "Neutron." It aims to tame your (cloud) networking!

External Resources:

The homepage for Neutron is: Use this site for asking for help, and filing bugs. Code is available on at <>.

The latest and most in-depth documentation on how to use Neutron is available at: <>. This includes:

Neutron Administrator Guide

Neutron API Reference:

Current Neutron developer documentation is available at:

For help on usage and hacking of Neutron, please send mail to <>.

For information on how to contribute to Neutron, please see the contents of the CONTRIBUTING.rst file.