openstack/neutron
Code Issues Proposed changes
neutron/neutron/extensions
History
Rodolfo Alonso Hernandez f9b91289a5 Add policy enforcer for "tags" service plugin 
The following resources have been updated with new policies for
tags:
* Port
* Subnet
* Network
* Router
* FloatingIP
* NetworkSegmentRange
* NetworkSegment
* SecurityGroup
* Trunk
* Subnetpool

The admin can now enforce specific policies for the resource tags
for the creation, update and deletion actions.

NOTE: a follow-up patch, with a new Launchpad bug reference, will
      be created to move the ``Tagging`` class from
      ``ExtensionDescriptor`` to ``APIExtensionDescriptor``, and
      refactor the ``TaggingController`` to be a standard
      ``neutron.api.v2.base.Controller``. Any API resource using
      the second controller will use the path used by the wsgi
      hooks, in particular the policy hook. That will make unnecessary
      to manually call the ``policy.enforce`` method from the
      extension class methods.

Closes-Bug: #2037002
Change-Id: I9f3e032739824f268db74c5a1b4f04d353742dbd
2023-10-14 15:41:06 +00:00
..
__init__.py
Removing vim header lines
2014-04-01 10:38:31 -04:00
address_group.py
Support Address Group CRUD as extensions
2020-08-12 13:59:31 -05:00
address_scope.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
admin_state_down_before_update.py
Remove left over code for admin_state_down_before_update
2020-11-09 12:48:53 +00:00
agent_resources_synced.py
New agent attribute: resources_synced
2019-02-21 13:45:15 +01:00
agent.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
allowedaddresspairs.py
use addr pairs api def from lib
2017-11-13 11:56:32 -07:00
auto_allocated_topology.py
use neutron-lib auto allocated topology apidef
2017-07-28 08:38:45 -06:00
availability_zone_filter.py
Remove left over code for availability_zone_filter
2020-11-18 19:27:24 +01:00
availability_zone.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
data_plane_status.py
use APIExtensionDescriptor for plugins with defs in lib
2017-07-20 20:42:56 +00:00
default_subnetpools.py
use default subnetpool api def from lib
2017-10-20 14:44:10 -06:00
dhcpagentscheduler.py
Config option to disable the DHCP functions
2021-03-05 14:35:29 +08:00
dns_domain_ports.py
use dns domain ports api def from neutron-lib
2017-11-16 12:02:04 +00:00
dns_integration_domain_keywords.py
Allow to parse keywords in dns labels
2021-03-10 17:03:12 +01:00
dns.py
use dns api def from neutron-lib
2017-10-20 16:38:33 -06:00
dvr.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
ecmp_routes.py
L3 router support ECMP
2021-07-13 15:13:29 +08:00
empty_string_filtering.py
Use extension 'empty-string-filtering' from neutron-lib
2018-09-25 15:16:14 +00:00
expose_l3_conntrack_helper.py
Conntrack Helper - Plugin
2019-08-29 10:41:04 +02:00
expose_port_forwarding_in_fip.py
[server side] Expose port forwardings in FIP API
2018-07-27 17:25:10 +08:00
external_net.py
use external net api def from lib
2017-10-30 11:16:33 -06:00
extra_dhcp_opt.py
use extra_dhcp_opt api-def from neutron-lib
2017-05-31 15:06:35 +00:00
extraroute_atomic.py
New extension: extraroute-atomic
2019-08-09 13:24:44 +02:00
extraroute.py
use extra route api def from lib
2017-11-02 13:11:25 -06:00
filter_validation.py
Remove left over code for filter_validation
2020-11-26 16:38:02 +01:00
fip_pf_description.py
Add fip_pf_description extension to be supported by service plugin
2020-03-11 14:10:13 +00:00
fip_pf_detail.py
[api]adds port_forwarding id when list floatingip
2022-08-26 08:45:09 +08:00
fip_pf_port_range.py
Extend database to support portforwardings with port range
2022-03-15 09:10:23 -03:00
fip_port_details.py
Use extension fip-port-details from neutron-lib
2018-05-07 15:01:58 +00:00
flavors.py
use flavors api def from neutron-lib
2017-11-17 10:21:28 -07:00
floating_ip_port_forwarding.py
Fix some pylint indentation warnings
2022-07-01 17:52:59 -04:00
floatingip_pools.py
Fix some pylint indentation warnings
2022-07-01 17:52:59 -04:00
ip_allocation.py
use ip allocation api def from neutron-lib
2017-11-09 13:02:01 -07:00
ip_substring_port_filtering.py
Use ip_substring_port_filtering from neutron-lib
2018-02-13 22:47:15 +00:00
l2_adjacency.py
use l2 adjacency api def from neutron-lib
2017-11-03 13:10:48 -06:00
l3_conntrack_helper.py
Fix some pylint indentation warnings
2022-07-01 17:52:59 -04:00
l3_enable_default_route_bfd.py
Patch apidef for BFD/ECMP extra attributes
2023-08-29 12:02:55 +02:00
l3_enable_default_route_ecmp.py
Patch apidef for BFD/ECMP extra attributes
2023-08-29 12:02:55 +02:00
l3_ext_gw_mode.py
use l3 ext gw mode api def from neutron-lib
2017-11-17 07:02:45 -07:00
l3_ext_ha_mode.py
use l3 ext ha mode api def from neutron-lib
2017-11-09 15:34:43 -07:00
l3_ext_ndp_proxy.py
[Server Side] L3 router support ndp proxy
2022-02-03 10:07:46 +08:00
l3_extra_gws.py
Allow Multiple External Gateways
2023-05-24 20:40:59 +03:00
l3_flavors.py
use l3 flavors api def from neutron-lib
2017-11-13 11:15:08 -07:00
l3_ndp_proxy.py
Fix some pylint indentation warnings
2022-07-01 17:52:59 -04:00
l3_port_ip_change_not_allowed.py
Prevent some L3 ports change IP address
2018-12-13 14:24:23 +00:00
l3.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
l3agentscheduler.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
local_ip.py
Add Local IP Extension and DB
2021-11-11 10:08:23 +03:00
logging.py
Fix some pylint indentation warnings
2022-07-01 17:52:59 -04:00
metering_source_and_destination_fields.py
Add source_ip_prefix and destination_ip_prefix to metering label rules
2020-09-29 09:06:03 -03:00
metering.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
multiprovidernet.py
use multiprovidernet api definition from neutron-lib
2018-03-28 07:07:58 -06:00
netmtu_writable.py
use net mtu api writable def from neutron-lib
2017-11-14 15:28:28 -07:00
netmtu.py
use net mtu api def from neutron-lib
2017-11-14 14:47:47 -07:00
network_availability_zone.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
network_ha.py
Use the new network HA parameter
2023-08-25 08:43:37 +00:00
network_ip_availability.py
Fix some new pylint "R" warnings
2023-07-18 18:06:51 -04:00
network_segment_range.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
pagination.py
use pagination api def from neutron-lib
2017-11-06 14:43:13 -07:00
port_device_profile.py
Add port device profile extension
2021-01-22 16:17:30 +00:00
port_hint_ovs_tx_steering.py
port-hint-ovs-tx-steering: shim extension
2023-05-09 11:49:17 +02:00
port_hints.py
port-hints: api extension
2023-05-09 11:49:17 +02:00
port_mac_address_override.py
Update port-mac-address-override shim extension
2022-06-04 15:19:52 +08:00
port_mac_address_regenerate.py
Remove local port regenerate mac address apidef
2019-03-26 15:28:14 +00:00
port_numa_affinity_policy.py
Add port NUMA affinity policy
2020-11-13 15:49:34 +00:00
port_resource_request_groups.py
Add port-resource-request-groups extension
2021-10-21 14:30:07 +02:00
port_resource_request.py
Introduce Port resource request extension
2018-10-17 07:34:36 +00:00
portbindings_extended.py
Remove population of is_filter keyword
2018-10-02 20:45:19 +00:00
portbindings.py
use neutron_lib's portbindings api-def
2017-03-31 09:16:22 -06:00
portsecurity.py
use neutron-lib port security api-def
2017-05-01 11:45:42 -06:00
project_id.py
use project id api def from neutron-lib
2017-11-08 12:04:24 -07:00
providernet.py
Change provider network segmentation ID
2019-04-01 12:55:50 +00:00
qos_bw_limit_direction.py
Support that an extension extends a sub-resource
2017-11-15 08:59:45 +01:00
qos_bw_minimum_ingress.py
Ingress direction for min bandwidth rule
2018-10-09 08:08:05 +00:00
qos_default.py
use qos default api def from neutron-lib
2018-02-12 11:13:04 -07:00
qos_fip_network_policy.py
Add network QoS inheritance to floating IP
2021-11-24 09:01:09 +00:00
qos_fip.py
Adopt rehomed QoS FIP extension from neutron-lib 2.18.0
2021-12-23 06:02:00 +00:00
qos_gateway_ip.py
[L3][QoS] Neutron server side router gateway IP QoS
2018-12-01 17:45:46 +08:00
qos_port_network_policy.py
Add "qos_network_policy_id" to port definition
2020-01-17 17:57:11 +00:00
qos_pps_minimum_rule_alias.py
Fix some pylint indentation warnings
2022-07-01 17:52:59 -04:00
qos_pps_minimum_rule.py
Fix some pylint indentation warnings
2022-07-01 17:52:59 -04:00
qos_pps_rule.py
[QoS] Add rule type packet per second (pps)
2021-07-22 09:53:38 +08:00
qos_rule_type_details.py
use qos rule type details api def from neutron-lib
2018-02-22 11:41:13 -07:00
qos_rule_type_filter.py
Support filtering for QoS rule type list
2022-02-24 08:28:53 +00:00
qos_rules_alias.py
Fix some pylint indentation warnings
2022-07-01 17:52:59 -04:00
qos.py
Fix some pylint indentation warnings
2022-07-01 17:52:59 -04:00
quota_check_limit.py
Check quota limits
2021-10-27 12:33:18 +00:00
quotasv2_detail.py
Replace "tenant_id" with "project_id" in Quota engine
2021-09-22 08:27:10 +00:00
quotasv2.py
Implement specific tracked resource count method per quota driver
2022-07-28 06:01:18 +02:00
rbac_address_group.py
Allow sharing of address groups via RBAC mechanism
2021-03-01 18:28:31 -06:00
rbac_address_scope.py
Allow sharing of address scopes via RBAC mechanism
2020-03-19 16:51:39 +02:00
rbac_security_groups.py
Allow sharing of security groups via RBAC mechanism
2019-03-09 17:30:14 -06:00
rbac_subnetpool.py
Allow sharing of subnet pools via RBAC mechanism
2020-04-09 19:02:47 +03:00
rbac.py
Allow sharing of subnet pools via RBAC mechanism
2020-04-09 19:02:47 +03:00
revisionifmatch.py
use revision if match api def from neutron-lib
2018-03-01 09:20:22 -07:00
revisions.py
Allow sub-resources to have standard attributes
2018-07-04 20:52:37 +00:00
router_availability_zone.py
Remove usage of six.add_metaclass
2020-05-21 14:41:18 -04:00
routerservicetype.py
use router service type api def from neutron-lib
2018-02-22 10:57:39 -07:00
security_groups_default_rules.py
Default SG rules - use new rules templates to create rules for SGs
2023-08-30 10:18:19 +00:00
security_groups_normalized_cidr.py
Add normalized_cidr column to SG rules
2021-01-07 12:23:59 +01:00
security_groups_port_filtering.py
use security_groups_port_filtering from neutron-lib
2018-08-30 08:49:40 -06:00
security_groups_remote_address_group.py
Support remote address group in SG rules
2020-11-25 10:34:02 -06:00
security_groups_rules_belongs_to_default_sg.py
Add a new extension "security-groups-rules-belongs-to-default-sg"
2023-10-06 15:36:26 +00:00
security_groups_shared_filtering.py
Start using security-groups-shared-filtering from neutron-lib
2022-05-19 12:51:15 -04:00
securitygroup.py
Create a policy rule to control if a rule belongs to the default SG
2023-10-09 14:11:55 +00:00
segment.py
Remove _standard_attr_segment_lib and use definition from neutron-lib
2022-02-28 18:04:43 +05:30
segments_peer_subnet_host_routes.py
Remove local segment-peer-subnet host-route apidef
2019-03-19 00:40:29 +01:00
servicetype.py
use neutron-lib servicetype api def
2018-03-27 14:32:44 -06:00
sorting.py
use sorting api def from neutron-lib
2018-02-20 14:35:07 -07:00
standard_attr_segment.py
Remove _standard_attr_segment_lib and use definition from neutron-lib
2022-02-28 18:04:43 +05:30
standardattrdescription.py
Allow sub-resources to have standard attributes
2018-07-04 20:52:37 +00:00
stateful_security_group.py
Support for stateless security groups
2020-03-03 16:53:42 +01:00
stdattrs_common.py
Use neutron-lib standard_attr
2021-09-15 09:19:26 +00:00
subnet_dns_publish_fixed_ip.py
Allow to select subnets to publish DNS records
2019-12-14 13:36:09 +00:00
subnet_onboard.py
Enable adoption of subnets into a subnet pool
2019-02-26 11:13:09 -06:00
subnet_segmentid_writable.py
Allow setting network-segment on subnet update
2018-05-24 01:09:02 +02:00
subnet_service_types.py
use subnet_service_types extension from neutron-lib
2019-06-18 11:24:18 -06:00
subnetallocation.py
Use ExtensionDescriptor from neutron-lib
2016-12-02 14:16:06 -05:00
subnetpool_prefix_ops.py
Implement subnetpool prefix operations
2019-07-01 14:22:51 +00:00
tag_ports_during_bulk_creation.py
Implement tagging during bulk port creation
2020-01-28 18:23:37 -06:00
tagging.py
Add policy enforcer for "tags" service plugin
2023-10-14 15:41:06 +00:00
timestamp.py
Allow sub-resources to have standard attributes
2018-07-04 20:52:37 +00:00
trunk_details.py
use APIExtensionDescriptor for plugins with defs in lib
2017-07-20 20:42:56 +00:00
trunk.py
use APIExtensionDescriptor for plugins with defs in lib
2017-07-20 20:42:56 +00:00
uplink_status_propagation.py
Add propagate_uplink_status to port
2018-11-29 19:33:16 +00:00
vlantransparent.py
use vlantransparent api def from neutron-lib
2018-02-20 07:43:03 +00:00