OpenStack Networking (Neutron)
51d1899bac
When new default policy rules and scope enforcement are enabled, Neutron needs to handle properly not only PolicyNotAuthorized exception from oslo_policy module but also InvalidScope exception. This patch adds handling of that exception to the neutron policy modules. In the check() method from the neutron.policy module we are calling ENFORCER.enforce() method with do_raise=False which means that PolicyNotAuthorized isn't rasised. Unfortunately it seems that there is bug in oslo.policy module and InvalidScope is raised even with do_raise=False. For now, lets workaround it in Neutron by properly handling InvalidScope exception in the check() method. This workaround can be cleaned when bug [1] will be fixed in oslo.policy. [1] https://bugs.launchpad.net/oslo.policy/+bug/1965315 Partial-Bug: #1959333 Change-Id: I973f8896248c8222031c53343bb53ce48254da74 |
||
---|---|---|
api-ref | ||
devstack | ||
doc | ||
etc | ||
neutron | ||
playbooks | ||
rally-jobs | ||
releasenotes | ||
roles | ||
tools | ||
vagrant/ovn | ||
zuul.d | ||
.coveragerc | ||
.gitignore | ||
.gitreview | ||
.mailmap | ||
.pylintrc | ||
.stestr.conf | ||
bindep.txt | ||
CONTRIBUTING.rst | ||
HACKING.rst | ||
LICENSE | ||
lower-constraints.txt | ||
plugin.spec | ||
README.rst | ||
requirements.txt | ||
setup.cfg | ||
setup.py | ||
test-requirements.txt | ||
TESTING.rst | ||
tox.ini |
OpenStack Neutron
Neutron is an OpenStack project to provide "network connectivity as a service" between interface devices (e.g., vNICs) managed by other OpenStack services (e.g., Nova).
To learn more about neutron:
- Documentation: https://docs.openstack.org/neutron/latest/
- Features: https://specs.openstack.org/openstack/neutron-specs
- Defects: https://launchpad.net/neutron
- Release notes: https://docs.openstack.org/releasenotes/neutron/index.html
- Source: https://opendev.org/openstack/neutron
Get in touch via email. Use [Neutron] in your subject.
To learn how to contribute, please read the CONTRIBUTING.rst file.