neutron/neutron/agent
Aaron Rosen bd4a85d67f Add X-Tenant-ID to metadata request
Previously, one could update a port's device_id to be that of
another tenant's instance_id and then be able to retrieve that
instance's metadata. In order to prevent this X-Tenant-ID is now
passed in the metadata request to nova and nova then checks that
X-Tenant-ID also matches the tenant_id for the instance against it's
database to ensure it's not being spoofed.

DocImpact - When upgrading OpenStack nova and neturon, neutron
            should be updated first (and neutron-metadata-agent
            restarted before nova is upgraded) in order to minimize
            downtime. This is because there is also a patch to nova
            which has checks X-Tenant-ID against it's database
            therefore neutron-metadata-agent needs to pass that
            before nova is upgraded for metadata to work.

Change-Id: I2b8fa2f561a7f2914608e68133abf15efa95015a
Closes-Bug: #1235450
2013-12-11 14:45:50 +00:00
..
common Tune up report and downtime intervals for l2 agent 2013-11-14 08:16:44 -08:00
linux Merge "Remove dead code _arp_spoofing_rule()" 2013-12-09 12:54:27 +00:00
metadata Add X-Tenant-ID to metadata request 2013-12-11 14:45:50 +00:00
__init__.py Rename Quantum to Neutron 2013-07-06 15:02:43 -04:00
dhcp_agent.py Merge "Handle failures on update_dhcp_port" 2013-12-06 13:26:09 +00:00
firewall.py Apply six for metaclass 2013-11-18 17:58:58 +09:00
l2population_rpc.py Apply six for metaclass 2013-11-18 17:58:58 +09:00
l3_agent.py Merge "l3_agent: make process_router more robust" 2013-12-09 13:06:59 +00:00
netns_cleanup_util.py Improve dhcp agent structure to support multiple dhcp models 2013-08-23 13:41:31 -07:00
ovs_cleanup_util.py Rename Quantum to Neutron 2013-07-06 15:02:43 -04:00
rpc.py change port status only if port is bound to the good host 2013-10-02 15:14:18 +02:00
securitygroups_rpc.py Ensure that security group agent is bound prior to accessing 2013-09-29 10:29:32 -07:00