neutron/releasenotes/notes/bug-1811166-314d4b89de1cc0f1.yaml
Matt Welch 00b6460df2 Enforce router admin state before distributed
Enforce that a user updates the admin state of a router before modifying
the distributed state. The API currently allows setting admin state to
false concurrently with changing the distributed state.
This is fine for a transition of centralized->distributed, but the
distributed->centralized transition could leave other nodes configured
as distributed until an audit is performed.

Commit adds shim api extension which should be replaced by neutron-lib
shim extension once https://review.openstack.org/#/c/634509/ is merged.
New method 'is_admin_state_down_necessary' checks that shim extension
is loaded.

Set extension as standard by adding to _supported_extension_aliases in
neutron/services/l3_router/l3_router_plugin.py

Closes-Bug: #1811166
Co-Authored-By: Allain Legacy <allain.legacy@windriver.com>
Co-Authored-By: Enyinna Ochulor <enyinna.ochulor@intel.com>
Change-Id: Ie624aeb3f3aeb4db176d2ca0b22020208d4b408a
Signed-off-by: Matt Welch <matt.welch@intel.com>
2019-07-02 14:00:17 +00:00

11 lines
406 B
YAML

---
fixes:
- |
[`bug 1811166 <https://bugs.launchpad.net/neutron/+bug/1811166>`_]
Changes the API behavior to enforce that a router's administrative state
must be down (``router.admin_state_up==False`` ) before modifying its
distributed attribute. If the router ``admin_state_up==True`` when trying
to change the ``distributed`` attribute, a BadRequest exception will be
thrown.