openstack/nova
Code Issues Proposed changes
Files
master
nova/api-ref/source
History
Ghanshyam Maan f914cb185c Add service role in Nova policy 
RBAC community wide goal phase-2[1] is to add 'service'
role for the service APIs policy rule. This commit
defaults the service APIs to 'service' role. This way
service APIs will be allowed for service user only.

Tempest tests also modified to simulate the service-to-service
communication. Tempest tests send the user with service
role to nova API.
- https://review.opendev.org/c/openstack/tempest/+/892639>

Partial implement blueprint policy-service-role-default

[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#phase-2

Change-Id: I1565ea163fa2c8212f71c9ba375654d2aab28330
Signed-off-by: Ghanshyam Maan <gmaan@ghanshyammann.com>
2025-08-27 19:34:04 +00:00
..
conf.py
doc: Remove crud from conf.py file
2023-10-02 11:11:23 +01:00
diagnostics.inc
Fixed some nits for microversion 2.48
2017-06-06 13:34:17 +00:00
extensions.inc
api-ref: Fix a broken link
2019-07-05 13:24:18 +09:00
flavors.inc
Updated flavors doc
2022-09-17 17:40:52 +00:00
images.inc
Keep pre-commit inline with hacking and fix whitespace
2019-12-12 14:56:39 +00:00
index.rst
Add service role in Nova policy
2025-08-27 19:34:04 +00:00
ips.inc
API Ref: update server_id params
2016-11-11 14:01:51 -05:00
limits.inc
api-ref: sort parameters for limits, quotas and quota classes
2017-12-18 13:40:13 -05:00
metadata.inc
Make metadata doc more readable
2017-03-31 06:19:01 +00:00
os-agents.inc
api: Remove 'os-agents' API
2020-09-11 14:10:32 +01:00
os-aggregates.inc
Reject AZ changes during aggregate add / remove host
2024-05-08 14:56:56 +02:00
os-assisted-volume-snapshots.inc
libvirt: remove glusterfs volume driver
2017-05-19 14:51:42 -04:00
os-availability-zone.inc
Stop using "nova" in API samples when creating a server
2019-03-01 10:43:08 -05:00
os-baremetal-nodes.inc
Update api-ref location
2019-07-22 19:17:28 +02:00
os-cells.inc
Add some missing parameters in docs of os-cells
2021-08-25 16:53:47 +08:00
os-certificates.inc
Remove "DEPRECATED" tag from Obsolete APIs
2018-07-18 22:23:45 -04:00
os-cloudpipe.inc
Correct project/user id descriptions for os-instance-actions
2019-07-22 15:23:16 -04:00
os-consoles.inc
Remove 'os-consoles' API
2019-11-22 16:09:36 +00:00
os-fixed-ips.inc
Remove "DEPRECATED" tag from Obsolete APIs
2018-07-18 22:23:45 -04:00
os-flavor-access.inc
Verify project id for flavor access calls
2017-05-04 18:23:17 -04:00
os-flavor-extra-specs.inc
api-ref: fix link to flavor extra specs docs
2019-02-06 14:49:18 -05:00
os-floating-ip-dns.inc
Remove needs:* todo from deprecated APIs api-ref
2019-06-28 19:09:31 +00:00
os-floating-ip-pools.inc
nova-net: Update API reference guide
2020-01-22 13:50:30 +00:00
os-floating-ips-bulk.inc
Remove "DEPRECATED" tag from Obsolete APIs
2018-07-18 22:23:45 -04:00
os-floating-ips.inc
nova-net: Update API reference guide
2020-01-22 13:50:30 +00:00
os-fping.inc
Remove "DEPRECATED" tag from Obsolete APIs
2018-07-18 22:23:45 -04:00
os-hosts.inc
Update the documentation links
2017-11-28 11:07:36 +08:00
os-hypervisors.inc
api: Drop statistics-style fields from os-hypervisors
2021-01-08 10:10:21 +00:00
os-instance-actions.inc
Add instance actions v284 samples test
2020-03-30 03:02:31 +00:00
os-instance-usage-audit-log.inc
api-ref: Fix description of os-instance-usage-audit-log
2016-12-14 11:22:50 -05:00
os-interface.inc
Add microversion to expose virtual device tags
2019-02-21 13:38:51 +00:00
os-keypairs.inc
api: Drop generating a keypair and add special chars to naming
2022-07-28 11:05:50 +02:00
os-migrations.inc
Filter migrations by user_id/project_id
2019-10-14 11:35:11 -07:00
os-networks.inc
Remove (most) '/os-networks' REST APIs
2019-11-18 16:25:47 +00:00
os-quota-class-sets.inc
api-ref: sort parameters for limits, quotas and quota classes
2017-12-18 13:40:13 -05:00
os-quota-sets.inc
api-ref: sort parameters for limits, quotas and quota classes
2017-12-18 13:40:13 -05:00
os-security-group-default-rules.inc
Remove 'os-security-group-default-rules' REST API
2019-11-18 16:25:47 +00:00
os-security-group-rules.inc
Update api-ref location
2019-07-22 19:17:28 +02:00
os-security-groups.inc
Update api-ref location
2019-07-22 19:17:28 +02:00
os-server-external-events.inc
Nix os-server-external-events 404 condition
2019-12-09 11:52:49 -06:00
os-server-groups.inc
Add microversion info in the os-server-groups API samples
2018-08-07 22:47:44 +00:00
os-server-password.inc
API Ref: update server_id params
2016-11-11 14:01:51 -05:00
os-server-shares.inc
Attach Manila shares via virtiofs (API)
2024-11-27 14:09:42 +01:00
os-server-tags.inc
api-ref: Remove unnecessary minimum microversion
2018-10-25 16:37:21 +09:00
os-services.inc
Block deleting compute services with in-progress migrations
2019-11-14 14:29:58 -05:00
os-simple-tenant-usage.inc
Enhance simple usage API documentation
2020-12-07 17:38:37 -03:00
os-tenant-network.inc
Remove '/os-tenant-networks' REST API
2019-11-22 16:03:11 +00:00
os-virtual-interfaces.inc
Remove "DEPRECATED" tag from Obsolete APIs
2018-07-18 22:23:45 -04:00
os-volume-attachments-swap.inc
Add service role in Nova policy
2025-08-27 19:34:04 +00:00
os-volume-attachments.inc
Add service role in Nova policy
2025-08-27 19:34:04 +00:00
os-volumes.inc
api: Separate volume, snapshot and volume attachments
2025-08-26 13:54:43 +01:00
parameters.yaml
Add service role in Nova policy
2025-08-27 19:34:04 +00:00
request-ids.inc
Update api-ref location
2019-07-22 19:17:28 +02:00
server-migrations.inc
Merge "Add support matrix for Delete (Abort) on-going live migration"
2019-11-13 23:43:52 +00:00
server-security-groups.inc
api-ref: Fix parameters in server-security-groups
2017-07-10 14:02:13 +00:00
server-topology.inc
api-ref: fix server topology "host_numa_node" field param name
2019-09-06 17:31:42 -04:00
servers-action-console-output.inc
Fix 'server' and 'instance' occurrence in api-ref
2017-03-28 02:54:11 +00:00
servers-action-crash-dump.inc
remove /v2.1/{tenant_id} from all urls
2016-06-03 08:47:33 -04:00
servers-action-deferred-delete.inc
remove /v2.1/{tenant_id} from all urls
2016-06-03 08:47:33 -04:00
servers-action-evacuate.inc
Update api-ref for 2.95: evacuate to STOPPED
2024-04-21 13:40:57 -04:00
servers-action-fixed-ip.inc
Deprecate Multinic, floatingip action and os-virtual-interface API
2017-04-25 12:04:05 -04:00
servers-action-rdp-remote-consoles.inc
HyperV: Remove RDP console API
2024-02-13 12:24:38 -08:00
servers-action-remote-consoles.inc
HyperV: Remove RDP console API
2024-02-13 12:24:38 -08:00
servers-action-shelve.inc
Allow unshelve to a specific host (REST API part)
2022-07-22 10:22:34 +02:00
servers-actions.inc
api: Address issues with remote consoles APIs
2025-06-26 18:49:59 +01:00
servers-admin-action.inc
Add a new policy for cold-migrate with host
2023-06-26 11:34:12 +02:00
servers-remote-consoles.inc
libvirt: allow direct SPICE connections to qemu
2025-02-22 08:25:38 +11:00
servers.inc
Fix microversion 2.98 doc/tests for update/rebuild APIs
2025-02-28 17:13:59 +00:00
urls.inc
[api-ref] Minor text clean-up, formatting
2016-11-29 12:31:46 -05:00
versions.inc
Update api-ref location
2019-07-22 19:17:28 +02:00