[Bug 1284718] Re: interface-attach to external network a) works and b) results in undeletable instances

OpenStack Infra 1284718 at bugs.launchpad.net
Mon Apr 7 16:51:33 UTC 2014


Reviewed:  https://review.openstack.org/85189
Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=7d1b4117fda7709307a35e56625cfa7709a6b795
Submitter: Jenkins
Branch:    master

commit 7d1b4117fda7709307a35e56625cfa7709a6b795
Author: Salvatore Orlando <salv.orlando at gmail.com>
Date:   Thu Apr 3 14:54:11 2014 -0700

    Require admin context for interfaces on ext network
    
    Currently any user can attach an interface to a neutron
    external network, if the neutron plugin supports the port
    binding extension.
    In this case, nova will create neutron ports using the admin
    client, thus bypassing neutron authZ checks for creating ports
    on external networks.
    
    This patch adds a check in nova to verify the API request has an
    admin context when a request for an interface is made on a
    neutron external network.
    
    Change-Id: I5fb0bdcbf19eb82746ea3b192c1f65899bfb3c0b
    Closes-Bug: 1284718


** Changed in: nova
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/1284718

Title:
  interface-attach to external network a) works and b) results in
  undeletable instances

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1284718/+subscriptions



More information about the Ubuntu-server-bugs mailing list