OpenContrail

SVC monitor cannot show hidden resources

Bug #1377139 reported by Édouard Thuleau
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
New
Medium
Sylvain Afchain
R1.1
Fix Committed
Undecided
Sylvain Afchain
Juniper Openstack r1.21
R2.0
Fix Committed
Medium
Sylvain Afchain
Juniper Openstack r2.0-fcs
OpenContrail
Fix Committed
Medium
Sylvain Afchain

Bug Description

With the new mechanism to hide administrative resources (user_visibility [1]), the service monitor cannot see hidden resources.
That breaks the source NAT and load balancer cases.

[1] https://review.opencontrail.org/#/c/3333/

See original description
Édouard Thuleau (ethuleau)
description: updated
Édouard Thuleau (ethuleau)
Changed in opencontrail:
assignee: nobody → Édouard Thuleau (ethuleau)
status: New → In Progress
Revision history for this message
Édouard Thuleau (ethuleau) wrote :

The introspect part was already addressed with patch https://github.com/Juniper/contrail-controller/commit/08a992cd3acdcddeb5b71b97232379c026ceb2af

Revision history for this message
Édouard Thuleau (ethuleau) wrote :

Introspect: https://github.com/Juniper/contrail-controller/commit/77d0b971b74023261b806e48611fef22ba806345
UVE: https://github.com/Juniper/contrail-controller/commit/08a992cd3acdcddeb5b71b97232379c026ceb2af

Changed in opencontrail:
status: In Progress → Fix Committed
assignee: Édouard Thuleau (ethuleau) → nobody
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/3394
Committed: http://github.org/Juniper/contrail-controller/commit/024279e03d9591b06948df51b4256a79a22a1a57
Submitter: Zuul
Branch: master

commit 024279e03d9591b06948df51b4256a79a22a1a57
Author: Édouard Thuleau <email address hidden>
Date: Fri Oct 3 14:45:21 2014 +0200

Add admin role to see hidden resources

Add admin role to:

- local keystone auth API
- default auth service

to be able to see hidden resources.

Change-Id: I7e7e8cb29ae105702c7680fa7ab9fb1303ca671c
Partial-Bug: #1377139

Sylvain Afchain (sylvain-afchain)
Changed in opencontrail:
assignee: nobody → Sylvain Afchain (sylvain-afchain)
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/3398
Committed: http://github.org/Juniper/contrail-generateDS/commit/65b1aa3334c97b41ed74c599728dc1272cfe5d19
Submitter: Zuul
Branch: master

commit 65b1aa3334c97b41ed74c599728dc1272cfe5d19
Author: Sylvain Afchain <email address hidden>
Date: Fri Oct 3 18:06:07 2014 +0200

Check either X_HTTP_API_ROLE or X_HTTP_ROLE for user_visible

Currenlty neutron requests come with X_HTTP_API_ROLE and
with the multi_tenancy set to false this field is not
converted to X_HTTP_ROLE. X_HTTP_ROLE is used internally
to check the permissions.

Change-Id: I11a853ec617b19a76bfc1334a1196ec83ee0a856
Partial-Bug: #1377139

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/3460
Committed: http://github.org/Juniper/contrail-controller/commit/283909dfa78ca8d08a0fceadf8d659a5e3021d41
Submitter: Zuul
Branch: R1.10

commit 283909dfa78ca8d08a0fceadf8d659a5e3021d41
Author: Édouard Thuleau <email address hidden>
Date: Fri Oct 3 14:45:21 2014 +0200

Add admin role to see hidden resources

Add admin role to:

- local keystone auth API
- default auth service

to be able to see hidden resources.

Partial-Bug: #1377139
(cherry picked from commit 024279e03d9591b06948df51b4256a79a22a1a57)
Change-Id: I7e7e8cb29ae105702c7680fa7ab9fb1303ca671c
(cherry picked from commit bed9a8fc8d9d0373bb510aa3bd1a35ea5195de4b)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/4155
Committed: http://github.org/Juniper/contrail-generateDS/commit/75a5b520d1c852b2d26180db28d15a4abd269b2e
Submitter: Zuul
Branch: R1.10

commit 75a5b520d1c852b2d26180db28d15a4abd269b2e
Author: Sylvain Afchain <email address hidden>
Date: Fri Oct 3 18:06:07 2014 +0200

Check either X_HTTP_API_ROLE or X_HTTP_ROLE for user_visible

Currenlty neutron requests come with X_HTTP_API_ROLE and
with the multi_tenancy set to false this field is not
converted to X_HTTP_ROLE. X_HTTP_ROLE is used internally
to check the permissions.

Partial-Bug: #1377139
(cherry picked from commit 65b1aa3334c97b41ed74c599728dc1272cfe5d19)

Conflicts:
 ifmap_frontend.py

Change-Id: I11a853ec617b19a76bfc1334a1196ec83ee0a856

Nagabhushana R (bhushana)
tags: added: config
Nagabhushana R (bhushana)
Changed in juniperopenstack:
importance: Undecided → Medium
Changed in opencontrail:
importance: Undecided → Medium
Changed in juniperopenstack:
assignee: nobody → Sylvain Afchain (sylvain-afchain)
tags: added: service-chain
removed: svc-monitor
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.