Juju should have security rules/acls for every path in zk
Bug #813773 reported by
Kapil Thangavelu
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| pyjuju |
In Progress
|
High
|
Kapil Thangavelu | ||
| juju (Ubuntu) |
Triaged
|
High
|
Unassigned | ||
| Precise |
Won't Fix
|
High
|
Unassigned | ||
| Quantal |
Won't Fix
|
Undecided
|
Unassigned | ||
Bug Description
To enforce security we need a set of security rules to determine the acl for any given node in the zk hierarchy.
Related branches
lp://staging/~hazmat/pyjuju/security-policy-rules-redux
- Gustavo Niemeyer: Needs Fixing
-
Diff: 1217 lines (+586/-208) (has conflicts)14 files modifiedjuju/providers/local/__init__.py (+0/-1)
juju/state/initialize.py (+2/-2)
juju/state/security.py (+17/-27)
juju/state/securityrules.py (+192/-0)
juju/state/tests/common.py (+29/-39)
juju/state/tests/test_agent.py (+0/-11)
juju/state/tests/test_auth.py (+3/-3)
juju/state/tests/test_base.py (+7/-7)
juju/state/tests/test_environment.py (+0/-4)
juju/state/tests/test_firewall.py (+1/-1)
juju/state/tests/test_initialize.py (+14/-3)
juju/state/tests/test_security.py (+38/-108)
juju/state/tests/test_securityrules.py (+223/-0)
juju/state/tests/test_service.py (+60/-2)
| Changed in ensemble: | |
| importance: | Undecided → High |
| assignee: | nobody → Kapil Thangavelu (hazmat) |
| milestone: | none → dublin |
| status: | New → In Progress |
| tags: | added: security |
| Changed in ensemble: | |
| milestone: | dublin → eureka |
| Changed in juju: | |
| milestone: | eureka → florence |
| Changed in juju: | |
| milestone: | florence → none |
| summary: |
- Ensemble should have security rules/acls for every path in zk + Juju should have security rules/acls for every path in zk |
| Changed in juju (Ubuntu Precise): | |
| status: | New → Triaged |
| milestone: | none → precise-updates |
| tags: | added: rls-p-tracking |
| Changed in juju: | |
| milestone: | none → galapagos |
| Changed in juju (Ubuntu Precise): | |
| importance: | Undecided → High |
Revision history for this message
| Kapil Thangavelu (hazmat) wrote | #1 |
| Changed in juju: | |
| milestone: | galapagos → honolulu |
| tags: | removed: rls-p-tracking |
Revision history for this message
| Clint Byrum (clint-fewbar) wrote | #2 |
| Changed in juju: | |
| milestone: | 0.6 → 0.7 |
| Changed in juju (Ubuntu Quantal): | |
| status: | Triaged → Won't Fix |
| Changed in juju: | |
| milestone: | 0.7 → 0.8 |
Revision history for this message
| Steve Langasek (vorlon) wrote | #3 |
| Changed in juju (Ubuntu Precise): | |
| status: | Triaged → Won't Fix |
To post a comment you must log in.
There seems to be some issues with libzk deadlocks when running the full test suite (looped), i'm deferring this to the next milestone till that can be debugged.