Tacker: ETSI MANO NFV Orchestrator / VNF Manager. See https://wiki.openstack.org/wiki/Tacker
71970bc665
Current tests do not have good test coverage of VNF LCM APIs policies. Either tests for policies do not exist or if they exist then they do not cover the actual negative and positive testing. Basically this commit does the following: * Add RBAC tests: As we are implementing the project personas (project member and reader role) in policies, we need to have the enough testing coverage of existing policy behavior and to know that with new defaults how the access permissions will looks like. * Pass correct target to oslo policy: Currently, APIs are not passing the right targets to oslo policy, means VNF instance project_id was not passed as target. We need to pass the project_id so that we can check the 'onwer' permission correctly at RBAC level and RBAC checks pass and request goes to fetch the data from DB where project_id is checked. For example, GET VNF API requests by a non admin user does not check if requester users is from same project of requested VNF or not and request pass the oslo policy checks and make DB request. Passing the right project_id in oslo policy will return the request (if projectA request projectB VNF) from policy checks itself. This can be seen in modified test_controller.py tests. Partial implement blueprint implement-project-personas Change-Id: I1e8d98d6b94507783ba34d149642c019609247e6 |
||
|---|---|---|
| api-ref/source | ||
| contrib/tacker-config | ||
| devstack | ||
| doc | ||
| etc | ||
| playbooks/devstack | ||
| releasenotes | ||
| roles | ||
| samples | ||
| tacker | ||
| tools | ||
| vagrant/devstack | ||
| .coveragerc | ||
| .gitignore | ||
| .gitreview | ||
| .mailmap | ||
| .pylintrc | ||
| .stestr.conf | ||
| .zuul.yaml | ||
| CONTRIBUTING.rst | ||
| HACKING.rst | ||
| LICENSE | ||
| README.rst | ||
| TESTING.rst | ||
| bindep.txt | ||
| requirements.txt | ||
| setup.cfg | ||
| setup.py | ||
| test-requirements.txt | ||
| tox.ini | ||
README.rst
Tacker
Welcome!
Tacker is an OpenStack based NFV Orchestrator service with built-in general purpose VNF Manager to deploy and operate Virtual Network Functions (VNFs) on an OpenStack based NFV Platform. It is based on ETSI MANO Architectural Framework and provides a fully functional stack to orchestrate VNFs end-to-end.
Installation:
Installation instructions and user guides can be found at: https://docs.openstack.org/tacker/
Tacker code base supports OpenStack master and other releases. Please follow the instructions in the above address for a successful installation of corresponding release.
Code:
Tacker code is available in following repositories:
- Tacker server: https://opendev.org/openstack/tacker
- Tacker Python client: https://opendev.org/openstack/python-tackerclient
- Tacker Horizon UI: https://opendev.org/openstack/tacker-horizon
Bugs:
Please report bugs at: https://bugs.launchpad.net/tacker
External Resources:
- Tacker Wiki: https://wiki.openstack.org/wiki/Tacker
- Tacker Blueprints: https://blueprints.launchpad.net/tacker
- For help on usage and hacking of Tacker, please send an email to OpenStack-dev Mailing List <mailto:openstack-discuss@lists.openstack.org> with [openstack-dev] [Tacker] tag.
- To get release notes: Tacker Release Notes