[openstack-dev] Interconnecting projects

Fawad Khaliq fawad at plumgrid.com
Tue Jun 2 16:58:50 UTC 2015


Great!
A correction here: RBAC proposal does address some of the use cases on
interconnecting tenants.

Fawad Khaliq


On Tue, Jun 2, 2015 at 9:41 PM, Anik <anikm99 at yahoo.com> wrote:

> That's exactly what I was asking for. Thanks Fawad.
>
> Regards,
> Anik
> 201-245-1569
>
>   ------------------------------
>  *From:* Fawad Khaliq <fawad at plumgrid.com>
> *To:* OpenStack Development Mailing List (not for usage questions) <
> openstack-dev at lists.openstack.org>
> *Cc:* Anik <anikm99 at yahoo.com>
> *Sent:* Tuesday, June 2, 2015 9:29 AM
> *Subject:* Re: [openstack-dev] Interconnecting projects
>
>
> On Tue, Jun 2, 2015 at 9:14 PM, Assaf Muller <amuller at redhat.com> wrote:
>
> Check out:
>
> http://specs.openstack.org/openstack/neutron-specs/specs/liberty/rbac-networks.html
>
> If I understand correctly, what Anik is probably asking for is way to
> connect two OpenStack projects together from a network point of view, where
> a private network in Project1 can be connected to a Router in  Project2.
> AFAIK, I don't think we are planning to expose such model in RBAC where a
> tenant (non-admin) has a way control who can see/connect-to his/her
> resources.
>
> @Anik, please correct me if I am wrong.
>
>
>
> Kevin is trying to solve exactly this problem. We're really hoping to land
> it in
> time for Liberty.
>
> ----- Original Message -----
> > Hi,
> >
> > Trying to understand if somebody has come across the following scenario:
> >
> > I have a two projects: Project 1 and Project 2
> >
> > I have a neutron private network in Project 1, that I want to connect
> that
> > private network to a neutron port in Project 2.
> >
> > This does not seem to be possible without using admin credentials. I am
> not
> > talking about a shared provider network here.
> >
> > It seems that the problem lies in the fact that there is no data model
> today
> > that lets one Project have knowledge about any other Project inside the
> same
> > OpenStack region.
> >
> > Any pointers there will be helpful.
> > Regards,
> > Anik
> > 201-245-1569
> >
> >
> __________________________________________________________________________
> > OpenStack Development Mailing List (not for usage questions)
> > Unsubscribe:
> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> <http://OpenStack-dev-request@lists.openstack.org/?subject:unsubscribe>
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
> >
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> <http://OpenStack-dev-request@lists.openstack.org/?subject:unsubscribe>
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150602/9ce7e802/attachment.html>


More information about the OpenStack-dev mailing list