Neutron RBAC support in future

[Stehlík Lukáš]

Hello,

as community was "rebooted", I will try to ask this question again.

Is there any intention of implementing Neutron RBAC into Tungsten (Contrail) in future? Or this Neutron feature is "no go" and intended as not working/compatible with Tungsten.

Lack of Neutron RBAC support in Tungsten (Contrail) is causing a not fully multi-tenant experience with OpenStack and Tungsten (Contrail) as there's no possibility to grant access to network resources for specific projects via OpenStack API.

Could someone responsible or someone from lead devs comment on this, please?

We are on thin line between keeping Contrail (Tungsten) and switching from Contrail to some other solution for our environments during next upgrade window.

Thanks a lot!

Lukas

[Jonathan Craig]

I would second this.  I'm new to tungsten with openstack via Mirantis and find this a big miss for our purposes.

Thanks,

Jon

Jonathan Craig | jon....@gfs.com

Server Architect | 616-528-0345

1300 Gezon Parkway SW, Wyoming MI 49509

--
You received this message because you are subscribed to the Google Groups "Tungsten Fabric Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tungsten-users+unsubscribe@googlegroups.com.
To post to this group, send email to tungsten-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/tungsten-users/CAJ50ugPeYBgu9jFC3%3Dqp5Soi-2_jaO4UUo67n0PTQRrOiQ2kGw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Greg Elkinbard]

Adding Suhkdev and Aniket,

maybe they will know if this is on Juniper eng roadmap.

However even if it is not on Juniper's own eng roadmap. TF has RBAC, it is just not mapped to OS RBAC via neutron plugin. So if you find this feature to be highly useful, when are you planning on jumping in and implementing it. It is isolate to the plugin code, so any decent python eng with a bit of OpenStack knowledge can add it. 

Community reboot was not intended to create an extra channel to feed requirements to Juniper eng. It was intended to allow folks to contribute features without waiting for Juniper Eng. 

Thanks

Greg

On Thu, May 3, 2018 at 12:29 PM, 'Jonathan Craig' via Tungsten Fabric Users <tungste...@googlegroups.com> wrote:

I would second this.  I'm new to tungsten with openstack via Mirantis and find this a big miss for our purposes.

Thanks,

Jon

Jonathan Craig | jon....@gfs.com

Server Architect | 616-528-0345

1300 Gezon Parkway SW, Wyoming MI 49509

On Thu, May 3, 2018 at 2:27 AM, Stehlík Lukáš <stehli...@gmail.com> wrote:

Hello,

as community was "rebooted", I will try to ask this question again.

Is there any intention of implementing Neutron RBAC into Tungsten (Contrail) in future? Or this Neutron feature is "no go" and intended as not working/compatible with Tungsten.

Lack of Neutron RBAC support in Tungsten (Contrail) is causing a not fully multi-tenant experience with OpenStack and Tungsten (Contrail) as there's no possibility to grant access to network resources for specific projects via OpenStack API.

Could someone responsible or someone from lead devs comment on this, please?

We are on thin line between keeping Contrail (Tungsten) and switching from Contrail to some other solution for our environments during next upgrade window.

Thanks a lot!

Lukas

--
You received this message because you are subscribed to the Google Groups "Tungsten Fabric Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tungsten-users+unsubscribe@googlegroups.com.

To post to this group, send email to tungste...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/tungsten-users/CAJ50ugPeYBgu9jFC3%3Dqp5Soi-2_jaO4UUo67n0PTQRrOiQ2kGw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Tungsten Fabric Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tungsten-users+unsubscribe@googlegroups.com.
To post to this group, send email to tungsten-users@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/tungsten-users/CAJ2YFWMWJ03ZC-KSZVFmUsbx%2BKqMxR%3DohEcdTCdG3xLJDgzRog%40mail.gmail.com.

[Stehlik Lukas]

Hi Greg,

I didn't want to add any requirements to Juniper engs. I was just thinking that TF has a new communication channel, so let's discuss about it again in time when I need to know if support of this feature is planned or not.

Believe me, If I would have sufficient knowledge of OpenStack, TF (Contrail) and Python I would be glad to contribute to neutron plugin and expand it as much as possible. Sadly I am just getting into Python by simple scripts right now.

Thanks,
Lukas

Dne 03.05.2018 v 15:50 Greg Elkinbard napsal(a):