-
Notifications
You must be signed in to change notification settings - Fork 61
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Added support for ACLs on port groups. #122
Conversation
Thanks @anfredette . LGTM! A minor comment is that it would be better to split the fixes such as for the problem when external_ids == nil in separate commits. Let me know if you'd like to do that. |
I agree. I’ll split it out.
Thanks,
Andre
…On Sun, Jan 3, 2021 at 5:21 PM Han Zhou ***@***.***> wrote:
Thanks @anfredette <https://github.com/anfredette> . LGTM!
A minor comment is that it would be better to split the fixes such as for
the problem when external_ids == nil in separate commits. Let me know if
you'd like to do that.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#122 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAHY7X3QKMLWM2U3JRHXDDTSYD3Y3ANCNFSM4VGJWSRA>
.
|
86f34b8
to
62e7a78
Compare
I've updated this PR as follows:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Per Han's request above, and discussion on Slack, I've changed the port group ACL APIs to use the PG name instead of the PG UUID. NOTE: I've kept this change as a separate commit to facilitate reviews. After I get the thumbs up, I will squash the last two commits. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry that I have to put this on hold again because of the external-ids commit. Please see my comment in #125 for the same commit.
- Using ovn-nbctl acl-add/del as a model, an entityType parameter was added to the API which could be either PORT_GROUP or LOICAL_SWITCH. - In order to maintain backward compatibility of the existing APIs, a new set of APIs called ACLAddEntity/ACLDelEntity/ACLListEntity were added. - Note: both versions of the APIs call the same underlying implementation functions. Also made a minor optimization suggested by vtolstov on pr-117. Signed-off-by: Andre Fredette <[email protected]>
This PR has been reworked on top of PR-125. |
Added support for ACLs on port groups.
the API which could be either PORT_GROUP or LOICAL_SWITCH.
of APIs called ACLAddEntity/ACLDelEntity/ACLListEntity were added.
implementation functions.
Also made a minor optimization suggested by vtolstov on pr-117.
Signed-off-by: Andre Fredette [email protected]