diff mbox series

[ovs-dev,v2,4/9] northd: Add Controller_Event RBAC rules

Message ID da7dfe9b418c5cb6bdfd098e7819ea3e56bbc69e.1614945892.git.frode.nordahl@canonical.com
State Accepted
Headers show
Series Fix missing RBAC rules and enable testing | expand

Commit Message

Frode Nordahl March 5, 2021, 12:16 p.m. UTC 
The use of the Controller_Event table does currently not work
when RBAC is enabled.

Fixes: be1eeb09d ("OVN: introduce Controller_Event table")
Signed-off-by: Frode Nordahl <frode.nordahl@canonical.com>
---
 northd/ovn-northd.c | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
diff mbox series

Patch

diff --git a/northd/ovn-northd.c b/northd/ovn-northd.c
index f85a3dcff..c4a3f2383 100644
--- a/northd/ovn-northd.c
+++ b/northd/ovn-northd.c
@@ -13248,6 +13248,12 @@  static const char *rbac_encap_auth[] =
 static const char *rbac_encap_update[] =
     {"type", "options", "ip"};
 
+static const char *rbac_controller_event_auth[] =
+    {""};
+static const char *rbac_controller_event_update[] =
+    {"chassis", "event_info", "event_type", "seq_num"};
+
+
 static const char *rbac_fdb_auth[] =
     {""};
 static const char *rbac_fdb_update[] =
@@ -13297,6 +13303,14 @@  static struct rbac_perm_cfg {
         .update = rbac_chassis_private_update,
         .n_update = ARRAY_SIZE(rbac_chassis_private_update),
         .row = NULL
+    },{
+        .table = "Controller_Event",
+        .auth = rbac_controller_event_auth,
+        .n_auth = ARRAY_SIZE(rbac_controller_event_auth),
+        .insdel = true,
+        .update = rbac_controller_event_update,
+        .n_update = ARRAY_SIZE(rbac_controller_event_update),
+        .row = NULL
     },{
         .table = "Encap",
         .auth = rbac_encap_auth,