Skip to content

fix: remove RBAC-restricted fields from port creation for neutron 2026.1#2068

Draft
nidzrai wants to merge 1 commit into
mainfrom
rbac_neutron_update
Draft

fix: remove RBAC-restricted fields from port creation for neutron 2026.1#2068
nidzrai wants to merge 1 commit into
mainfrom
rbac_neutron_update

Conversation

@nidzrai

@nidzrai nidzrai commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

neutron 2026.1 tightened RBAC policies for create_port:device_owner, create_port:mac_address and create_port:fixed_ips , PROJECT_MANAGER role no longer allowed. Passing empty values for these fields still triggers the policy check. Removed device_owner, mac_address, fixed_ips and device_id from the port dict to avoid 403 errors for non-network-owner users on shared/RBAC networks.

Reference: https://docs.openstack.org/releasenotes/neutron/2026.1.html. Security Issues section

@nidzrai nidzrai force-pushed the rbac_neutron_update branch from 24c53a6 to d96b27e Compare June 9, 2026 17:48
@nidzrai nidzrai marked this pull request as draft June 10, 2026 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant