keystonemiddleware/fix-audit-no-service-endpoint-ports-72b2009d631dcf19.yaml at f6037a3d50a80d8c2e0044c8f72d23dddb0d7203 - keystonemiddleware - OpenDev: Free Software Needs Free Tools

openstack/keystonemiddleware

Michael Johnson 782729b6e9 Fix audit target service selection

The keystonemiddleware audit code would select the wrong OpenStack service
endpoint for a request if the cloud is not using unique TCP ports for each
service endpoint. As most services are no longer using a port per service,
but instead using unique paths, this caused the audit to select the wrong
target service. This leads to incorrect audit logging due to the wrong
audit map being used.

This patch checks the request to see if a TCP port was present in the request,
and if not, fall back to using the target_endpoint_type configured in the
audit map file.

Change-Id: Ie2e0bf74ecca485d599a4041bb770bd6e296bc99
Closes-bug: 1797584

2018-10-29 11:08:34 -07:00

7 lines

246 B

YAML

Raw Blame History

 ---
 fixes:
   - |
     [`bug 1797584 <https://bugs.launchpad.net/keystonemiddleware/+bug/1797584>`_]
     Fixed a bug where the audit code would select the wrong target service
     if the OpenStack service endpoints were not using unique TCP ports.