openstack/security-doc
Code Issues Proposed changes

Updated from openstack-manuals

Browse Source 
Change-Id: I4b6b6844ce7e57788de4519556d8d9123bbea68f
This commit is contained in:
OpenStack Proposal Bot
2025-05-09 18:11:19 +00:00
parent 25a064be99
commit d025f28e58
1 changed files with 57 additions and 113 deletions
Download Patch File Download Diff File Expand all files Collapse all files

170
common/glossary.rst
View File

@@ -190,6 +190,10 @@ A
pool so it can be associated with a fixed IP on a guest VM
instance.
AlmaLinux
A free, open-source RHEL-compatible Linux distribution.
Amazon Kernel Image (AKI)
Both a VM container format and disk format. Supported by Image
@@ -388,9 +392,11 @@ A
availability zone
An Amazon EC2 concept of an isolated area that is used for fault
tolerance. Do not confuse with an OpenStack Compute zone or
cell.
An Availability Zone (AZ) is a logical subdivision of cloud storage,
compute and network services. It provides a way for cloud operators
to logically segment their compute based on arbitrary factors like
location (country, data center, rack), network layout and/or power
source.
AWS CloudFormation template
@@ -800,32 +806,11 @@ C
retrieves from the metadata service, such as the SSH public key and
user data.
cloudadmin
One of the default roles in the Compute RBAC system. Grants
complete system access.
Cloudbase-Init
A Windows project providing guest initialization features,
similar to cloud-init.
cloudpipe
A compute service that creates VPNs on a per-project
basis.
cloudpipe image
A pre-made VM image that serves as a cloudpipe server.
Essentially, OpenVPN running on Linux.
Clustering service (senlin)
The project that implements clustering services and libraries
for the management of groups of homogeneous objects exposed
by other OpenStack services.
command filter
Lists allowed commands within the Compute rootwrap
@@ -1168,11 +1153,6 @@ D
any location. This may provide general use, development, or
even homogeneous testing environments.
developer
One of the default roles in the Compute RBAC system and the
default role assigned to a new user.
device ID
Maps Object Storage partitions to physical storage
@@ -1659,6 +1639,14 @@ G
An IP address, typically assigned to a router, that
passes network traffic between different networks.
generic network virtualization encapsulation (Geneve)
A flexible network protocol that adapts to the changing needs
and capabilities of devices in virtualized networks. It provides
a tunneling framework without being prescriptive, supporting
evolving network requirements. Geneve is predominantly used for
OVN projects networks.
generic receive offload (GRO)
Feature of certain network interface drivers that
@@ -2160,11 +2148,6 @@ I
One of the VM image disk formats supported by Image
service.
itsec
A default role in the Compute RBAC system that can quarantine an
instance in any project.
J
~
@@ -2307,6 +2290,9 @@ L
Enables a Linux bridge to understand a Networking port,
interface attachment, and other abstractions.
This driver was removed in the 2025.1 (Epoxy) release of
OpenStack, it is recommended to migrate to the OVN driver.
Linux containers (LXC)
An OpenStack-supported hypervisor.
@@ -2546,11 +2532,6 @@ M
Facility in Compute that allows each virtual machine instance to
have more than one VIF connected to it.
murano
Codename for the :term:`Application Catalog service <Application Catalog
service (murano)>`.
N
~
@@ -2561,12 +2542,6 @@ N
Released as open source by NASA in 2010 and is the basis for
Compute.
netadmin
One of the default roles in the Compute RBAC system. Enables the
user to allocate publicly accessible IP addresses to instances and
change firewall rules.
NetApp volume driver
Enables Compute to communicate with NetApp storage devices
@@ -2734,12 +2709,6 @@ N
Alternative term for the :term:`Compute API <Compute API (nova API)>`.
nova-network
A Compute component that manages IP address allocation,
firewalls, and other network-related tasks. This is the legacy
networking option and an alternative to Networking.
O
~
@@ -2821,6 +2790,14 @@ O
A standardized interface for managing compute, data, and network
resources, currently unsupported in OpenStack.
Open Virtual Network (OVN)
OVN (Open Virtual Network) is a set of services that convert
virtual network setups into OpenFlow rules, and apply them into
Open vSwitch. OVN provides a more abstract layer than Open vSwitch,
allowing working with logical routers and logical switches, instead of
flows.
Open Virtualization Format (OVF)
Standard for packaging VM images. Supported in OpenStack.
@@ -2929,21 +2906,18 @@ O
In the context of Object Storage, this is a process that is not
terminated after an upgrade, restart, or reload of the service.
Oslo
oslo
Codename for the :term:`Common Libraries project <Common Libraries
(oslo)>`.
(oslo)>`. It's a collection of tools and libraries that help
OpenStack services share common features like logging, configuration,
and messaging.
P
~
.. glossary::
panko
Part of the OpenStack :term:`Telemetry service <Telemetry
service (telemetry)>`; provides event storage.
parent cell
If a requested resource, such as CPU time, disk storage, or
@@ -3320,11 +3294,16 @@ R
A recommended architecture for an OpenStack cloud.
region
Region
A discrete OpenStack environment with dedicated API endpoints
that typically shares only the Identity (keystone) with other
regions.
A region in OpenStack represents a complete OpenStack
cluster that has a dedicated control plane and set
of API endpoints. It is common for operators
of large clouds to offer their users several OpenStack
regions, which differ by their geographical
location or purpose. In order to easily navigate
in a multi-region environment, cloud users need
a way to distinguish clusters by their names.
registry
@@ -3408,6 +3387,10 @@ R
OpenStack summit took place in Vancouver, Canada. The release
is named after the Rocky Mountains.
Rocky Linux
A Linux distribution that is compatible with OpenStack.
role
A personality that a user assumes to perform a specific set of
@@ -3475,11 +3458,6 @@ S
.. glossary::
sahara
Codename for the :term:`Data Processing service<Data Processing
service (sahara)>`.
SAML assertion
Contains information about a user as provided by the identity
@@ -3498,8 +3476,12 @@ S
scoped token
An Identity service API access token that is associated with a
specific project.
An Identity service API access token that is associated
with a single scope of operation. This token provides
access based on defined scopes, which can vary depending
on the level of access required. Scopes can include
system-level access, domain-level access, or
project-specific access.
scrubber
@@ -3544,11 +3526,6 @@ S
Linux kernel security module that provides the mechanism for
supporting access control policies.
senlin
Code name for the :term:`Clustering service
<Clustering service (senlin)>`.
server
Computer that provides explicit services to the client software
@@ -3719,6 +3696,12 @@ S
virtual device. Currently supported in OpenStack Havana and later
releases.
Skyline
An OpenStack dashboard with optimized modern user interface (UI) and
user experience (UX). It offers an improved performance, supporting
higher concurrency compared to previous dashboard solutions.
snapshot
A point-in-time copy of an OpenStack storage volume or image.
@@ -3884,12 +3867,6 @@ S
Point in time since the last container and accounts database
sync among nodes within Object Storage.
sysadmin
One of the default roles in the Compute RBAC system. Enables a
user to add other users to a project, interact with VM images that are
associated with the project, and start and stop VM instances.
system usage
A Compute component that, along with the notification system,
@@ -4011,11 +3988,6 @@ T
Alternative term for a non-durable queue.
TripleO
OpenStack-on-OpenStack program. The code name for the
OpenStack Deployment program.
trove
Codename for OpenStack :term:`Database service <Database service
@@ -4166,10 +4138,6 @@ V
Alternative term for a virtual network.
VirtualBox
An OpenStack-supported hypervisor.
Vitrage
Code name for the :term:`Root Cause Analysis service <Root Cause
@@ -4324,35 +4292,11 @@ X
attributes as well depending upon the version. The most recent
and standard version of X.509 is v3.
Xen
Xen is a hypervisor using a microkernel design, providing
services that allow multiple computer operating systems to
execute on the same computer hardware concurrently.
Xen API
The Xen administrative API, which is supported by
Compute.
Xen Cloud Platform (XCP)
An OpenStack-supported hypervisor.
Xen Storage Manager Volume Driver
A Block Storage volume plug-in that enables communication with
the Xen Storage Manager API.
Xena
The code name for the twenty fourth release of OpenStack.
The release is named after a fictional warrior princess.
XenServer
An OpenStack-supported hypervisor.
XFS
High-performance 64-bit file system created by Silicon