Centralized Policies Distribution

Registered by Samuel de Medeiros Queiroz on 2015-07-10

Dynamic Policies aim to improve access control in OpenStack by improving the mechanisms in which policies are defined and delivered to service endpoints.

This blueprint tracks implementation status of the centralized policies distribution, as defined by the specs referencing to it.

Blueprint information

Status:
Complete
Approver:
Steve Martinelli
Priority:
Undefined
Drafter:
Samuel de Medeiros Queiroz
Direction:
Approved
Assignee:
None
Definition:
Superseded
Series goal:
None
Implementation:
Not started
Milestone target:
None
Completed by
Samuel de Medeiros Queiroz on 2016-08-18

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/dynamic-policies-delivery,n,z

Addressed by: https://review.openstack.org/#/c/196753/
    policy: Dynamic Policies Overlay

Addressed by: https://review.openstack.org/197980
    Dynamic Policies Delivering Mechanism

Addressed by: https://review.openstack.org/134655
    Dynamic Policies Fetch and Cache

Gerrit topic: https://review.openstack.org/#q,topic:dynamic-policy,n,z

Addressed by: https://review.openstack.org/211271
    Enable Cache-Control HTTP values in responses

Addressed by: https://review.openstack.org/209695
    Centralized Policies Distribution Mechanism

Addressed by: https://review.openstack.org/211679
    Create Cached Policy Table

Addressed by: https://review.openstack.org/212957
    Create unit tests for the policy backend

Addressed by: https://review.openstack.org/212959
    Driver: Provide function to cache policies

Addressed by: https://review.openstack.org/212960
    Manager: Calculate validity and control caching

Addressed by: https://review.openstack.org/216851
    Centralized Policies Distribution Mechanism

samueldmq on 2016-08-18:

This is something that does not reflect our priorities or goals in keystone anymore.
Adam Young is working on getting this dynamic delivery of Policies done by using
TripleO. For now, there is no intention on going with this in keystone anymore. This
blueprint can be restored or another one may be created in the case this turns to
become a need again.

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.