Access Groups
In Atlanta there was a suggestion from the audience that we support access groups rather than forcing users to allow IP addresses one at a time. There are 2 proposals really:
1) Create an object in manila which can be used to grant bulk access to a share, called can access group
2) While the initial definition of an access group may just be a list of IPs, eventually we may want to allow other implementations, such as mapping to neutron security groups. In that case we would want to suscribe to updates and update the access in manila automatically. That could be a hard thing to do so we would make that a 2.0 kind of feature.
Blueprint information
- Status:
- Complete
- Approver:
- Ben Swartzlander
- Priority:
- Medium
- Drafter:
- Ben Swartzlander
- Direction:
- Approved
- Assignee:
- NidhiMittalHada
- Definition:
- Obsolete
- Series goal:
- Accepted for newton
- Implementation:
-
Started
- Milestone target:
- None
- Started by
- NidhiMittalHada
- Completed by
- Goutham Pacha Ravi
Related branches
Related bugs
Sprints
Whiteboard
(Older Version)
https:/
dpkshetty: I added few questions in the etherpad above.)
(Created by Nidhi)
https:/
https:/
Access rules state mapping should be done with shares and not share instances
This has a database impact and needs a migration
Alter table: ShareInstanceAc
