Re: [openstack-dev] [Oslo][oslo.policy][glance] Bug: Glance doesn't send correctly authorization request to Oslo policy

2017-10-03 Thread ruan.he
Hi Brian and Doug, I've added this bug to the next Glance meeting agenda. My college Thomas will assist the meeting. Thanks, Ruan HE -Original Message- From: Brian Rosmaita [mailto:rosmaita.foss...@gmail.com] Sent: lundi 2 octobre 2017 13:18 To: Doug Hellmann Cc: OpenStack Development

Re: [openstack-dev] [Oslo][oslo.policy][glance] Bug: Glance doesn't send correctly authorization request to Oslo policy

2017-09-29 Thread ruan.he
Not yet, we are not familiar with the Glance team. Ruan -Original Message- From: Doug Hellmann [mailto:d...@doughellmann.com] Sent: vendredi 29 septembre 2017 16:26 To: openstack-dev Subject: Re: [openstack-dev] [Oslo][oslo.policy][glance] Bug: Glance doesn't send correctly

[openstack-dev] [Oslo][oslo.policy] Bug: Glance doesn't send correctly authorization request to Oslo policy

2017-09-29 Thread ruan.he
Hi folks, We are testing the http_check function in Oslo policy, and we figure out a bug: https://bugs.launchpad.net/glance/+bug/1720354. We believe that this is due to the Glance part since it doesn't well prepare the authorization request (body) to Oslo policy. Can we put this topic for the

Re: [openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread ruan.he
Dims, There is a similar prototype https://review.openstack.org/#/c/237521/. Our idea is to provide a more generic one instead of Fortress. Ruan -Original Message- From: Davanum Srinivas [mailto:dava...@gmail.com] Sent: jeudi 10 août 2017 16:32 To: OpenStack Development Mailing List

[openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread ruan.he
Hello, We would like to have an external and centralized security policy engine (PDP) that can pilot both OpenStack and SDN controllers. For this reason, we have developed and upstreamed a hook for the new OpenDaylight release Carbon (https://git.opendaylight.org/gerrit/#/c/46146/), and we'd

Re: [openstack-dev] [keystone] 2017-1-11 policy meeting

2017-01-19 Thread ruan.he
Hi Lance, Your option 3 is not clear for me. You say that ‘The result would 0 policy files to maintain in tree and everything would be in code.’ Without this file, how can we define policies? Can user configure policies? Ruan From: Lance Bragstad [mailto:lbrags...@gmail.com] Sent: mercredi 18