Re: [openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread Davanum Srinivas
Fortress. > Ruan > > > -Original Message- > From: Davanum Srinivas [mailto:dava...@gmail.com] > Sent: jeudi 10 août 2017 16:32 > To: OpenStack Development Mailing List (not for usage questions) > Cc: DUVAL Thomas OBS/OAB > Subject: Re: [openstack-dev] [openstack][oslo

Re: [openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread ruan.he
(not for usage questions) Cc: DUVAL Thomas OBS/OAB Subject: Re: [openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP Ruan, Have you prototyped to see if you have all the information you need is available in the context (or can be gathered from Nova)? ( quickly check

Re: [openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread Davanum Srinivas
Ruan, Have you prototyped to see if you have all the information you need is available in the context (or can be gathered from Nova)? ( quickly check what the existing HttpCheck mechanism sends over the wire ) Thanks, Dims On Thu, Aug 10, 2017 at 10:17 AM, wrote: > Hello, > > We would like to

[openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread ruan.he
Hello, We would like to have an external and centralized security policy engine (PDP) that can pilot both OpenStack and SDN controllers. For this reason, we have developed and upstreamed a hook for the new OpenDaylight release Carbon (https://git.opendaylight.org/gerrit/#/c/46146/), and we'd lik