Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

On 9/26/2016 8:48 AM, Stephen Finucane wrote: On Wed, 2016-09-21 at 11:16 -0400, Doug Hellmann wrote: Excerpts from Matt Riedemann's message of 2016-09-21 09:49:29 -0500: Nova has policy defaults in code now and we can generate the sample using oslopolicy-sample-generator but we'd like to get

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

On Wed, 2016-09-21 at 11:16 -0400, Doug Hellmann wrote: > Excerpts from Matt Riedemann's message of 2016-09-21 09:49:29 -0500: > > > > Nova has policy defaults in code now and we can generate the > > sample  > > using oslopolicy-sample-generator but we'd like to get the default  > > policy sample

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

Andrew, the idea is to shift existing RBAC implementation: currently policy is enforced in the service (Nova, for instance) against the result of token validation, which is, in general, an access check; I'm thinking about performing policy enforcement along with access check in a single

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

Hi, On Wed, Sep 21, 2016 at 10:49 AM, Matt Riedemann wrote: > Nova has policy defaults in code now and we can generate the sample using > oslopolicy-sample-generator but we'd like to get the default policy sample > in the Nova developer documentation also, like we

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

On Wed, Sep 21, 2016, at 04:18 PM, Joshua Harlow wrote: > Andrew Laski wrote: > > > > On Wed, Sep 21, 2016, at 03:18 PM, Joshua Harlow wrote: > >> Andrew Laski wrote: > >>> On Wed, Sep 21, 2016, at 12:02 PM, Joshua Harlow wrote: > Andrew Laski wrote: > > However, I have asked twice now

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

Andrew Laski wrote: On Wed, Sep 21, 2016, at 03:18 PM, Joshua Harlow wrote: Andrew Laski wrote: On Wed, Sep 21, 2016, at 12:02 PM, Joshua Harlow wrote: Andrew Laski wrote: However, I have asked twice now on the review what the benefit of doing this is and haven't received a response so I'll

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

On Wed, Sep 21, 2016, at 03:18 PM, Joshua Harlow wrote: > Andrew Laski wrote: > > > > On Wed, Sep 21, 2016, at 12:02 PM, Joshua Harlow wrote: > >> Andrew Laski wrote: > >>> However, I have asked twice now on the review what the benefit of doing > >>> this is and haven't received a response so

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

Andrew Laski wrote: On Wed, Sep 21, 2016, at 12:02 PM, Joshua Harlow wrote: Andrew Laski wrote: However, I have asked twice now on the review what the benefit of doing this is and haven't received a response so I'll ask here. The proposal would add additional latency to nearly every API

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

On Wed, Sep 21, 2016, at 12:02 PM, Joshua Harlow wrote: > Andrew Laski wrote: > > However, I have asked twice now on the review what the benefit of doing > > this is and haven't received a response so I'll ask here. The proposal > > would add additional latency to nearly every API operation in a

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

Andrew Laski wrote: However, I have asked twice now on the review what the benefit of doing this is and haven't received a response so I'll ask here. The proposal would add additional latency to nearly every API operation in a service and in return what do they get? Now that it's possible to

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

On Wed, Sep 21, 2016, at 11:05 AM, Alexander Makarov wrote: > What if policy will be manageable using RESTful API? > I'd like to validate the idea to handle policies in keystone or > affiliated service: https://review.openstack.org/#/c/325326/ As Matt said, that's unrelated to what he's asking

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

Excerpts from Matt Riedemann's message of 2016-09-21 09:49:29 -0500: > Nova has policy defaults in code now and we can generate the sample > using oslopolicy-sample-generator but we'd like to get the default > policy sample in the Nova developer documentation also, like we have for >

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

On 9/21/2016 10:05 AM, Alexander Makarov wrote: What if policy will be manageable using RESTful API? I'd like to validate the idea to handle policies in keystone or affiliated service: https://review.openstack.org/#/c/325326/ On 21.09.2016 17:49, Matt Riedemann wrote: Nova has policy defaults

Re: [openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

What if policy will be manageable using RESTful API? I'd like to validate the idea to handle policies in keystone or affiliated service: https://review.openstack.org/#/c/325326/ On 21.09.2016 17:49, Matt Riedemann wrote: Nova has policy defaults in code now and we can generate the sample

[openstack-dev] [oslo][nova] Anyone interested in writing a policy generator sphinx extension?

Nova has policy defaults in code now and we can generate the sample using oslopolicy-sample-generator but we'd like to get the default policy sample in the Nova developer documentation also, like we have for nova.conf.sample. I see we use the sphinxconfiggen extension for building the