Re: [openstack-dev] [Murano] Heat resource isolation withing single stack

2014-02-23 Thread Steve Baker
On 22/02/14 03:37, Stan Lagun wrote: Hi Everyone, While looking through Heat templates generation code in Murano I've realized it has a major design flaw: there is no isolation between Heat resources generated by different apps. Every app manifest can access and modify its environment stack

Re: [openstack-dev] [Murano] Heat resource isolation withing single stack

2014-02-23 Thread Stan Lagun
I would like the Murano project to evaluate the upcoming heat software-config resources to represent app configuration. Yes, we are closely watching progress being made in Heat in that area and evaluating how all new great features can be used in Murano Inferring from the above, it sounds

[openstack-dev] [Murano] Heat resource isolation withing single stack

2014-02-21 Thread Stan Lagun
Hi Everyone, While looking through Heat templates generation code in Murano I've realized it has a major design flaw: there is no isolation between Heat resources generated by different apps. Every app manifest can access and modify its environment stack in any way. For example it can delete

Re: [openstack-dev] [Murano] Heat resource isolation withing single stack

2014-02-21 Thread Steven Hardy
On Fri, Feb 21, 2014 at 06:37:27PM +0400, Stan Lagun wrote: Hi Everyone, While looking through Heat templates generation code in Murano I've realized it has a major design flaw: there is no isolation between Heat resources generated by different apps. Can you define the requirement for

Re: [openstack-dev] [Murano] Heat resource isolation withing single stack

2014-02-21 Thread Stan Lagun
Steve, thank you for very valuable suggestions. Your block post is really great - I've read about environments in Heat documentation but didn't really understood them until now. Usage of nested stacks may or may not solve my problem depending on what is possible to do within those stacks. Let me