Re: [openstack-dev] Neutron and ACLs

[Juan Antonio Osorio]

Hey,

as a matter of fact in Barbican we are also in need of proper ACLs and
there is currently work on-going on implementing them:

http://specs.openstack.org/openstack/barbican-specs/specs/kilo/add-creator-only-option.html

On Wed, Apr 8, 2015 at 7:58 PM, Rich Wellner  wrote:

>  Yeah, sounds like a plan.
>
> FWIW, our target implementation will be Arista switches.
>
> rw2
>
>
> On 4/8/15 11:52 AM, Kevin Benton wrote:
>
> My plan is to repropose that for Liberty. I will re upload it to the spec
> repo in the next couple of weeks. When I do that it would be great to get
> your feedback. Perhaps we can divide up the work or you can expand the
> model to things other than subnets.
> On Apr 8, 2015 9:43 AM, "Rich Wellner"  wrote:
>
>> On 4/8/15 11:17 AM, Kevin Benton wrote:
>>
>>> What do you mean by ACLs? Is it anything similar to the following?
>>> https://review.openstack.org/#/c/132661/
>>>
>> Yes, our goals are very closely aligned with yours. And the rst doc as
>> well as the messages on that thread file in a lot of gaps for me. Thanks.
>>
>> What's your plan going forward?
>>
>> rw2
>>
>>
>> __
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe:
>> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: 
> openstack-dev-requ...@lists.openstack.org?subject:unsubscribehttp://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>


-- 
Juan Antonio Osorio R.
e-mail: jaosor...@gmail.com

"All truly great thoughts are conceived by walking."
- F.N.
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] Neutron and ACLs

[Rich Wellner]

Yeah, sounds like a plan.

FWIW, our target implementation will be Arista switches.

rw2

On 4/8/15 11:52 AM, Kevin Benton wrote:


My plan is to repropose that for Liberty. I will re upload it to the 
spec repo in the next couple of weeks. When I do that it would be 
great to get your feedback. Perhaps we can divide up the work or you 
can expand the model to things other than subnets.


On Apr 8, 2015 9:43 AM, "Rich Wellner" > wrote:


On 4/8/15 11:17 AM, Kevin Benton wrote:

What do you mean by ACLs? Is it anything similar to the
following? https://review.openstack.org/#/c/132661/

Yes, our goals are very closely aligned with yours. And the rst
doc as well as the messages on that thread file in a lot of gaps
for me. Thanks.

What's your plan going forward?

rw2


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe

http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] Neutron and ACLs

[Kevin Benton]

My plan is to repropose that for Liberty. I will re upload it to the spec
repo in the next couple of weeks. When I do that it would be great to get
your feedback. Perhaps we can divide up the work or you can expand the
model to things other than subnets.
On Apr 8, 2015 9:43 AM, "Rich Wellner"  wrote:

> On 4/8/15 11:17 AM, Kevin Benton wrote:
>
>> What do you mean by ACLs? Is it anything similar to the following?
>> https://review.openstack.org/#/c/132661/
>>
> Yes, our goals are very closely aligned with yours. And the rst doc as
> well as the messages on that thread file in a lot of gaps for me. Thanks.
>
> What's your plan going forward?
>
> rw2
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] Neutron and ACLs

[Rich Wellner]

On 4/8/15 11:17 AM, Kevin Benton wrote:
What do you mean by ACLs? Is it anything similar to the following? 
https://review.openstack.org/#/c/132661/
Yes, our goals are very closely aligned with yours. And the rst doc as 
well as the messages on that thread file in a lot of gaps for me. Thanks.


What's your plan going forward?

rw2


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] Neutron and ACLs

[Kevin Benton]

What do you mean by ACLs? Is it anything similar to the following?
https://review.openstack.org/#/c/132661/

On Wed, Apr 8, 2015 at 9:02 AM, Rich Wellner  wrote:

> Hello everyone,
>
> I (and my sponsor) are interested in adding ACLs to neutron and after
> trying IRC, emailing some githubbers directly and asking in a couple other
> places I've been told that this might be the place to have the discussion.
>
> Here's what I've been told so far:
>
> 1) There was a proposal for Quantum ACLs that was never approved.
>
> 2) There might be a push to put ACLs in Keystone and have other services
> depend on this central resource for ACL information.
>
> 3) Swift has ACLs built into it (notably, not using Keystone)
>
> 4) I don't see ACLs in any service other than Swift.
>
> So my question is: How can I meaningfully engage with the right people to
> understand what the current thoughts are for ACLs for all of open stack as
> well as Neutron?
>
> If you google my name and open source you'll see that I've been in the
> game a while and have worked in a few different communities. As such, I
> found one piece of advice I was given while researching Neutron "code up
> your proposal and submit it" to be a bit naive. It's clear there have been
> some conversations about this in the past and I would really not want to
> spend a couple months starting from zero, coming up with a solution that
> *I* like and is objectively good but have it rejected because the community
> already has inertia going in a different direction.
>
> So what I think I need to understand is something like:
>
> o What are the current thoughts on ACLs globally and with regard to Neutron
> o What people should I engage with (both for neutron and other services
> like keystone)
>
> Thanks in advance to all who reply.
>
> rw2
>
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 
Kevin Benton
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev