We are running keystone kilo in production, and I¹m actively implementing RBAC right now. I¹m certain that, at least with the version of keystone we¹re running, a restart is NOT required when the policy file is modified.
Tim On 12/9/15, 9:18 AM, "Edgar Magana" <edgar.mag...@workday.com> wrote: >We use RBAC in production but basically modify networking operations and >some compute ones. In our case we don¹t need to restart the services if >we modify the policy.json file. I am surprise that keystone is not >following the same process. > >Edgar > > > > >On 12/9/15, 9:06 AM, "Kris G. Lindgren" <klindg...@godaddy.com> wrote: > >>In other projects the policy.json file is read each time of api request. >> So changes to the file take place immediately. I was 90% sure keystone >>was the same way? >> >>___________________________________________________________________ >>Kris Lindgren >>Senior Linux Systems Engineer >>GoDaddy >> >> >> >> >> >> >> >>On 12/9/15, 1:39 AM, "Oguz Yarimtepe" <oguzyarimt...@gmail.com> wrote: >> >>>Hi, >>> >>>I am wondering whether there are people using RBAC at production. The >>>policy.json file has a structure that requires restart of the service >>>each time you edit the file. Is there and on the fly solution or tips >>>about it? >>> >>> >>> >>>_______________________________________________ >>>OpenStack-operators mailing list >>>openstack-operat...@lists.openstack.org >>>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators >>_______________________________________________ >>OpenStack-operators mailing list >>openstack-operat...@lists.openstack.org >>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators >__________________________________________________________________________ >OpenStack Development Mailing List (not for usage questions) >Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev