Re: [openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread Davanum Srinivas
nstack-dev] [openstack][oslo.policy] A new Keystone-Oslo > hook for external PDP > > Ruan, > > Have you prototyped to see if you have all the information you need is > available in the context (or can be gathered from Nova)? > ( quickly check what the existing HttpCheck mechan

Re: [openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread ruan.he
(not for usage questions) Cc: DUVAL Thomas OBS/OAB Subject: Re: [openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP Ruan, Have you prototyped to see if you have all the information you need is available in the context (or can be gathered from Nova)? ( quickly check

Re: [openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread Davanum Srinivas
Ruan, Have you prototyped to see if you have all the information you need is available in the context (or can be gathered from Nova)? ( quickly check what the existing HttpCheck mechanism sends over the wire ) Thanks, Dims On Thu, Aug 10, 2017 at 10:17 AM, wrote: > Hello,

[openstack-dev] [openstack][oslo.policy] A new Keystone-Oslo hook for external PDP

2017-08-10 Thread ruan.he
Hello, We would like to have an external and centralized security policy engine (PDP) that can pilot both OpenStack and SDN controllers. For this reason, we have developed and upstreamed a hook for the new OpenDaylight release Carbon (https://git.opendaylight.org/gerrit/#/c/46146/), and we'd