<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
Hi Madhu,
<div><br>
</div>
<div>For the alpha release (due soon), we’re focusing on just monitoring policy violations—we’ve disabled all the enforcement code in master. (Though we never actually hooked up the enforcement policy to the real world, so all Congress has ever done is compute
what actions to take to enforce policy.) There’s a ton of interest in enforcement, so we’re planning to add enforcement features to the beta release.</div>
<div><br>
</div>
<div>Tim</div>
<div><br>
</div>
<div><br>
<div>
<div>On Aug 21, 2014, at 7:07 AM, Madhu Mohan <<a href="mailto:mmohan@mvista.com">mmohan@mvista.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>Hi,<br>
<br>
</div>
<div>I am quite new to the Congress and Openstack as well and this question may seem very trivial and basic.
<br>
<br>
I am trying to figure out the policy enforcement logic,<br>
<br>
</div>
Can some body help me understand how exactly, a policy enforcement action is taken.<br>
<br>
</div>
>From the example policy there is an action defined as:<br>
<br>
</div>
<i>action("disconnect_network")<br>
nova:network-(vm, network) :- disconnect_network(vm, network)<br>
</i><br>
</div>
I assume that this statement when applied would translate to deletion of entry in the database.
<br>
</div>
<br>
</div>
But, how does this affect the actual setup (i.e) How is this database update translated to actual disconnection of the VM from the network.
<br>
</div>
<div>How does nova know that it has to disconnect the VM from the network ?<br>
</div>
<div><br>
</div>
Thanks and Regards,<br>
</div>
Madhu Mohan<br>
<div>
<div>
<div><br>
<div><br>
<br>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<br>
</blockquote>
</div>
<br>
</div>
</body>
</html>