[openstack-dev] [Congress] Policy Enforcement logic

Madhu Mohan mmohan at mvista.com
Thu Aug 21 14:07:53 UTC 2014


I am quite new to the Congress and Openstack as well and this question may
seem very trivial and basic.

I am trying to figure out the policy enforcement logic,

Can some body help me understand how exactly, a policy enforcement action
is taken.

>From the example policy there is an action defined as:

*action("disconnect_network")nova:network-(vm, network) :-
disconnect_network(vm, network) *
I assume that this statement when applied would translate to deletion of
entry in the database.

But, how does this affect the actual setup (i.e) How is this database
update translated to actual disconnection of the VM from the network.
How does nova know that it has to disconnect the VM from the network ?

Thanks and Regards,
Madhu Mohan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140821/5606eb5d/attachment.html>

More information about the OpenStack-dev mailing list