[openstack-dev] [Openstack-operators] [keystone] RBAC usage at production

Edgar Magana edgar.magana at workday.com
Wed Dec 9 17:18:29 UTC 2015


We use RBAC in production but basically modify networking operations and some compute ones. In our case we don’t need to restart the services if we modify the policy.json file. I am surprise that keystone is not following the same process. 

Edgar




On 12/9/15, 9:06 AM, "Kris G. Lindgren" <klindgren at godaddy.com> wrote:

>In other projects the policy.json file is read each time of api request.  So changes to the file take place immediately.  I was 90% sure keystone was the same way?
>
>___________________________________________________________________
>Kris Lindgren
>Senior Linux Systems Engineer
>GoDaddy
>
>
>
>
>
>
>
>On 12/9/15, 1:39 AM, "Oguz Yarimtepe" <oguzyarimtepe at gmail.com> wrote:
>
>>Hi,
>>
>>I am wondering whether there are people using RBAC at production. The 
>>policy.json file has a structure that requires restart of the service 
>>each time you edit the file. Is there and on the fly solution or tips 
>>about it?
>>
>>
>>
>>_______________________________________________
>>OpenStack-operators mailing list
>>OpenStack-operators at lists.openstack.org
>>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>_______________________________________________
>OpenStack-operators mailing list
>OpenStack-operators at lists.openstack.org
>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators


More information about the OpenStack-dev mailing list