[Tacker][SRBAC] Update regarding implementation of project personas in Tacker

Yasufumi Ogawa yasufum.o at gmail.com
Tue Dec 27 19:42:16 UTC 2022


Hi Manpreet-san,

Thanks for your notice. I've started to review and understood this 
change is considered backward compatibility from suggestions on the 
etherpad. Although it's LGTM, I'd like to ask if Yuta has any comment 
for the proposal because he has also propose a policy management feature 
in this release.

For the deadline, let us discuss again to reschedule it if we cannot 
merge the deadline.

Thanks,
Yasufumi

On 2022/12/26 14:07, manpreet kaur wrote:
> Hi Ogawa san and Tacker team,
> 
> This mailer is regarding the SRBAC implementation happening in Tacker.
> 
> In the Tacker release 2023.1 virtual PTG [1], it was decided by the 
> Tacker community to partially implement the project personas 
> (project-reader role) in the current release. And in upcoming releases, 
> we will implement the remaining project-member role.
> 
> To address the above requirement, I have prepared a specification [2] 
> and pushed the same in Gerrit for community review.
> 
> Ghanshyam san reviewed the specification and shared TC's opinion and 
> suggestion to implement both the project-reader and project-member roles.
> The complete persona implementation will depreciate the 'owner' rule, 
> and help in restricting any other role to accessing project-based resources.
> Additionally, intact legacy admin (current admin), works in the same way 
> so that we do not break things and introduce the project personas which 
> should be additional things to be available for operators to adopt.
> 
> Current Status: Incorporated the new requirement and uploaded a new 
> patch set to address the review comment.
> 
> Note: The Tacker spec freeze date is 28th Dec 2022, there might be some 
> delay in merging the specification in shared timelines.
> 
> [1] https://etherpad.opendev.org/p/tacker-antelope-ptg#L186 
> <https://etherpad.opendev.org/p/tacker-antelope-ptg#L186>
> [2] https://review.opendev.org/c/openstack/tacker-specs/+/866956 
> <https://review.opendev.org/c/openstack/tacker-specs/+/866956>
> 
> Thanks & Regards,
> Manpreet Kaur



More information about the openstack-discuss mailing list