[Openstack-operators] [keystone] RBAC usage at production

Oğuz Yarımtepe oguzyarimtepe at gmail.com
Tue Dec 29 08:28:59 UTC 2015


Using a middleware is what we are doing also. Can you give more details
about your structure? Our middleware is like the Rackspace OpenRepose. What
do you use for role definitions? Are you using any backend for Keystone
like LDAP?

Regards.



On Thu, Dec 10, 2015 at 9:55 PM, Jesse Keating <jlk at bluebox.net> wrote:

> We use RBAC, however we've done it based on roles and some middleware. The
> policy files are essentially static.
>
>
> - jlk
>
> On Wed, Dec 9, 2015 at 12:39 AM, Oguz Yarimtepe <oguzyarimtepe at gmail.com>
> wrote:
>
>> Hi,
>>
>> I am wondering whether there are people using RBAC at production. The
>> policy.json file has a structure that requires restart of the service each
>> time you edit the file. Is there and on the fly solution or tips about it?
>>
>>
>>
>> _______________________________________________
>> OpenStack-operators mailing list
>> OpenStack-operators at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>
>
>


-- 
Oğuz Yarımtepe
http://about.me/oguzy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20151229/7a45cd41/attachment.html>


More information about the OpenStack-operators mailing list