)]}'
{"specs/backlog/dynamic-policies-delivering-mechanism.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"0fb18885d467a7ff3884ebfdbd2498e6c8e5142e","unresolved":false,"context_lines":[{"line_number":121,"context_line":"* Does this change have an impact on python-keystoneclient? What does the user"},{"line_number":122,"context_line":"  interface there look like?"},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"Performance Impact"},{"line_number":125,"context_line":"------------------"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"Describe any potential performance impact on the system, for example"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_9c29bd8c","line":124,"updated":"2015-07-02 13:51:39.000000000","message":"this section seems important to me for the policy work, you should explain how you plan on creating/measuring a benchmark for the current policy mechanisms and then include the results when you are prototyping your work.","commit_id":"0cbb9de3096eb9d8460437d46aab91527b86fc7e"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"07bc66714d407077177b048275e97354fd53b50b","unresolved":false,"context_lines":[{"line_number":29,"context_line":"OpenStack features like ``Dynamic Policies`` to enable them in her cloud."},{"line_number":30,"context_line":""},{"line_number":31,"context_line":"With that feature, she expects to be able to define her custom policy rules in"},{"line_number":32,"context_line":"``Keystone Server`` and have those applied to service endpoints transparently."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Behind the scenes, ``Keystone Middleware`` will fetch the ``Dynamic Policy``,"},{"line_number":35,"context_line":"which contains the custom policy rules, for the service it is serving and ask"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a50d1a3_b8515738","line":32,"updated":"2015-07-22 09:08:46.000000000","message":"The above two paragraphs do not describe the problem we are trying to solve here - it says what she will do, not why she wants to do it.  What business problem is she struggling with that we are solving.","commit_id":"90320f49018a1cbf2e068a1967600df5d5016bb3"},{"author":{"_account_id":9142,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@lsd.ufcg.edu.br","username":"samuel-z","inactive":true},"change_message_id":"659ca3ec73e0d210283fd62b4aaaffccf2475e6c","unresolved":false,"context_lines":[{"line_number":29,"context_line":"OpenStack features like ``Dynamic Policies`` to enable them in her cloud."},{"line_number":30,"context_line":""},{"line_number":31,"context_line":"With that feature, she expects to be able to define her custom policy rules in"},{"line_number":32,"context_line":"``Keystone Server`` and have those applied to service endpoints transparently."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Behind the scenes, ``Keystone Middleware`` will fetch the ``Dynamic Policy``,"},{"line_number":35,"context_line":"which contains the custom policy rules, for the service it is serving and ask"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a50d1a3_138f022b","line":32,"in_reply_to":"3a50d1a3_b8515738","updated":"2015-07-22 12:18:50.000000000","message":"Done","commit_id":"90320f49018a1cbf2e068a1967600df5d5016bb3"},{"author":{"_account_id":1941,"name":"Lin Hua Cheng","email":"os.lcheng@gmail.com","username":"lin-hua-cheng"},"change_message_id":"4d557f5e7b5ef3e3f2d403cd39bb1a4f8b021aee","unresolved":false,"context_lines":[{"line_number":10,"context_line":""},{"line_number":11,"context_line":"`bp dynamic-policies-delivery \u003chttps://blueprints.launchpad.net/keystone/+spec/dynamic-policies-delivery\u003e`_"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"This spec defines the Keystone server side implementation of the Centralized"},{"line_number":14,"context_line":"Policy distribution as defined by the spec `Centralized Policies Fetch and Cache \u003chttps://review.openstack.org/#/c/134655/\u003e`_."},{"line_number":15,"context_line":"Please refer to it for further background, motivation and use case information."},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_039f4d66","line":13,"updated":"2015-07-30 03:27:35.000000000","message":"keystone and identity server is being used interchangeably in the doc, keep it consistent","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":9142,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@lsd.ufcg.edu.br","username":"samuel-z","inactive":true},"change_message_id":"6f2f46e7e6e02b3fb6c41abc378263137cc119cb","unresolved":false,"context_lines":[{"line_number":10,"context_line":""},{"line_number":11,"context_line":"`bp dynamic-policies-delivery \u003chttps://blueprints.launchpad.net/keystone/+spec/dynamic-policies-delivery\u003e`_"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"This spec defines the Keystone server side implementation of the Centralized"},{"line_number":14,"context_line":"Policy distribution as defined by the spec `Centralized Policies Fetch and Cache \u003chttps://review.openstack.org/#/c/134655/\u003e`_."},{"line_number":15,"context_line":"Please refer to it for further background, motivation and use case information."},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_80725aaf","line":13,"in_reply_to":"3a50d1a3_039f4d66","updated":"2015-07-30 13:42:03.000000000","message":"Changed to Identity server ...","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":1941,"name":"Lin Hua Cheng","email":"os.lcheng@gmail.com","username":"lin-hua-cheng"},"change_message_id":"4d557f5e7b5ef3e3f2d403cd39bb1a4f8b021aee","unresolved":false,"context_lines":[{"line_number":23,"context_line":"Problem Description"},{"line_number":24,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Please refer to the Keystone Middleware spec."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"Proposed Change"}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_a2a8da8d","line":26,"updated":"2015-07-30 03:27:35.000000000","message":"should all Keystone Middleware spec be changed to a link instead or some link to show the user the link in the Reference section?","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":9142,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@lsd.ufcg.edu.br","username":"samuel-z","inactive":true},"change_message_id":"6f2f46e7e6e02b3fb6c41abc378263137cc119cb","unresolved":false,"context_lines":[{"line_number":23,"context_line":"Problem Description"},{"line_number":24,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Please refer to the Keystone Middleware spec."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"Proposed Change"}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_60f62efb","line":26,"in_reply_to":"3a50d1a3_a2a8da8d","updated":"2015-07-30 13:42:03.000000000","message":"Done","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":1941,"name":"Lin Hua Cheng","email":"os.lcheng@gmail.com","username":"lin-hua-cheng"},"change_message_id":"4d557f5e7b5ef3e3f2d403cd39bb1a4f8b021aee","unresolved":false,"context_lines":[{"line_number":63,"context_line":"Centralized Policy, Keystone server will create versions of policies, which are"},{"line_number":64,"context_line":"released every checkpoint."},{"line_number":65,"context_line":""},{"line_number":66,"context_line":"When a policy request hits Keystone server, it will deliver the last relased"},{"line_number":67,"context_line":"policy, ensuring that different endpoints asking the server at different times"},{"line_number":68,"context_line":"inside the ``policy_cache_time`` slice will get the same policy."},{"line_number":69,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_c396453e","line":66,"updated":"2015-07-30 03:27:35.000000000","message":"typo: released","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":9142,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@lsd.ufcg.edu.br","username":"samuel-z","inactive":true},"change_message_id":"6f2f46e7e6e02b3fb6c41abc378263137cc119cb","unresolved":false,"context_lines":[{"line_number":63,"context_line":"Centralized Policy, Keystone server will create versions of policies, which are"},{"line_number":64,"context_line":"released every checkpoint."},{"line_number":65,"context_line":""},{"line_number":66,"context_line":"When a policy request hits Keystone server, it will deliver the last relased"},{"line_number":67,"context_line":"policy, ensuring that different endpoints asking the server at different times"},{"line_number":68,"context_line":"inside the ``policy_cache_time`` slice will get the same policy."},{"line_number":69,"context_line":""}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_40c8d2a8","line":66,"in_reply_to":"3a50d1a3_c396453e","updated":"2015-07-30 13:42:03.000000000","message":"Done","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":1941,"name":"Lin Hua Cheng","email":"os.lcheng@gmail.com","username":"lin-hua-cheng"},"change_message_id":"4d557f5e7b5ef3e3f2d403cd39bb1a4f8b021aee","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":"When a policy request hits Keystone server, it will deliver the last relased"},{"line_number":67,"context_line":"policy, ensuring that different endpoints asking the server at different times"},{"line_number":68,"context_line":"inside the ``policy_cache_time`` slice will get the same policy."},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"As a side effect, policy updates happening between two checkpoints will only"},{"line_number":71,"context_line":"take effect in the next release of that policy."}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_a3f3f99e","line":68,"updated":"2015-07-30 03:27:35.000000000","message":"I am curious how will this work if there are multiple keystone running? But that is in the details and not in scope for here.","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":9142,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@lsd.ufcg.edu.br","username":"samuel-z","inactive":true},"change_message_id":"6f2f46e7e6e02b3fb6c41abc378263137cc119cb","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":"When a policy request hits Keystone server, it will deliver the last relased"},{"line_number":67,"context_line":"policy, ensuring that different endpoints asking the server at different times"},{"line_number":68,"context_line":"inside the ``policy_cache_time`` slice will get the same policy."},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"As a side effect, policy updates happening between two checkpoints will only"},{"line_number":71,"context_line":"take effect in the next release of that policy."}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_e0febead","line":68,"in_reply_to":"3a50d1a3_a3f3f99e","updated":"2015-07-30 13:42:03.000000000","message":"I don\u0027t know what aspect you are wondering about specifically, but I think it will work as any other API. If there are multiple servers, they will likely need to share the database, their times are the same, etc.","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":9142,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@lsd.ufcg.edu.br","username":"samuel-z","inactive":true},"change_message_id":"756acaa822cb6045d8df5f4271fd1cf006dbe5dc","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":"When a policy request hits Keystone server, it will deliver the last relased"},{"line_number":67,"context_line":"policy, ensuring that different endpoints asking the server at different times"},{"line_number":68,"context_line":"inside the ``policy_cache_time`` slice will get the same policy."},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"As a side effect, policy updates happening between two checkpoints will only"},{"line_number":71,"context_line":"take effect in the next release of that policy."}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_b5b9c47b","line":68,"in_reply_to":"3a50d1a3_aa472cbb","updated":"2015-07-30 20:02:43.000000000","message":"Yes that\u0027s how I see it, we\u0027d store the last released copy in another table.","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":1941,"name":"Lin Hua Cheng","email":"os.lcheng@gmail.com","username":"lin-hua-cheng"},"change_message_id":"407c603c924d8e0619ef1b27769be3be1d32b400","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":"When a policy request hits Keystone server, it will deliver the last relased"},{"line_number":67,"context_line":"policy, ensuring that different endpoints asking the server at different times"},{"line_number":68,"context_line":"inside the ``policy_cache_time`` slice will get the same policy."},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"As a side effect, policy updates happening between two checkpoints will only"},{"line_number":71,"context_line":"take effect in the next release of that policy."}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_1ae8d515","line":68,"in_reply_to":"3a50d1a3_b5b9c47b","updated":"2015-07-31 06:32:23.000000000","message":"cool, thanks for the clarification","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"},{"author":{"_account_id":1941,"name":"Lin Hua Cheng","email":"os.lcheng@gmail.com","username":"lin-hua-cheng"},"change_message_id":"d2efdc078c0dbc9a4b50ff9e8506eb2fff27e222","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":"When a policy request hits Keystone server, it will deliver the last relased"},{"line_number":67,"context_line":"policy, ensuring that different endpoints asking the server at different times"},{"line_number":68,"context_line":"inside the ``policy_cache_time`` slice will get the same policy."},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"As a side effect, policy updates happening between two checkpoints will only"},{"line_number":71,"context_line":"take effect in the next release of that policy."}],"source_content_type":"text/x-rst","patch_set":10,"id":"3a50d1a3_aa472cbb","line":68,"in_reply_to":"3a50d1a3_e0febead","updated":"2015-07-30 16:44:01.000000000","message":"I am more interested how will keystone keep the last release copy, so initially thought it would be on the server memory, based from your respose I guess it would be stored in the database then.","commit_id":"ed38d0a1a11dd1e627ae2203d5f6b56da7054b79"}]}