RFE: Expand endpoint filters to service providers

Bug #1816165 reported by Lance Bragstad on 2019-02-15
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)

Bug Description

(Original specification and blueprint was written by Rodrigo Duarte and Marek Denis)

Endpoint filtering is a keystone extension since the Havana release, in Juno it was expanded by the Multi-Attribute Endpoint Grouping spec [1] that improves the filtering flexibility.

Since Kilo, we added the concept of Service Providers to keystone, the list of such resources is returned in the token alongside the service catalog [2]. In Liberty we are proposing to extend endpoints filtering to also support Service Providers [3]. This should not bring API nor model changes, just extra checks to the endpoint filter controller/backend.

[1] https://github.com/openstack/keystone-specs/blob/master/specs/juno/endpoint-group-filter.rst
[2] https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst#authentication-responses
[3] https://review.openstack.org/#/c/188534/

Tags: rfe Edit Tag help
Lance Bragstad (lbragstad) wrote :

Patches that work toward this initiative:

Service Providers and Projects associations: https://review.openstack.org/264854
Create V9 version of catalog driver interface: https://review.openstack.org/269455
Service Providers Group CRUD operations: https://review.openstack.org/273438
Service providers groups associations: https://review.openstack.org/275636

Changed in keystone:
status: New → Triaged
importance: Undecided → Wishlist
tags: added: rfe
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers