RFE: Expand endpoint filters to service providers

[Lance Bragstad]

(Original specification and blueprint was written by Rodrigo Duarte and Marek Denis)

Endpoint filtering is a keystone extension since the Havana release, in Juno it was expanded by the Multi-Attribute Endpoint Grouping spec [1] that improves the filtering flexibility.

Since Kilo, we added the concept of Service Providers to keystone, the list of such resources is returned in the token alongside the service catalog [2]. In Liberty we are proposing to extend endpoints filtering to also support Service Providers [3]. This should not bring API nor model changes, just extra checks to the endpoint filter controller/backend.

[1] https://github.com/openstack/keystone-specs/blob/master/specs/juno/endpoint-group-filter.rst
[2] https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst#authentication-responses
[3] https://review.openstack.org/#/c/188534/

[Lance Bragstad (lbragstad)]

Specification review: https://review.openstack.org/#/c/188534/
Specification doc: http://specs.openstack.org/openstack/keystone-specs/specs/keystone/backlog/service-providers-filters.html

[Lance Bragstad (lbragstad)]

Patches that work toward this initiative:

Service Providers and Projects associations: https://review.openstack.org/264854
Create V9 version of catalog driver interface: https://review.openstack.org/269455
Service Providers Group CRUD operations: https://review.openstack.org/273438
Service providers groups associations: https://review.openstack.org/275636