Skip to content

dnguyenutsa/ProvService

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

sios

SIOS PDP service for Openstack

This service will act as a Policy Decision Point (PDP) for any OpenStack service.
A OpenStack service's Policy Enforcement engine will make a REST call to SIOS PDP service for a Policy Decision.
The SIOS PDP service will always respond with a 'True' of 'False' as a result of the Policy Query.
In addition to the standard OpenStack HTTP headers, the follwing two HTTP headers are required by SIOS PDP api:

  1. 'X-Action'
  2. 'X-Target'

To be able to use this service do the following:
1.) Copy sios/etc to /etc/sios
sudo cp /opt/stack/sios/etc/* /etc/sios/.
2.) Create a directory called /var/cache/sios and give it 777 permission (chmod 777 /var/cache/sios)
3.) Create a user [sios] with password [admin] in the service tenant with 'admin' role
4.) Create a service called 'sios' in Keystone
5.) Update the policy.py file for glance service to use sios PDP api for Policy Decisions:
wget -O /opt/stack/glance/glance/api/policy.py https://raw.github.com/fpatwa/sios/master/external_service_policy_files/glance/policy.py
6.) Update the policy.py file for nova service to use sios PDP api for Policy Decisions:
wget -O /opt/stack/nova/nova/policy.py https://raw.github.com/fpatwa/sios/master/external_service_policy_files/nova/policy.py
7.) To start the SIOS service run the following command:
cd /opt/stack/sios; /opt/stack/sios/bin/sios-api --config-file=/etc/sios/sios-api.conf || touch "/opt/stack/status/stack/sios-api.failure"
8.) Restart nova api and glance api services (from screen)

To Test Usage:

  • Run nova commands (e.g. nova list)
  • Run glance commands (e.g glance image-list)

About

A provenance service for collecting raw provenance data and capturing as graph model data.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages