Two purpose: Make sure the policy enforce_wsgi decorator is called. Make sure the request will be disallowed by policy, when it does not satisfy the policy rule. Co-Authored-By: yuntongjin <firstname.lastname@example.org> Change-Id: I4a4930d7951f416d3553c737c3523c37014d7101 Partial-implements: blueprint policy-enforce
|8 years ago|
|contrib/templates/example||8 years ago|
|devstack||8 years ago|
|doc/source||8 years ago|
|etc/magnum||8 years ago|
|magnum||8 years ago|
|specs||8 years ago|
|tools||8 years ago|
|.coveragerc||8 years ago|
|.gitignore||8 years ago|
|.gitreview||8 years ago|
|.mailmap||8 years ago|
|.testr.conf||8 years ago|
|CONTRIBUTING.rst||8 years ago|
|Dockerfile||8 years ago|
|HACKING.rst||8 years ago|
|LICENSE||8 years ago|
|MANIFEST.in||8 years ago|
|README.rst||8 years ago|
|babel.cfg||8 years ago|
|bandit.yaml||8 years ago|
|functional_creds.conf.sample||8 years ago|
|openstack-common.conf||8 years ago|
|requirements.txt||8 years ago|
|setup.cfg||8 years ago|
|setup.py||8 years ago|
|test-requirements-bandit.txt||8 years ago|
|test-requirements.txt||8 years ago|
|tox.ini||8 years ago|
new Openstack project for containers.
- Free software: Apache license
- Documentation: http://docs.openstack.org/developer/magnum
- Source: http://git.openstack.org/cgit/openstack/magnum
- Bugs: http://bugs.launchpad.net/magnum
- ReST Client: http://git.openstack.org/cgit/openstack/python-magnumclient
There are seven different types of objects in the Magnum system:
- Bay: A collection of node objects where work is scheduled
- BayModel: An object stores template information about the bay which is used to create new bays consistently
- Node: A baremetal or virtual machine where work executes
- Pod: A collection of containers running on one physical or virtual machine
- Service: An abstraction which defines a logical set of pods and a policy by which to access them
- ReplicationController: An abstraction for managing a group of PODs to ensure a specified number of PODs are running
- Container: A docker container
Two binaries work together to compose the Magnum system. The first binary accessed by the python-magnumclient code is the magnum-api ReST server. The ReST server may run as one process or multiple processes. When a ReST request is sent to the client API, the request is sent via AMQP to the magnum-conductor process. The ReST server is horizontally scalable. At this time, the conductor is limited to one process, but we intend to add horizontal scalability to the conductor as well.
The magnum-conductor process runs on a controller machine and connects to a kubernetes or docker ReST API endpoint. The kubernetes and docker ReST API endpoints are managed by the bay object.
When service or pod objects are created, Kubernetes is directly contacted via the k8s ReST API. When container objects are acted upon, the docker ReST API is directly contacted.
- Abstractions for bays, containers, nodes, pods, and services
- Integration with Kubernetes and Docker for backend container technology.
- Integration with Keystone for multi-tenant security.
- Integration with Neutron for k8s multi-tenancy network security.
Installation and Usage
- Getting Started Guides: http://git.openstack.org/cgit/openstack/magnum/tree/doc/source/dev/dev-quickstart.rst