Provide Config for External FW Appliance
Cross Project Spec - None
User Story Tracker - None
Problem Description
Problem Definition
As a deployer of an OpenStack cloud I have to provide a specific network
configuration file to my network security team in order to enable appropriate
traffic to my cloud. At the moment I have to cobble together this configuration
from my deployment configuration. It would be much easier to programmatically
generate the bulk of this information as part of the deployment process or from
an available OpenStack service on demand.
Opportunity/Justification
None.
Requirements Specification
Use Cases
This section utilizes the OpenStack UX Personas.
- As Rey the Cloud Operator, I want to be able to access a configuration description that I
can provide to my network security team to properly configure any external
firewalls so that my users can quickly begin accessing the cloud.
- As the network security team for Rey, I want to be able to easily
consume the firewall configuration provided in a standard format, so that I
have minimal effort required to appropriately configure the firewall
Usage Scenarios Examples
- Initial Cloud Deployment
- Deploy cloud using deployment configuration
- Access templated firewall configuration from OpenStack service
- Provide configuration to internal network security team
- Network security team easily interprets configuration and configures FW
External References
None.
Rejected User Stories / Usage Scenarios
None.