Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Done
-
None
-
None
-
None
Description
Currently in FileAccessPolicyProvider, it is possible to specify a set of node identities, which are given access to /proxy. This works well for static clusters, but does not work so well for dynamic clusters (scaling up/down # of nodes) because we don't know in advance what the node identities will be or how many there will be.
In order to support dynamic sets of node identities, add support for specifying a "Node Group," for which all identities in the group will be granted access to /proxy. A UserGroupProvider can then be implemented to gather node identities dynamically from the cluster environment.
