OpenStack Congress项目介绍

• github链接：https://github.com/openstack/congress
• wiki链接：https://wiki.openstack.org/wiki/Congress
• 开发者链接：https://docs.openstack.org/developer/congress

Congress简介

Congress是一个基于异构云环境的策略声明、监控、实施、审计的框架（policy-as-a-service）。Congress从云中不同的服务获取数据，输入到congress的策略引擎，从而验证云中的各服务状态是否按照设置的策略运行。

Congress is an open policy framework for the cloud. With Congress, a cloud operator can declare, monitor, enforce, and audit “policy” in a heterogeneous cloud environment. Congress gets inputs from a cloud’s various cloud services; for example in OpenStack, Congress fetches information about VMs from Nova, and network state from Neutron, etc. Congress then feeds input data from those services into its policy engine where Congress verifies that the cloud’s actual state abides by the cloud operator’s policies. Congress is designed to work with any policy and any cloud service.

Congress的架构

参考链接：https://docs.openstack.org/developer/congress/architecture.html

Congress的策略引擎通过不同的驱动同各个服务建立连接。当前支持的服务有：

• OpenStack Aodh
• OpenStack Ceilometer
• OpenStack Cinder
• OpenStack Glance (v2)
• OpenStack Heat
• OpenStack Ironic
• OpenStack Keystone (v2 & v3)
• OpenStack Monasca
• OpenStack Murano
• OpenStack Neutron (v2)
• OpenStack Nova
• OpenStack Swift
• Cloud Foundry
• Plexxi
• vCenter
• OPNFV Doctor

Congress的功能

• 监控云中的策略冲突（monitoring the cloud for policy violations）
• 预防策略冲突（preventing violations before they occur）
• 矫正策略冲突（correcting violations after they occur）

未来，Congress会实现“记录策略及冲突的历史记录”功能用于策略的审计。

Congress的API

参考链接：https://docs.openstack.org/developer/congress/api.html

Congress的安装配置

参考链接：https://docs.openstack.org/developer/congress/README.html#installing-congress