Policies are deployed to PDP Group/Subgroup as an atomic unit.
All members of a given PDP group/subgroup enforce the same set of policies.
PDP-X and PDP-A provides REST URLs as entry points for clients such as DCAE to trigger policy execution. The URL entry point is provided by a Kubernetes service.
The two service URLs for PDP-X and PDP-A respectively, will route the request to one of its PDPs. There is no problem at this point as only one group (default) is in use.
When multiple groups are provisioned (new in R6), requests routing needs to be performed so it ends up in the right PDP (in the right group).
The issues to resolve are:
- Do clients, such as DCAE, need any special configuration so the request ends in the a PDP within the group that knows that handles it?
- How to route requests within the Policy subsystem so the client's request is dispatched to the right PDP in the right PDP group?