Proposal for capabilities

SSH is a verb ("access container remotely") with parameters ("get shell", "execute command /foo/bar")

----- Original Message -----
> > +
> > +1. Features that are turned on/off for the whole openshift deployment
> > +2. Global resource constraints, ex: setting a minimum allocatable size per
> > container for a given system resource (mem / cpu / disk)
> > +
> > +## Project (namespace) level capabilities
> > +Capabilities for the project will consist of two main types:
> > +
> > +1. Features that are turned on/off for the project
> > +2. Resource constraints
> > +
> > +Resource constraints for the project will be stored on the
> > “ResourceController” associated with the namespace.  The
> > ResourceController is the same object used by the admission control
> > system, both to check allowed usage and to store actual usage.
> > +
> > +## Account level capabilities
> > +Account is a separate entity from user, many users might be associated
> > with a single account, and users will have a role on the account.
> > +
> > +Once we have accounts, they will have a ResourceController associated with
> > them.
> 
> Can ssh would be policy, which is dependent on who you are.  Account is
> really tied to billing, its the entity that will get billed, so it has a set
> of constraints on resources that can be allocated across everything owned by
> the account.
> 
> ---
> Reply to this email directly or view it on GitHub:
> https://github.com/openshift/origin/pull/569/files#r22045890