Auto service policies deletion after service delete

1

Hi,
I deleted a service from Services but the polices of that service were remained.

So is this normal? Or It should auto remove polices upon service deletion?

Like when it does for identity, if the identity is deleted then it removes the identity from the service.

Thank you

2

Yes this is normal. Often, after getting used to OpenZiti, you'll find yourself using attributes for policies and not direct mentions (# vs @). In that situation, you just need to materialize new identities and assign the proper attribute. Once complete the new identity has access via the policy (that wasn't deleted). Since it's impossible for us to know a user's intent, the policy remains. If you use attribute-based policies, the identity mapping won't be removed from the service policy when you remove identities. Hopefully that makes sense. Cheers

1 Like
3

Thank you very much for explaining.