Nova assisted snapshot APIs require admin credentials

[Eric Harney]

When calling os-assisted-snapshots APIs, Cinder often (by default) needs to pass an admin token to Nova. Currently it uses the credentials of the current user.

This will cause calls to Nova APIs for assisted volume snapshots to fail.

Configuration options should be added to specify different credentials for talking to Nova.

[Eric Harney (eharney)]

Fixed via https://review.openstack.org/#/c/131741/ ?

[Deepak C Shetty (dpkshetty)]

@Eric,
  We tried to use the os_priviledge_XXX options but it hasn't worked yet for us. We were able to get thru the policy check (meaning we no longer get the policy error) but still getting some HTTP Un-authorized error.

Bharat will look into this more to figure the right way of using these params and update here.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/156940

[Bharat Kumar Kobagana (bharat-kobagana)]

@Eric:

Adrien Vergé's patch [1] takes care of sending privileged user credentials to nova.

But to avail this feature we need to set "priviliged_user=True" while creating assisted snapshots. The patch [2] does the same.

[1] https://review.openstack.org/#/c/131741/
[2] https://review.openstack.org/156940

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/156940
Committed: https://git.openstack.org/cgit/openstack/cinder/commit/?id=53705632509cc93e87378c32c703c8d8d8d05b79
Submitter: Jenkins
Branch: master

commit 53705632509cc93e87378c32c703c8d8d8d05b79
Author: Bharat Kumar Kobagana <email address hidden>
Date: Wed Feb 18 16:16:28 2015 +0530

    Passing privileged user to create nova assisted snapshots

    This patch passes privileged user to create nova assisted
    snapshots. We can pass privileged user credentials through
    cinder.conf as below:
      os_privileged_user_name = <user>
      os_privileged_user_password = <password>
      os_privileged_user_tenant = <tenant>

    Closes-Bug: 1308736
    Change-Id: I004f3962f7c83113bed6bd9e3ccd002f017bd260