Add a privileged user for OpenStack services
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openstack-manuals |
Fix Released
|
Low
|
Tom Fifield |
Bug Description
https:/
commit 04003d7c513ed4d
Author: Adrien Vergé <email address hidden>
Date: Tue Oct 28 20:35:54 2014 +0100
Add a privileged user for OpenStack services
Currently Cinder makes all requests to other services (Nova, Swift,
etc.) with current user context. Sometimes Cinder needs privileged
rights for external queries (e.g. asking Nova where an instance is
hosted); there is no way to do it yet.
This patch adds to ability to configure an account with special rights
in the configuration ('os_privileged
'os_
Then, requests that need special permissions can be achieved by creating
a client(
Note: This user does not necessarily need to have an admin role
associated with it. For instance, policies can be changed to allow a
specific user (without any roles) to perform special actions.
DocImpact: New configuration options to set a privileged user account
Change-Id: I61d8a6de1c5db5
This will be picked up by the next run of the autogenerate- config- docs