Add a privileged user for OpenStack services

Bug #1406589 reported by OpenStack Infra
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openstack-manuals
Fix Released
Low
Tom Fifield

Bug Description

https://review.openstack.org/131741
commit 04003d7c513ed4dd5129cbd5ad1af14a5b200677
Author: Adrien Vergé <email address hidden>
Date: Tue Oct 28 20:35:54 2014 +0100

    Add a privileged user for OpenStack services

    Currently Cinder makes all requests to other services (Nova, Swift,
    etc.) with current user context. Sometimes Cinder needs privileged
    rights for external queries (e.g. asking Nova where an instance is
    hosted); there is no way to do it yet.

    This patch adds to ability to configure an account with special rights
    in the configuration ('os_privileged_user_name',
    'os_privileged_user_password' and 'os_privileged_user_tenant' options).
    Then, requests that need special permissions can be achieved by creating
    a client(privileged_user=True).

    Note: This user does not necessarily need to have an admin role
    associated with it. For instance, policies can be changed to allow a
    specific user (without any roles) to perform special actions.

    DocImpact: New configuration options to set a privileged user account
    Change-Id: I61d8a6de1c5db5ee2ecce124997f9b6447b04e47

Revision history for this message
Tom Fifield (fifieldt) wrote :

This will be picked up by the next run of the autogenerate-config-docs

Changed in openstack-manuals:
status: New → Triaged
importance: Undecided → Low
milestone: none → kilo
tags: added: autogenerate-config-docs
Changed in openstack-manuals:
assignee: nobody → Tom Fifield (fifieldt)
status: Triaged → In Progress
Revision history for this message
Tom Fifield (fifieldt) wrote :

This was picked up by the recent autogenerate-config-doc run.

Changed in openstack-manuals:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.