need a way to get a token for acting on behalf of a user to another service
Bug #949467 reported by
Joseph Heck
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| OpenStack Identity (keystone) |
Fix Released
|
Medium
|
Adam Young | ||
Bug Description
(vishy) here is the problem I'm trying to solve:
As an admin, I want to trigger a resize for a user (within Nova) or a block-migration command. At some point that command has to interact with external services, in this case glance. So if i need to access that tenant's images, I need a token that is valid for that tenant.
Revision history for this message
| Joseph Heck (heckj) wrote | #1 |
| Changed in keystone: | |
| milestone: | essex-rc1 → none |
| importance: | High → Medium |
| assignee: | Joseph Heck (heckj) → nobody |
| tags: | added: blueprint |
Revision history for this message
| Dolph Mathews (dolph) wrote | #2 |
| Changed in keystone: | |
| assignee: | nobody → Adam Young (ayoung) |
| milestone: | none → grizzly-rc1 |
| status: | Confirmed → Fix Committed |
| Changed in keystone: | |
| status: | Fix Committed → Fix Released |
| Changed in keystone: | |
| milestone: | grizzly-rc1 → 2013.1 |
To post a comment you must log in.
from IRC:
vishy: it is extra tricky because I need to be able to auth as an admin
vishy: but then somehow switch to user context when communicating with other services
vishy: so block-migrate is an admin only api