Another issue that would need to be addressed here is consistency. You can validate a member by calling out to keystone when it is inserted, but what if immediately after adding that member to an image the tenant is deleted from keystone? I think having the possibility of an error when any given member attempts to access the image is ultimately unavoidable.
Another issue that would need to be addressed here is consistency. You can validate a member by calling out to keystone when it is inserted, but what if immediately after adding that member to an image the tenant is deleted from keystone? I think having the possibility of an error when any given member attempts to access the image is ultimately unavoidable.