Comment 9 for bug 1498163

Revision history for this message
Mike Fedosin (mfedosin) wrote : Re: Glance storage quota bypass when token is expired

Hi again Tristan :)

Token lifetime is not user-controllable, indeed. But user can avoid it by waiting a decent amount of time.
Example:
Let's assume that token lifetime is set for one hour, which is default for Keystone, and user quota is 5,5Gb. To exceed the quota user gets the token (with 'keystone token-get') and waits for 55 minutes, after that he consecutively creates and deletes 5Gb images each 3 seconds. After 5 minutes his token expires, but uploading of all images continues. And when server wants to update theirs status from 'saving' to 'active' it fails with 500 error and clogs the storage.

Also please add Alexei Galkin as reporter, too - because it's he, who originally found this bug. He works in Mirantis as well.