need a way to get a token for acting on behalf of a user to another service
Bug #949467 reported by
Joseph Heck
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
Medium
|
Adam Young |
Bug Description
(vishy) here is the problem I'm trying to solve:
As an admin, I want to trigger a resize for a user (within Nova) or a block-migration command. At some point that command has to interact with external services, in this case glance. So if i need to access that tenant's images, I need a token that is valid for that tenant.
Changed in keystone: | |
milestone: | essex-rc1 → none |
importance: | High → Medium |
assignee: | Joseph Heck (heckj) → nobody |
tags: | added: blueprint |
Changed in keystone: | |
status: | Fix Committed → Fix Released |
Changed in keystone: | |
milestone: | grizzly-rc1 → 2013.1 |
To post a comment you must log in.
from IRC:
vishy: it is extra tricky because I need to be able to auth as an admin
vishy: but then somehow switch to user context when communicating with other services
vishy: so block-migrate is an admin only api