Same Keypairs accessible in multiple projects assigned to same user

[Sharath Rao]

If I have two projects assigned to the same user in Horizon Dashboard.
Each project has a separate ID, separate set of VMs and different floating IPs and different security rules assigned.

But, The Keypairs are being shared for both the projects are the same.

This is causing an issue since this implies that I can access VMs belonging to different projects using the same key pair.
Also, i cannot add new keypairs for a particular project as its becoming visible in both the projects.

[Akihiro Motoki (amotoki)]

In Nova, each keypair belongs to a user not a project. It is a nova behavior. In my understanding, the behavior is reasonable because sharing a keypair means all folks in a project share one private key and it is not a good idea from security perspective. If you need to share a VM, you can add ssh public keys to VM's authorized_key to share a VM.

I mark this bug "Won't fix" as Horizon.
If you need to discuss this behavior further, please discuss it on ML or add Nova to "affected projects".

[Sharath Rao (sharath-rao)]

Adding Nova as per Akihiro's comments above.
Also, if a single user is managing multiple projects it makes sense to separate the keys per project rather than per user.

[Eric Brown (ericwb)]

SSH keys are tied to the user, not project. Users span across projects, but not keystone domains. I see nothing wrong in the current behavior.