OpenStack Security Notes

  1. Bug #1464750
  2. Comment #15

Comment 15 for bug 1464750

Revision history for this message
Travis McPeak (travis-mcpeak) wrote :

OK - just to make sure I'm understanding the problem correctly (and can thus write a clear note) - this OSSN should document that:

in some configurations (all Keystone v2, some configurations of Keystone v3, Nova, Neutron) the service accounts are full cloud admin users. This means that they can perform all actions including logging in to Horizon.

Is this a fair assessment?