yahoo-eng-team team mailing list archive

[Brian Rosmaita <1745905@xxxxxxxxxxxxxxxxxx>]

There was a change in direction with the "Consistent and Secure RBAC"
community goal and system scope will not be implemented across OpenStack
services.  See

https://governance.openstack.org/tc/goals/selected/consistent-and-
secure-rbac.html#direction-change

for details.

** Changed in: cinder
    Milestone: wallaby-2 => None

** Changed in: cinder
       Status: Triaged => Won't Fix

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1745905

Title:
  system scope doesn't work for the service which use project specified
  endpoint

Status in Cinder:
  Won't Fix
Status in OpenStack Identity (keystone):
  Confirmed

Bug description:
  For some project, such as Cinder, the endpoint is project specified, the format is like:
  http://ip/volume/v3/{project_id}/os-services

  There are two problem:
  1. For this kind of endpoint, system-scoped token doesn't work because that there is no project_id in the token.

  2. When issue a system-scoped token, the Cinder's endpoint in the
  token catalog is empty. It means the Cinder service will not be
  discoverable when use system-scoped token.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cinder/+bug/1745905/+subscriptions