yahoo-eng-team team mailing list archive

[Uggla <2089030@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Description
===========
If Nova does not send the user's token alongside Nova's service token, Manila will only recognize Nova as the requestor during access creation. Consequently, the audit trail log will lack information indicating that Nova is acting on behalf of a user request. This is a significant limitation of the current implementation.

More details here:
https://review.opendev.org/c/openstack/nova/+/925277/comment/70fdc461_d0ca71fa


Expected result
===============
Manila called with service token + user token.

Actual result
=============
Manila is called either with service token or user token.


Environment
===========
Epoxy
DevStack

** Affects: nova
     Importance: Undecided
         Status: Triaged

** Changed in: nova
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/2089030

Title:
  Sdk does not call manila with user's token + the service token

Status in OpenStack Compute (nova):
  Triaged

Bug description:
  Description
  ===========
  If Nova does not send the user's token alongside Nova's service token, Manila will only recognize Nova as the requestor during access creation. Consequently, the audit trail log will lack information indicating that Nova is acting on behalf of a user request. This is a significant limitation of the current implementation.

  More details here:
  https://review.opendev.org/c/openstack/nova/+/925277/comment/70fdc461_d0ca71fa

  
  Expected result
  ===============
  Manila called with service token + user token.

  Actual result
  =============
  Manila is called either with service token or user token.

  
  Environment
  ===========
  Epoxy
  DevStack

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/2089030/+subscriptions