[openstack-dev] [Nova] nova lock vs. disable_terminate?

Andy Hill hillad at gmail.com
Mon May 6 16:03:10 UTC 2013


Greetings,

I wanted to open a discussion on how Nova can prevent users and
administrators from accidental instance deletion.

https://blueprints.launchpad.net/nova/+spec/ability-to-set-disable-terminate

Russell brought up a good point on this blueprint that there's already
'nova lock', but it looks like a locked instance can still be deleted by an
administrator.

Compute's API already implements disable_terminate, but there's no way to
set it via Nova API.

https://github.com/openstack/nova/blob/master/nova/compute/api.py#L1038

There could be two ways to go about implementing disable_terminate:

- nova lock <uuid> --disable_terminate could set disable_terminate on the
instance (admin only)
- nova disable_terminate <uuid>

Thoughts?

-- 
Andy Hill
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130506/b93277dc/attachment.html>


More information about the OpenStack-dev mailing list