[Openstack-operators] [openstack-dev] [nova][cinder] Disabling nova volume-update (aka swap volume; aka cinder live migration)

Matt Riedemann mriedemos at gmail.com
Fri Aug 24 21:23:06 UTC 2018


On 8/21/2018 5:36 AM, Lee Yarwood wrote:
> I'm definitely in favor of hiding this from users eventually but
> wouldn't this require some form of deprecation cycle?
> 
> Warnings within the API documentation would also be useful and even
> something we could backport to stable to highlight just how fragile this
> API is ahead of any policy change.

The swap volume API in nova defaults to admin-only policy rules by 
default, so for any users that are using it directly, they are (1) 
admins knowingly shooting themselves, or their users, in the foot or (2) 
operators have opened up the policy to non-admins (or some other role of 
user) to hit the API directly. I would ask why that is.

-- 

Thanks,

Matt



More information about the OpenStack-operators mailing list