On Tue, Nov 26, 2019 at 9:26 PM Matt Riedemann mriedemos@gmail.com wrote:
Note that the APIs that would change are admin-only by default. So in this case nova is configured with a service user to check if the requested project_id exists on behalf of the (admin) user making the compute API request to add/remove flavor access (or update quota values for a project). The service user does not have enough permissions in keystone to check if the project exists. Option 1 is give that service user more authority. Option 2 is basically re-raise that error to the compute (admin) user to let them know they basically need to fix their deployment (option 1 again).
A combo of both solutions where we raise the error to the user and amend our docs to help them fix it seems good to me.
I don't think a microversion is necessary for this
++
----------
Cheers, Surya.