31 Mar
2021
31 Mar
'21
7:37 p.m.
On 3/31/21 2:18 PM, Sean Mooney wrote:
the other anti patter to avoid is centralising all privsep cunciton in a set of common modules that are called into form differnt moduels. nova and neutorn are unfrotunetly both guilty of that too but eventully i would hope that that will be fixed.
I thought this was intentional. It's even mentioned in the docs as a way to make it clear that privileged calls will run in a different context: https://docs.openstack.org/oslo.privsep/victoria/user/index.html#using-a-pri...