[Openstack] Way to see VMs under all tenants by non-admin?
Hey, all. I've had a request for a non-admin user to see all the VMs currently running, irrespective of project. I've gone through the policy.json file (this is Juno) and enabled everything I could think of that seemed appropriate, to no avail. Is there any way to do this without granting him flat-out admin? Thanks! -Ken _______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Hi Ken: https://github.com/openstack/nova/blob/juno-eol/nova/api/openstack/compute/s... Good luck (with your upgrades ;)) Mohammed On Mon, Nov 26, 2018 at 9:39 AM Ken D'Ambrosio <ken@jots.org> wrote:
Hey, all. I've had a request for a non-admin user to see all the VMs currently running, irrespective of project. I've gone through the policy.json file (this is Juno) and enabled everything I could think of that seemed appropriate, to no avail. Is there any way to do this without granting him flat-out admin?
Thanks!
-Ken
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
-- Mohammed Naser — vexxhost ----------------------------------------------------- D. 514-316-8872 D. 800-910-1726 ext. 200 E. mnaser@vexxhost.com W. http://vexxhost.com _______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
On 2018-11-26 10:30, Mohammed Naser wrote:
Hi Ken:
https://github.com/openstack/nova/blob/juno-eol/nova/api/openstack/compute/s...
OK, I feel kinda dumb, but I never realized I could go and search for policy.json policy in the pertinent Python files. That's awesome! Doesn't exactly help me now, but will certainly come in handy in the future. Thanks, -Ken
Good luck (with your upgrades ;))
Mohammed
On Mon, Nov 26, 2018 at 9:39 AM Ken D'Ambrosio <ken@jots.org> wrote:
Hey, all. I've had a request for a non-admin user to see all the VMs currently running, irrespective of project. I've gone through the policy.json file (this is Juno) and enabled everything I could think of that seemed appropriate, to no avail. Is there any way to do this without granting him flat-out admin?
Thanks!
-Ken
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
-- Mohammed Naser -- vexxhost
----------------------------------------------------- D. 514-316-8872 D. 800-910-1726 ext. 200 E. mnaser@vexxhost.com W. http://vexxhost.com [1]
Links: ------ [1] http://vexxhost.com/ _______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
On 11/26/2018 10:07 AM, Ken D'Ambrosio wrote:
OK, I feel kinda dumb, but I never realized I could go and search for policy.json policy in the pertinent Python files. That's awesome! Doesn't exactly help me now, but will certainly come in handy in the future.
Once you get to a release new enough where the policy rules are documented, you shouldn't have to look in the code, e.g.: https://docs.openstack.org/nova/latest/configuration/policy.html Note that ^ is for master (Stein) so you'd need to replace "latest" with whatever release you're on, and we didn't generate those docs in Juno (policy-in-code was added in newton [1]). [1] https://specs.openstack.org/openstack/nova-specs/specs/newton/implemented/po... -- Thanks, Matt
participants (3)
-
Ken D'Ambrosio
-
Matt Riedemann
-
Mohammed Naser