[openstack-dev] What should be Neutron behavior with scoped token?
Ravi Chunduru
ravivsn at gmail.com
Fri Oct 4 17:16:54 UTC 2013
Does the described behavior qualify as a bug?
Thanks,
-Ravi.
On Thu, Oct 3, 2013 at 5:21 PM, Ravi Chunduru <ravivsn at gmail.com> wrote:
> Hi,
> In my tests, I observed that when an admin of a tenant runs 'nova list'
> to list down all the servers of the tenant - nova-api makes a call to
> quantum to get_ports with filter set to device owner. This operation is
> taking about 1m 30s in our setup(almost having 100 VMs i.e > 100 ports)
>
> While a user of a tenant runs the same command, the response is immediate.
>
> Going into details - the only difference between those two operations is
> the 'role'.
>
> Looking into the code, I have the following questions
> 1) Scoped Admin token returned all entries of a resource. Any reason not
> filtered per tenant?
> Comparing with Nova - it always honored tenant from the scoped token and
> returns values specific to tenant.
>
> 2) In the above described test, the DB access should not take much time
> with or with out tenant-id in filter. Why change in response time for
> tenant admin or a member user?
>
> Thanks,
> -Ravi.
>
>
>
>
>
--
Ravi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20131004/7b66f5a1/attachment.html>
More information about the OpenStack-dev
mailing list