[openstack-dev] [Neutron] Group Based Policy and the way forward

Russell Bryant rbryant at redhat.com
Wed Aug 6 13:01:23 UTC 2014


On 08/05/2014 06:13 PM, Kevin Benton wrote:
> That makes sense. It's not quite a fair analogy though to compare to
> reintroducing projects or tenants because Keystone endpoints aren't
> 'user-facing' so to speak. i.e. a regular user (application deployer,
> instance operator, etc) should never have to see or understand the
> purpose of a Keystone endpoint.

An end user that is consuming any OpenStack API absolutely must
understand endpoints in the service catalog.  The entire purpose of the
catalog is so that an application only needs to know the API endpoint to
keystone and is then able to discover where the rest of the APIs are
located.  They are very much user facing, IMO.

-- 
Russell Bryant



More information about the OpenStack-dev mailing list