Open Stack

Hi Alexander,

Yes, as it was said it should be read only user, credentials should be
environment specific.
Also in case if credentials were changed we should notify the user and
provide a way to
change credentials in Nailgun.

Thanks,

On Tue, Feb 10, 2015 at 2:02 PM, Alexander Kislitsky <
akislitsky at mirantis.com> wrote:

> Folks,
>
> We are collecting OpenStack workloads stats. For authentication in the
> keystone we are using admin user credentials from Nailgun. Credentials can
> be changed directly in the OpenStack and we will loose possibility of
> fetching information.
>
> This issue can be fixed by creation additional user account:
>
>    1. I propose to generate additional user credentials after master node
>    is installed and store it into master_node_settings table in the Nailgun.
>    2. Add abstraction layer into
>    https://github.com/stackforge/fuel-web/blob/master/nailgun/nailgun/statistics/utils.py#L47
>    for creating additional user in the OpenStack if it isn't exists.
>
> But this additional user can be useful for other purposes and may be we
> should save credentials in other place (settings.yaml for example). And may
> be creation of the additional user should be implemented outside of stats
> collecting feature and may be outside of Nailgun.
>
> Please share your thoughts on this.
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150224/a60e3f6e/attachment.html>