[openstack-dev] [searchlight] Add Nova Keypair Plugin
Hiroyuki Eguchi
h-eguchi at az.jp.nec.com
Fri Apr 1 02:05:39 UTC 2016
Hi Steve
Thank you for your advice.
Currently It's impossible to sync keystone information between DB and ElasticeSearch.
And no useful notification will be send for kaypair state change.(only key_name)
So, I try to propose improving keypair notifications against nova-specs.
Thanks.
Hiroyuki
________________________________________
差出人: McLellan, Steven [steve.mclellan at hpe.com]
送信日時: 2016年3月31日 5:49
宛先: OpenStack Development Mailing List (not for usage questions)
件名: Re: [openstack-dev] [searchlight] Add Nova Keypair Plugin
Hi Hiroyuki,
It would be worth being certain about what access we have to keypairs before committing to a plugin; if we cannot retrieve the initial list or receive notifications on new keypairs, we likely can't index them at all. If we have partial access we may be able to make a decision on whether it will be good enough. Please feel free to get in touch in IRC (#openstack-searchlight) if that would be useful.
Steve
From: Hiroyuki Eguchi <h-eguchi at az.jp.nec.com<mailto:h-eguchi at az.jp.nec.com>>
Reply-To: "OpenStack Development Mailing List (not for usage questions)" <openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>>
Date: Tuesday, March 29, 2016 at 7:13 PM
To: "OpenStack Development Mailing List (not for usage questions)" <openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>>
Subject: [openstack-dev] [searchlight] Add Nova Keypair Plugin
Hi Lakshmi,
Thank you for your advice.
I'm trying to index the public keys.
I'm gonna try to discuss in searchlight-specs before starting development.
Thanks
Hiroyuki.
________________________________
差出人: Sampath, Lakshmi [lakshmi.sampath at hpe.com<mailto:lakshmi.sampath at hpe.com>]
送信日時: 2016年3月29日 2:03
宛先: OpenStack Development Mailing List (not for usage questions)
件名: Re: [openstack-dev] [searchlight] Add Nova Keypair Plugin
Hi Hiroyuki,
For this plugin what data are you indexing in Elasticsearch. I mean what do you expect users to search on and retrieve? Are you trying to index the public keys?
Talking directly to DB is not advisable, but before that we need to discuss what data is being indexed and the security implication of it (RBAC) to users who can/cannot access it.
I would suggest start a spec in openstack/searchlight-specs under newton for reviewing/feedback.
https://github.com/openstack/searchlight-specs.git
Thanks
Lakshmi.
From: Hiroyuki Eguchi [mailto:h-eguchi at az.jp.nec.com]
Sent: Sunday, March 27, 2016 10:26 PM
To: OpenStack Development Mailing List (not for usage questions) [openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>] <openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>>
Subject: [openstack-dev] [searchlight] Add Nova Keypair Plugin
Hi.
I am developing this plugin.
https://blueprints.launchpad.net/searchlight/+spec/nova-keypair-plugin
However I faced the problem that a admin user can not retrieve a keypair information created by another user.
So it is impossible to sync the keypair between OpenStack DB and Elasticsearch, unless connect to OpenStack DB directly.
Is there any suggestions to resolve it ?
thanks.
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
More information about the OpenStack-dev
mailing list