Open Stack

Hi Hiroyuki,

It would be worth being certain about what access we have to keypairs before committing to a plugin; if we cannot retrieve the initial list or receive notifications on new keypairs, we likely can't index them at all. If we have partial access we may be able to make a decision on whether it will be good enough. Please feel free to get in touch in IRC (#openstack-searchlight) if that would be useful.

Steve

From: Hiroyuki Eguchi <h-eguchi at az.jp.nec.com<mailto:h-eguchi at az.jp.nec.com>>
Reply-To: "OpenStack Development Mailing List (not for usage questions)" <openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>>
Date: Tuesday, March 29, 2016 at 7:13 PM
To: "OpenStack Development Mailing List (not for usage questions)" <openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>>
Subject: [openstack-dev] [searchlight] Add Nova Keypair Plugin

Hi Lakshmi,

Thank you for your advice.
I'm trying to index the public keys.
I'm gonna try to discuss in searchlight-specs before starting development.

Thanks
Hiroyuki.


________________________________
差出人: Sampath, Lakshmi [lakshmi.sampath at hpe.com<mailto:lakshmi.sampath at hpe.com>]
送信日時: 2016年3月29日 2:03
宛先: OpenStack Development Mailing List (not for usage questions)
件名: Re: [openstack-dev] [searchlight] Add Nova Keypair Plugin

Hi Hiroyuki,

For this plugin what data are you indexing in Elasticsearch. I mean what do you expect users to search on and retrieve? Are you trying to index the public keys?
Talking directly to DB is not advisable, but before that we need to discuss what data is being indexed and the security implication of it (RBAC) to users who can/cannot access it.

I would suggest start a spec in openstack/searchlight-specs under newton for reviewing/feedback.
https://github.com/openstack/searchlight-specs.git


Thanks
Lakshmi.

From: Hiroyuki Eguchi [mailto:h-eguchi at az.jp.nec.com]
Sent: Sunday, March 27, 2016 10:26 PM
To: OpenStack Development Mailing List (not for usage questions) [openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>] <openstack-dev at lists.openstack.org<mailto:openstack-dev at lists.openstack.org>>
Subject: [openstack-dev] [searchlight] Add Nova Keypair Plugin

Hi.

I am developing this plugin.
https://blueprints.launchpad.net/searchlight/+spec/nova-keypair-plugin

However I faced the problem that a admin user can not retrieve a keypair information created by another user.
So it is impossible to sync the keypair between OpenStack DB and Elasticsearch, unless connect to OpenStack DB directly.
Is there any suggestions to resolve it ?

thanks.