Open Stack

Hi Gerg0 and Jay,

Thanks for the replay. I just mentioned the privilege for MANO/NFVO and 
what they can do with the privilege as Jay said.

IMO, MANO/NFVO needs the admin privileges for some operations, e.g. 
creating a new tenant/project for a new VNFM or migrating a VM for 
failure recovery.

best regards,
Masahito


On 2017/12/12 2:41, Csatari, Gergely (Nokia - HU/Budapest) wrote:
> Hi Jay,
> 
> Okay. Thanks for the clarification. Makes sense.
> 
> Random-thinking:
> Maybe the best would be to have a privilege level what covers the needs of MANO/NFVO, but still not full admin privileges. Do you think is this possible?
> 
> Br,
> Gerg0
> 
> -----Original Message-----
> From: Jay Pipes [mailto:jaypipes at gmail.com]
> Sent: Monday, December 11, 2017 4:41 PM
> To: openstack-dev at lists.openstack.org
> Subject: Re: [openstack-dev] [etsinfv][gap-04][blazar]: Clarification on the scope of the capacity query
> 
> On 12/11/2017 07:24 AM, Csatari, Gergely (Nokia - HU/Budapest) wrote:
>> Hi Masahito,
>>
>> Thanks for the answer.
>> Some clarification questions. You mention that the NFVO works as both an user and an admin for the cloud. Is this becouse the resource usage per user info is more for cloud operators while the resource usage per tenant / per resource provider is more for cloud users?
>>
>> The solution you described is valid for the capacity per tenant case if I understand right. Is this correct?
> 
> I think he is more referring to the fact that the MANO/NFVO service user must have administrative privileges in order to, for example, spawn new instances in multiple projects/tenants and communicate with the control plane to do things like adjust quotas, etc.
> 
> Best,
> -jay
> 
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 


-- 
室井 雅仁(Masahito MUROI)
Software Innovation Center, NTT
Tel: +81-422-59-4539