[cinder] Project ID in cinder endpoints and system scopes

Nicolas Parquet nicolas.parquet at gandi.net
Tue Dec 1 08:53:53 UTC 2020


Thank you for the explanation!

I have linked it in the bug ticket for anyone having the same question :)

Cheers,
Nicolas

On 11/30/20 4:03 PM, Brian Rosmaita wrote:
> From the cinder side of the bug, there are two things going on here.
> 
> (1) There's an ambiguity in the term "endpoint": it could be (a) the
> base URL where the service can be contacted, or (b) the JSON "url"
> element that shows up in the "endpoints" list of a service object in the
> "catalog" list in the service catalog.  In sense (a), a project_id does
> not occur in the Block Storage API endpoint.
> 
> The Block Storage REST API, however, does require a project_id in most
> of the URLs it recognizes.  Thinking of an "endpoint" in sense (a),
> these look like:
>   <endpoint><path>
> where the <path> parts are defined in the Block Storage API reference:
>   https://docs.openstack.org/api-ref/block-storage/
> 
> When you look at the API reference, you'll see that for almost all
> calls, the Block Storage API requires a version indicator and project_id
> in the path.  So if you leave these out, the service cannot resolve the
> URL and returns a 404.
> 
> (2) Cinder doesn't support recognition of token scope in any released
> versions; we're working on it for Wallaby.  (There's limited support in
> Victoria, but only for the default-types API.)
> 
> 
> cheers,
> brian
> 
> On 11/30/20 4:35 AM, Nicolas Parquet wrote:
>> Hello there,
>>
>> Wondering if anyone has ongoing work or information on the following
>> bug: https://bugs.launchpad.net/keystone/+bug/1745905
>>
>> We tried removing the project_id from cinder endpoints in order to test
>> system scopes and see if more is needed than oslo policy configuration,
>> but cannot get anything else than 404 responses.
>>
>> The bug description suggests it is just a documentation issue, but I
>> could not get a working setup. I also don't this mentioned in ptg
>> documentation regarding system scopes support.
>>
>> Any information or hint is welcome!
>>
>> Regards,
>>
>> -- 
>> Nicolas Parquet
>> Gandi
>> nicolas.parquet at gandi.net
>>
> 
> 

-- 
Nicolas Parquet
Gandi
nicolas.parquet at gandi.net



More information about the openstack-discuss mailing list