[ops][glance][security] looking for metadefs users
gmann at ghanshyammann.com
Thu Mar 11 20:22:21 UTC 2021
---- On Thu, 11 Mar 2021 13:59:02 -0600 Belmiro Moreira <moreira.belmiro.email.lists at gmail.com> wrote ----
> Hi,we use metadef to validate our custom metadata in Horizon when users create instances.
> In our use case, metadef should be written only by admin.+1 to review the default policy.
In a quick search, interop certification guidelines 1] also does not use these API capabilities so
changing to admin should be fine from interop and so does from Tempest test modification point of view.
> On Thu, Mar 11, 2021 at 8:34 PM Jeremy Stanley <fungi at yuggoth.org> wrote:
> On 2021-03-11 10:50:18 -0800 (-0800), Dan Smith wrote:
> > I think the recommendation is "review and reconsider the default
> > policy for this feature" and "here is what we think is a good
> > default if you don't otherwise know". Changing our recommended
> > default to be a more generally-applicable doesn't seem to alter
> > the general message to me, so I'd tend think just editing the wiki
> > page is fine.
> Seems reasonable to me. What do other folks think?
> Jeremy Stanley
More information about the openstack-discuss