<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;">Creating a volume is not the same as creating a volume type. A tenant can consume a volume type that allows multi-attach with no issue as you see in that policy. </span><br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Albert Braden <ozzzo@yahoo.com><br>
<b>Sent:</b> 22 February 2023 17:12<br>
<b>To:</b> Openstack-discuss <openstack-discuss@lists.openstack.org><br>
<b>Subject:</b> [kolla] [train] [cinder] Volume multiattach exposed to non-admin users via API</font>
<div> </div>
</div>
<div>CAUTION: This email originates from outside THG<br>
<br>
According to this document [1] multiattach volumes can only be setup if explicitly allowed by creating a “multiattach” volume type.<br>
<br>
“Starting from the Queens release the ability to attach a volume to multiple hosts/servers requires that the volume is of a special type that includes an extra-spec capability setting of multiattach=<is> True… Creating a new volume type is an admin-only operation
by default.<br>
<br>
One of our customers appears to have used TerraForm to create a volume with the multiattach flag set and it worked, and that volume has multiple attachments. When I look here [2] it appears that the default is:<br>
<br>
#"volume:multiattach": "rule:xena_system_admin_or_project_member"<br>
<br>
So it looks like, by default, any project member can create a multiattach volume. What am I missing?<br>
<br>
[1]: <a href="https://docs.openstack.org/cinder/latest/admin/volume-multiattach.html">
https://docs.openstack.org/cinder/latest/admin/volume-multiattach.html</a><br>
[2]: <a href="https://docs.openstack.org/cinder/latest/configuration/block-storage/samples/policy.yaml.html#policy-file">
https://docs.openstack.org/cinder/latest/configuration/block-storage/samples/policy.yaml.html#policy-file</a><br>
</div>
<table style="font-family: 'helvetica'; font-size: 10pt; width: 100%; height: 218.234375px;" border="0;">
<tbody>
<tr style="height: 19.625px;">
<td style="width: 99.1264%; height: 19.625px;"> </td>
</tr>
<tr style="height: 41.296875px;">
<td style="width: 99.1264%; height: 41.296875px;"><span style="font-family: helvetica, arial, sans-serif; font-size: 11pt;"><strong>Danny Webb</strong></span></td>
</tr>
<tr style="height: 19.625px;">
<td style="width: 99.1264%; height: 19.625px;"><span style="font-family: helvetica, arial, sans-serif;">Principal OpenStack Engineer</span></td>
</tr>
<tr style="height: 19.625px;">
<td style="width: 99.1264%; height: 19.625px;"><span style="font-family: helvetica, arial, sans-serif;">Danny.Webb@thehutgroup.com</span></td>
</tr>
<tr style="height: 19.625px;">
<td style="width: 99.1264%; height: 19.625px;"><span style="font-family: helvetica, arial, sans-serif;"></span></td>
</tr>
<tr style="height: 36.21875px;">
<td style="width: 99.1264%; height: 36.21875px;"><img src="https://dl8hes3yo0qpy.cloudfront.net/wp-content/uploads/2020/06/01092449/thg-ingenuity-logo-3.svg" alt="THG Ingenuity Logo" width="227" height="27"></td>
</tr>
<tr style="height: 19.625px; font-size: 11pt;">
<td style="width: 99.1264%; height: 19.625px;"><span style="font-family: helvetica, arial, sans-serif;"><a title="THG Website" href="https://www.thg.com">www.thg.com</a></span></td>
</tr>
<tr style="height: 42.59375px;">
<td style="height: 42.59375px;"><a href="https://www.linkedin.com/company/thg-ingenuity/?originalSubdomain=uk"><img src="https://i.imgur.com/wbpVRW6.png" alt="" width="25" height="25"></a> <a href="https://twitter.com/thgingenuity?lang=en"><img src="https://i.imgur.com/c3040tr.png" alt="" width="25" height="25"></a></td>
</tr>
</tbody>
</table>
</body>
</html>