Open Stack

Hi,

I run an openstack-compute cluster based on diablo-trunk.
One thing that is different in diablo compared to cactus:

when I run euca-describe-instances as a normal project user, I can also see
instances belonging to different project. Example here (i have 2 projects:
cloudtest1 and testadmin - I run euca-describe-instances as cloudtest1
user):

RESERVATION    r-a8dlzj9l    cloudtest1    default
INSTANCE    i-0000001b    ami-00000005    server-27    server-27
 running    cloudtest1 (cloudtest1, c1n14)    1        m1.small
 2012-01-25T08:45:34Z    nova    aki-00000003    ari-00000004
INSTANCE    i-0000001c    ami-00000005    server-28    server-28
 running    cloudtest1 (cloudtest1, c1n7)    1        m1.small
 2012-01-25T08:45:34Z    nova    aki-00000003    ari-00000004
INSTANCE    i-0000001e    ami-00000005    server-30    server-30
 running    cloudtest1 (cloudtest1, c1n4)    1        m1.small
 2012-01-25T08:45:34Z    nova    aki-00000003    ari-00000004
INSTANCE    i-00000015    ami-00000005    server-21    server-21
 running    cloudtest1 (cloudtest1, c1n30)    1        m1.small
 2012-01-25T08:45:33Z    nova    aki-00000003    ari-00000004
INSTANCE    i-00000017    ami-00000005    server-23    server-23
 running    cloudtest1 (cloudtest1, c1n26)    1        m1.small
 2012-01-25T08:45:33Z    nova    aki-00000003    ari-00000004
INSTANCE    i-00000018    ami-00000005    server-24    server-24
 running    cloudtest1 (cloudtest1, c1n31)    1        m1.small
 2012-01-25T08:45:33Z    nova    aki-00000003    ari-00000004
INSTANCE    i-00000019    ami-00000005    server-25    server-25
 running    cloudtest1 (cloudtest1, c1n29)    1        m1.small
 2012-01-25T08:45:33Z    nova    aki-00000003    ari-00000004
INSTANCE    i-0000001a    ami-00000005    server-26    server-26
 running    cloudtest1 (cloudtest1, c1n22)    1        m1.small
 2012-01-25T08:45:33Z    nova    aki-00000003    ari-00000004
RESERVATION    r-py1kqz9e    testproject    default
INSTANCE    i-0000000f    ami-00000005    server-15    server-15
 running    testadmin (testproject, c1n19)    1        m1.small
 2012-01-25T08:32:06Z    nova    aki-00000003    ari-00000004
INSTANCE    i-00000010    ami-00000005    server-16    server-16
 running    testadmin (testproject, c1n17)    1        m1.small
 2012-01-25T08:32:06Z    nova    aki-00000003    ari-00000004
INSTANCE    i-00000011    ami-00000005    server-17    server-17
 running    testadmin (testproject, c1n6)    1        m1.small
 2012-01-25T08:32:06Z    nova    aki-00000003    ari-00000004
INSTANCE    i-00000012    ami-00000005    server-18    server-18
 running    testadmin (testproject, c1n27)    1        m1.small
 2012-01-25T08:32:06Z    nova    aki-00000003    ari-00000004
INSTANCE    i-00000013    ami-00000005    server-19    server-19
 running    testadmin (testproject, c1n18)    1        m1.small
 2012-01-25T08:32:06Z    nova    aki-00000003    ari-00000004
INSTANCE    i-00000014    ami-00000005    server-20    server-20
 running    testadmin (testproject, c1n23)    1        m1.small
 2012-01-25T08:32:06Z    nova    aki-00000003    ari-0000000

As a project owner, I would like to see only instances belonging to my
project. I guess some settings should be made in policy.json file about
this. But I cannot find any documentation on policy.json around.

Can anyone help?


-- 
checkout my blog on linux clusters:
-- linuxdatacenter.blogspot.com --
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20120125/e6c39e77/attachment-0002.html>