[Openstack-operators] [kolla] question of default users for operators
Jay Pipes
jaypipes at gmail.com
Mon Aug 1 11:44:26 UTC 2016
On 07/31/2016 09:30 PM, Melvin Hillsman wrote:
> I think even more so would be what is the purpose/benefit to an operator? 99.99% of the time an operator will have an idea of resources they want to create already or plans to do so. Personally, unless pushing to demo OpenStack, I would prefer totally untouched install.
+1 for not creating a default user. You will need a default role for
unprivileged users, however. "member" is fine in that regard I think.
Best,
-jay
>> On Jul 31, 2016, at 8:13 PM, Blair Bethwaite <blair.bethwaite at gmail.com> wrote:
>>
>> Sounds like a recipe for confusion?
>>
>>> On 1 August 2016 at 10:23, Steven Dake (stdake) <stdake at cisco.com> wrote:
>>>
>>>
>>>> On 7/31/16, 7:13 AM, "Jay Pipes" <jaypipes at gmail.com> wrote:
>>>>
>>>>> On 07/29/2016 11:35 PM, Steven Dake (stdake) wrote:
>>>>> Hey folks,
>>>>>
>>>>> In Kolla we have a significant bug in that Horizon can't be used because
>>>>> it requires a member user. We have a few approaches to fixing this
>>>>> problem in mind, but want to understand what Operators want. Devstack
>>>>> itself has switched between member and _member_ although Devstack isn't
>>>>> our reference: Operators are.
>>>>>
>>>>> Which of those do operators prefer (if either).
>>>>>
>>>>> Another question was whether we should create a default user named
>>>>> "user" and use this in place of member.
>>>>
>>>> "member" is a role, not a user. The default unprivileged user is named
>>>> "demo" and has the "member" role in a project called "demo".
>>>
>>> Yup, thanks for the correction.
>>>
>>>>
>>>> Are you asking what the name of the unprivileged *role* should be by
>>>> default in Kolla installations? Or are you asking what, if any, a
>>>> default unprivileged *user* should be called?
>>>
>>> The idea of adding a user called "user" with a role called "user" was
>>> proposed. Curious if operators care to want that.
>>>
>>> Regards
>>> -steve
>>>
>>>>
>>>> Best,
>>>> -jay
>>>>
>>>> _______________________________________________
>>>> OpenStack-operators mailing list
>>>> OpenStack-operators at lists.openstack.org
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>>
>>>
>>> _______________________________________________
>>> OpenStack-operators mailing list
>>> OpenStack-operators at lists.openstack.org
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>
>>
>>
>> --
>> Cheers,
>> ~Blairo
>>
>> _______________________________________________
>> OpenStack-operators mailing list
>> OpenStack-operators at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
More information about the OpenStack-operators
mailing list