[Openstack-operators] [openstack-dev] [nova][cinder] Disabling nova volume-update (aka swap volume; aka cinder live migration)
Matt Riedemann
mriedemos at gmail.com
Fri Aug 24 21:23:06 UTC 2018
On 8/21/2018 5:36 AM, Lee Yarwood wrote:
> I'm definitely in favor of hiding this from users eventually but
> wouldn't this require some form of deprecation cycle?
>
> Warnings within the API documentation would also be useful and even
> something we could backport to stable to highlight just how fragile this
> API is ahead of any policy change.
The swap volume API in nova defaults to admin-only policy rules by
default, so for any users that are using it directly, they are (1)
admins knowingly shooting themselves, or their users, in the foot or (2)
operators have opened up the policy to non-admins (or some other role of
user) to hit the API directly. I would ask why that is.
--
Thanks,
Matt
More information about the OpenStack-operators
mailing list