Hi,
        Just getting started with OpenStack and one of the stumbling blocks so 
far is that unless I missed it, there is no way for the main admin user to 
request event data for all projects:

[root@srv-m10-05-02 keystone]# ceilometer event-list -q 
'event_type=compute.instance.create.start'
+------------+------------+-----------+--------+
| Message ID | Event Type | Generated | Traits |
+------------+------------+-----------+--------+
+------------+------------+-----------+————+



Where there are definitely instances running and the user that created them has 
no issue seeing the events:

[minnus@srv-m10-05-02 ~]$ ceilometer  event-list -q 
'event_type=compute.instance.create.start' --limit 1
+--------------------------------------+-------------------------------+----------------------------+---------------------------------------------------------------------------+
| Message ID                           | Event Type                    | 
Generated                  | Traits                                             
                       |
+--------------------------------------+-------------------------------+----------------------------+---------------------------------------------------------------------------+
| b7ce7652-9745-487d-9fcc-570c7c972080 | compute.instance.create.start | 
2017-08-29T15:37:39.707727 | 
+------------------+---------+------------------------------------------+ |
|                                      |                               |        
                    | |       name       |   type  |                  value

……


The fix seems to be something like the attached patch and setting the 
appropriate configs in keystone.conf.


One curious thing is that with the default keystone config, requests from all 
projects have "X-Is-Admin-Project: True”

If I set admin_project_domain_name and admin_project_name , only then do the 
non admin projects have the header set to False.

This is on:
 - Centos 7.3
 - Ocata
 - Panko backed by MariaDB.

Is this change something that would be accepted?

Thanks!

Martins

Attachment: panko.patch
Description: panko.patch

__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Reply via email to