Hi Chen, As I remember, proxy users were added for security reasons. When one user creates cluster in Sahara he should not get access to data of other users.
Thanks, Andrew. On Thu, Jul 9, 2015 at 11:12 PM, Li, Chen <[email protected]> wrote: > Hi Sahara guys, > > > > > > When sahara create a transient cluster, it create a trust with sahara > admin user. > > > https://github.com/openstack/sahara/blob/master/sahara/service/ops.py#L239-L240 > > > https://github.com/openstack/sahara/blob/master/sahara/service/trusts.py#L79 > > > > When sahara deal with swift, it create a trust too, but : > > sahara admin user => create a proxy domain => set in sahara.conf > > ð sahara create proxy user in the domain. > > ð create a trust with the proxy user. > > https://github.com/openstack/sahara/blob/master/sahara/utils/proxy.py#L110 > > https://github.com/openstack/sahara/blob/master/sahara/utils/proxy.py#L265 > > > > > > My questions are : > > Why not user proxy user for transient cluster ? > > Or, why a proxy user is needed for swift but not use sahara admin user > directly ? > > > > Looking forward to your reply. > > > > > > Thanks. > > -chen > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: [email protected]?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > >
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: [email protected]?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
