[Openstack] Nova + KeyStone Admin Question

2012-01-31 Thread Shivan Bindal
Hi, I've got a quick question regarding RightScale's OpenStack integration. At one point, when someone decides to connect their OpenStack cloud with RightScale, we need to authenticate that that user is authorized to connect their cloud to RightScale. (Those users get some extra privileges, not

Re: [Openstack] Nova + KeyStone Admin Question

2012-01-31 Thread Vishvananda Ishaya
We have been treating 'Admin' (or 'admin' as I prefer) as meaning admin of the entire cloud, regardless of whether a tenant id is set. The recent rbac changes introduced allows the policy to be completely customized by the deployer however, so they would be free to define a different role such

Re: [Openstack] Nova + KeyStone Admin Question

2012-01-31 Thread Shivan Bindal
Great. Thanks Vish! We'll revert with further questions if they come up. -- Shivan Bindal Product Manager shi...@rightscale.com On Tue, Jan 31, 2012 at 4:43 PM, Vishvananda Ishaya vishvana...@gmail.comwrote: We have been treating 'Admin' (or 'admin' as I prefer) as meaning admin of the