Re: [openstack-dev] [Sahara] Questions about how Sahara use trust ?

2015-07-13 Thread michael mccune
On 07/13/2015 09:40 PM, Li, Chen wrote: Hi mike, Thanks, this is very helpful. Summary: 1. The purpose of admin user & proxy user are the same => to work without user's own username & password. sort of, the proxy user is to work without the user's credentials, whereas the admin user needs

Re: [openstack-dev] [Sahara] Questions about how Sahara use trust ?

2015-07-13 Thread Li, Chen
k.org Subject: Re: [openstack-dev] [Sahara] Questions about how Sahara use trust ? On 07/12/2015 09:45 PM, Li, Chen wrote: > Hi Andrew, > > Thanks for the reply. > > Are you mean : > > 1. admin user is used by transient cluster is mainly to make it work. > >

Re: [openstack-dev] [Sahara] Questions about how Sahara use trust ?

2015-07-13 Thread michael mccune
On 07/12/2015 09:45 PM, Li, Chen wrote: Hi Andrew, Thanks for the reply. Are you mean : 1. admin user is used by transient cluster is mainly to make it work. 2. The proxy user is the more secure way to do the same thing. Should we use proxy user at all situation then ? Should th

Re: [openstack-dev] [Sahara] Questions about how Sahara use trust ?

2015-07-12 Thread Li, Chen
. -chen From: Andrew Lazarev [mailto:alaza...@mirantis.com] Sent: Friday, July 10, 2015 11:39 PM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Sahara] Questions about how Sahara use trust ? Hi Chen, As I remember, proxy users were added for security

Re: [openstack-dev] [Sahara] Questions about how Sahara use trust ?

2015-07-10 Thread Andrew Lazarev
Hi Chen, As I remember, proxy users were added for security reasons. When one user creates cluster in Sahara he should not get access to data of other users. Thanks, Andrew. On Thu, Jul 9, 2015 at 11:12 PM, Li, Chen wrote: > Hi Sahara guys, > > > > > > When sahara create a transient cluster,

[openstack-dev] [Sahara] Questions about how Sahara use trust ?

2015-07-09 Thread Li, Chen
Hi Sahara guys, When sahara create a transient cluster, it create a trust with sahara admin user. https://github.com/openstack/sahara/blob/master/sahara/service/ops.py#L239-L240 https://github.com/openstack/sahara/blob/master/sahara/service/trusts.py#L79 When sahara deal with swift, it create a