There was a change in direction with the "Consistent and Secure RBAC" community goal and system scope will not be implemented across OpenStack services. See
https://governance.openstack.org/tc/goals/selected/consistent-and- secure-rbac.html#direction-change for details. ** Changed in: cinder Milestone: wallaby-2 => None ** Changed in: cinder Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1745905 Title: system scope doesn't work for the service which use project specified endpoint Status in Cinder: Won't Fix Status in OpenStack Identity (keystone): Confirmed Bug description: For some project, such as Cinder, the endpoint is project specified, the format is like: http://ip/volume/v3/{project_id}/os-services There are two problem: 1. For this kind of endpoint, system-scoped token doesn't work because that there is no project_id in the token. 2. When issue a system-scoped token, the Cinder's endpoint in the token catalog is empty. It means the Cinder service will not be discoverable when use system-scoped token. To manage notifications about this bug go to: https://bugs.launchpad.net/cinder/+bug/1745905/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
