Hi
How do you setup different object stores for a different set of users,
like oversimplified example, presales users go to different object store
as users from postsales?
I get the a mix of two endpoints showing up under one user, only way to
get the groups is using different region but user still get endpoints
for both.
openstack role list
+----------------------------------+-------------+
| ID | Name |
+----------------------------------+-------------+
| 3af2ab60862c4f85a3139aa7a4ecb297 | admin |
| 7209bcb5362845589f1fb80fc02d91e8 | swift_users |
| 87a552a90bda418a891fc4ae31ef5e68 | user |
+----------------------------------+-------------+
root@ubuntu1:~/scripts# openstack user list
+----------------------------------+-------+
| ID | Name |
+----------------------------------+-------+
| 2d5f98a58ebb4aeeae8112000f24c9ee | admin |
| 32597a8cde2f43e780c10a317041aaad | swift |
| 77d906e5efee455e939a6f8d5bac0812 | demo |
| a524fb94470d450191a8e446ed4b3ddd | bob |
+----------------------------------+-------+
root@ubuntu1:~/scripts# openstack user show bob
+--------------------+----------------------------------+
| Field | Value |
+--------------------+----------------------------------+
| default_project_id | 8e698265b04549d0980e918c87738d86 |
| description | AfterSales member |
| domain_id | default |
| email | bob@aftersales.local |
| enabled | True |
| id | a524fb94470d450191a8e446ed4b3ddd |
| name | bob |
+--------------------+----------------------------------+
openstack project show service
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | Default service project |
| domain_id | default |
| enabled | True |
| id | 51ded72073e340b2a2f99cb344dc2bad |
| is_domain | False |
| name | service |
| parent_id | default |
+-------------+----------------------------------+
root@ubuntu1:~/scripts# openstack project show aftersales
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | |
| domain_id | default |
| enabled | True |
| id | 8e698265b04549d0980e918c87738d86 |
| is_domain | False |
| name | aftersales |
| parent_id | default |
+-------------+----------------------------------+
openstack catalog show aftersales
+-----------+------------------------------------------------+
| Field | Value |
+-----------+------------------------------------------------+
| endpoints | RegionTwo |
| | internal: http://192.168.0.210/v1/aftersales |
| | RegionTwo |
| | admin: http://192.168.0.210/v1/aftersales |
| | RegionTwo |
| | public: http://192.168.0.210/v1/aftersales |
| | |
| id | 9c825bf5c2d947448bc9e834e820b647 |
| name | aftersales |
| type | object-store |
+-----------+------------------------------------------------+
r catalog show swift
+-----------+----------------------------------------------------------+
| Field | Value |
+-----------+----------------------------------------------------------+
| endpoints | RegionOne |
| | public: http://192.168.0.200/v1/export/kswift |
| | RegionOne |
| | internal: http://192.168.0.200/v1/export/kswift |
| | RegionOne |
| | admin: http://192.168.0.200/v1/export/kswift |
| | |
| id | af8477214a834d959abd3f0718dd88fb |
| name | swift |
| type | object-store |
+-----------+----------------------------------------------------------+
root@ubuntu1:~/scripts# openstack endpoint list
+----------------------------------+-----------+--------------+--------------+---------+-----------+----------------------------------------------+
| ID | Region | Service Name | Service
Type | Enabled | Interface | URL |
+----------------------------------+-----------+--------------+--------------+---------+-----------+----------------------------------------------+
| 59233fd046f241679323f5913c99278e | RegionOne | swift |
object-store | True | public |
http://192.168.0.200/object/v1/export/kswift |
| 5dc0344bd0e2441facf1a50daac6dcb0 | RegionTwo | aftersales |
object-store | True | internal |
http://192.168.0.200/v1/aftersales |
| 68aa6b200eaa443fbcd5c8d54990ff36 | RegionOne | swift |
object-store | True | internal |
http://192.168.0.200/object/v1/export/kswift |
| 7228845023bd40088e68f5e3baf56305 | RegionOne | keystone |
identity | True | internal |
http://ubuntu1:35357/v3/ |
| 7ffc7661be7a4a309004a24c8c28b7ab | RegionTwo | aftersales |
object-store | True | admin |
http://192.168.0.200/v1/aftersales |
| bce72c93209447e08c0c5c040730059c | RegionTwo | aftersales |
object-store | True | public |
http://192.168.0.200/v1/aftersales |
| cfe95067e2314b7eaa0feb3c76b09bd7 | RegionOne | keystone |
identity | True | public |
http://ubuntu1:5000/v3/ |
| e431073400f64b54846308a2bfcdba3c | RegionOne | keystone |
identity | True | admin |
http://ubuntu1:35357/v3/ |
| f677511232434b35806304ed23fee220 | RegionOne | swift |
object-store | True | admin |
http://192.168.0.200/object/v1/export/kswift |
+----------------------------------+-----------+--------------+--------------+---------+-----------+----------------------------------------------+
curl authenticate response for user bob:
{
"access": {
"token": {
"issued_at": "2017-03-06T16:00:03.000000Z",
"expires": "2017-03-06T17:00:03Z",
"id":
"gAAAAABYvYeDV1eBlwWnGiW-clj49tGPfO3PeiwlDAUwfePmex9Kr_w9I54ppxmFO-vprdrvkq_ogq-4ci_bECE_eoRTZXG3J8xhm_-AltinA34vzcpbEyoAlGrQUc7JqfPXbHMxsipzP0SBtn0c49wxZD5lo81RJ50ZIfO2Bp0mW4XqOh6vAL4",
"tenant": {
"description": "Aftersales object storage",
"enabled": true,
"id": "8e698265b04549d0980e918c87738d86",
"name": "aftersales"
},
"audit_ids": [
"OMrzk0i4RIG5U0EYFgW0lA"
]
},
"serviceCatalog": [
{
"endpoints": [
{
"adminURL": "http://192.168.0.200/object/v1/export/kswift";,
"region": "RegionOne",
"internalURL": "http://192.168.0.200/object/v1/export/kswift";,
"id": "59233fd046f241679323f5913c99278e",
"publicURL": "http://192.168.0.200/object/v1/export/kswift";
},
{
"adminURL": "http://192.168.0.200/v1/aftersales";,
"region": "RegionTwo",
"internalURL": "http://192.168.0.200/v1/aftersales";,
"id": "5dc0344bd0e2441facf1a50daac6dcb0",
"publicURL": "http://192.168.0.200/v1/aftersales";
}
],
"endpoints_links": [],
"type": "object-store",
"name": "aftersales"
},
{
"endpoints": [
{
"adminURL": "http://ubuntu1:35357/v3/";,
"region": "RegionOne",
"internalURL": "http://ubuntu1:35357/v3/";,
"id": "7228845023bd40088e68f5e3baf56305",
"publicURL": "http://ubuntu1:5000/v3/";
}
],
"endpoints_links": [],
"type": "identity",
"name": "keystone"
}
],
"user": {
"username": "bob",
"roles_links": [],
"id": "a524fb94470d450191a8e446ed4b3ddd",
"roles": [
{
"name": "swift_users"
}
],
"name": "bob"
},
"metadata": {
"is_admin": 0,
"roles": [
"7209bcb5362845589f1fb80fc02d91e8"
]
}
}
}
--
Regards,
Peter Brouwer, Principal Software Engineer,
Oracle Application Integration Engineering.
Phone: +44 1506 672767, Mobile +44 7720 598 226
E-Mail: peter.brou...@oracle.com
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
