Re: [Openstack-operators] Delegating quota management for all projects to a user without the admin role?

2017-01-27 Thread Antonio Messina
We had the same problem and found the same problem. Also Neutron doesn't allow you to create a policy.json to give someone the privileges to change quotas, which is pretty bad since when updating the number of instances you usually have to also upgrade the number of ports. (Mitaka) .a. 2017-01-27

Re: [Openstack-operators] Delegating quota management for all projects to a user without the admin role?

2017-01-27 Thread Tim Bell
I think this would merit a bug report to cinder (and probably Manila also). This would also help if someone else is searching. The fix may well take some time though. Tim From: "Edmund Rhudy (BLOOMBERG/ 120 PARK)" Reply-To: Edmund Rhudy Date: Friday, 27 January 2017 at 16:49 To: openstack-op

Re: [Openstack-operators] Delegating quota management for all projects to a user without the admin role?

2017-01-27 Thread Edmund Rhudy (BLOOMBERG/ 120 PARK)
I did some deep excavation and found out that Cinder is specifically the problem here. With "openstack quota show", it contacts both Nova and Cinder for quota information. Nova returns successfully, Cinder does not, so the whole command fails. Nova policy allows structuring things so that an ind