Using domain-scoped token to manage all projects in Nova

asked 2015-05-22 14:07:15 -0500

RadekS gravatar image

My setup is very similar to I have a domain which contains several projects.

I use a domain-scoped token to create projects inside the domain. The domain user that I use for authentication has "admin" role in all the projects in the domain.

My problem is that when I want to perform any action via Nova API (list flavors/images/servers, create server, etc.), when I use the domain-scoped token I get HTTP 400 with Malformed request URL: URL's project_id 'ee8e084275bf465aba60e786519a0c6b' doesn't match Context's project_id 'None'" (I just repeat, the project belongs to the domain to which I'm scoping the token).

If I use a relevant project or domain-project scoped token, it works fine.

Is there any possibility to use only one domain-scoped token to manage resources in all the domain's projects via Nova API?


edit retag flag offensive close merge delete