Ask Your Question

Revision history [back]

Kilo - non-public snapshots visible for everyone?

Hello. I have Kilo installed. I use admin account to create snapshots of other tenant's instances: nova image-create cff9f8f8-8b45-4759-8f44-ce67e0ad689e aaa-taki-test When checking nova image-show, metadata user_id points to admin, metadata owner_id points to rozie (which is tenant which owns the instance). It's OK. Image is not public, type snapshot.

The problem is: when I log as any other user and make nova image-list this image/snapshot is visible. This didn't happend on Juno - snapshots were visible only to owner and tenant whose instances were snapshotted.

The same happens, when i create snapshot being logged as rozie user - snapshot is visible for every other tenant. Any ideas/suggestions/advice?

Kilo - non-public snapshots visible for everyone?

Hello. I have Kilo installed. I use admin account to create snapshots of other tenant's instances: nova image-create cff9f8f8-8b45-4759-8f44-ce67e0ad689e aaa-taki-test When checking nova image-show, metadata user_id points to admin, metadata owner_id points to rozie (which is tenant which owns the instance). It's OK. Image is not public, type snapshot.

The problem is: when I log as any other user and make nova image-list this image/snapshot is visible. This didn't happend on Juno - snapshots were visible only to owner and tenant whose instances were snapshotted.

The same happens, when i create snapshot being logged as rozie user - snapshot is visible for every other tenant. Any ideas/suggestions/advice?