Support all glance backends in the agent
The agent currently only works with glance backed with swift due to the use of tmp url's.
This change would be to modify the agent to support downloading from glance directly.
This includes modifying ironic to create a keystone domain for ironic and a user for public image access in it.
Also, each time an instance is started, if the image is private, it would create a user/tenant in the ironic domain using the image uuid as the name of each, and use glance member-add to add the private image to the ironic image tenant.
After this, an auth token that can only access the image can be allocated and passed to the vm so it can download the image directly from glance, using a regular glance client.
Blueprint information
- Status:
- Not started
- Approver:
- None
- Priority:
- Low
- Drafter:
- Kevin Fox
- Direction:
- Needs approval
- Assignee:
- None
- Definition:
- New
- Series goal:
- None
- Implementation:
- Unknown
- Milestone target:
- None
- Started by
- Completed by
Related branches
Sprints
Whiteboard
This sounds like a good thing to do; are you planning to write a spec for this?
// jroll 2015-10-15
Hi Kevin, thanks for the proposal. We're moving from using blueprints to track features to rfe bugs. I've filed one for your change - https:/
Please track further work there using Closes-Bug, Partial-Bug or Related-Bug in commit messages and change the link in spec from blueprint to this newly created RFE bug.
// vdrok 2015-12-15