Page MenuHomePhabricator

Create nova service account for openstack
Open, MediumPublic

Description

At the moment in /etc/nova/api-paste.ini we use the same novaadmin account that administrators use for adhoc operations and debugging. Ideally, in relation to T167294, the 'nova' service should have a separate service account that is not novaadmin and can be audited and restricted separately from admin use.