I was able to reproduce the problem on current master. Regardless of the setting of send_service_user_token nova sends the service token.
with [service_user]/send_service_user_token = false
08:03:59.263531 IP aio.56768 > aio.http: Flags [P.], seq 3136635724:3136636434, ack 282222251, win 512, options [nop,nop,TS val 548278802 ecr 548278802], length 710: HTTP: GET /volume/v3/57abc7a114c341708f5dea1a65716e2d/volumes/f122d57f-8273-48f3-a2fb-5335fcd15b3f HTTP/1.1 E.....@.@..!..y...y....P..CL..^.....w@..... ... ...GET /volume/v3/57abc7a114c341708f5dea1a65716e2d/volumes/f122d57f-8273-48f3-a2fb-5335fcd15b3f HTTP/1.1 Host: 192.168.121.129 User-Agent: python-cinderclient Accept-Encoding: gzip, deflate Accept: application/json Connection: keep-alive X-OpenStack-Request-ID: req-e57eaa48-ff8e-4e50-a6fc-a054b899dd9d X-Auth-Token: gAAAAABemBFu99R0nCxAoorJJxf0PhYq-siT8WrygdGzYg50Wg73kimG5khjP5FaUm4Un2yIcpw0NJtsNpuy5gVT7yT6T33AY9ZJNJh7JyKWoKxH3r4R16QpTsWISL54ctrYycQOd1X2AeMmk_rP7GvsxvihytwtWNLOXKJBf2rrXbbLl0C5X-I X-Service-Token: gAAAAABemBFv2zK0OJ1IJe6GDPu7fyJEmGsm8P82L2N2Zek8BA5J0EF1v4iZsH2ljWXqC-r1-zF4tMf_QOmoBdD2o9rFgpuaoWlWwj0IyvgNlkc0nv8tn0RbGmpei00Lf17-CMsfOTIxkrXF7JUikDZGwvTNXzJ5CEycYDIUjqcDkbN9-6BsEx8
with [service_user]/send_service_user_token = true
09:02:06.437197 IP aio.57272 > aio.http: Flags [P.], seq 2567770992:2567771702, ack 287109253, win 512, options [nop,nop,TS val 551765985 ecr 551765985], length 710: HTTP: GET /volume/v3/57abc7a114c341708f5dea1a65716e2d/volumes/f122d57f-8273-48f3-a2fb-5335fcd15b3f HTTP/1.1 E...r&@.@.Q...y...y....P...p........w@..... .G. .G.GET /volume/v3/57abc7a114c341708f5dea1a65716e2d/volumes/f122d57f-8273-48f3-a2fb-5335fcd15b3f HTTP/1.1 Host: 192.168.121.129 User-Agent: python-cinderclient Accept-Encoding: gzip, deflate Accept: application/json Connection: keep-alive X-OpenStack-Request-ID: req-a77e52e6-b623-42c0-a6ec-e18691a1a4bc X-Auth-Token: gAAAAABemB8N2IX9lI3ECL_zksQz1egSMytu4mG6vnWExq1HQBIFN4O60hEJAgLLXOpCgpKDKX4VmVCDl4qMgt8aBShGrC4eYmcjctIOuUbXlY9TzgUxZAs8z6bKgDq5OLbEgSgnCUIQAtvnY2f7vrmvFa2HAucckXv7JUbYNhU4UY15cFAR3U8 X-Service-Token: gAAAAABemB8OypdEvu4g3DJRerexgHEoiaOwHXPV6wgGY10iG3RFbFbENqcV1DNnFVUveX07i5ZltABJqx0EXfb4Jl1AsYzBjUS2zxFEKX8-niStTnEMsqpvQ2yfH9TPnldxh2Sl4Y9WgxlgrvQLaPMXMLe7loIJhhuj3HTkKAuGsmyouifOThI
I was able to reproduce the problem on current master. Regardless of the setting of send_service_ user_token nova sends the service token.
with [service_ user]/send_ service_ user_token = false
08:03:59.263531 IP aio.56768 > aio.http: Flags [P.], seq 3136635724: 3136636434, ack 282222251, win 512, options [nop,nop,TS val 548278802 ecr 548278802], length 710: HTTP: GET /volume/ v3/57abc7a114c3 41708f5dea1a657 16e2d/volumes/ f122d57f- 8273-48f3- a2fb-5335fcd15b 3f HTTP/1.1 .@..!.. y...y.. ..P..CL. .^..... w@..... v3/57abc7a114c3 41708f5dea1a657 16e2d/volumes/ f122d57f- 8273-48f3- a2fb-5335fcd15b 3f HTTP/1.1 Request- ID: req-e57eaa48- ff8e-4e50- a6fc-a054b899dd 9d 0nCxAoorJJxf0Ph Yq-siT8WrygdGzY g50Wg73kimG5khj P5FaUm4Un2yIcpw 0NJtsNpuy5gVT7y T6T33AY9ZJNJh7J yKWoKxH3r4R16Qp TsWISL54ctrYycQ Od1X2AeMmk_ rP7GvsxvihytwtW NLOXKJBf2rrXbbL l0C5X-I 0OJ1IJe6GDPu7fy JEmGsm8P82L2N2Z ek8BA5J0EF1v4iZ sH2ljWXqC- r1-zF4tMf_ QOmoBdD2o9rFgpu aoWlWwj0IyvgNlk c0nv8tn0RbGmpei 00Lf17- CMsfOTIxkrXF7JU ikDZGwvTNXzJ5CE ycYDIUjqcDkbN9- 6BsEx8
E.....@
... ...GET /volume/
Host: 192.168.121.129
User-Agent: python-cinderclient
Accept-Encoding: gzip, deflate
Accept: application/json
Connection: keep-alive
X-OpenStack-
X-Auth-Token: gAAAAABemBFu99R
X-Service-Token: gAAAAABemBFv2zK
with [service_ user]/send_ service_ user_token = true
09:02:06.437197 IP aio.57272 > aio.http: Flags [P.], seq 2567770992: 2567771702, ack 287109253, win 512, options [nop,nop,TS val 551765985 ecr 551765985], length 710: HTTP: GET /volume/ v3/57abc7a114c3 41708f5dea1a657 16e2d/volumes/ f122d57f- 8273-48f3- a2fb-5335fcd15b 3f HTTP/1.1 .@.Q... y...y.. ..P...p. ....... w@..... v3/57abc7a114c3 41708f5dea1a657 16e2d/volumes/ f122d57f- 8273-48f3- a2fb-5335fcd15b 3f HTTP/1.1 Request- ID: req-a77e52e6- b623-42c0- a6ec-e18691a1a4 bc 9lI3ECL_ zksQz1egSMytu4m G6vnWExq1HQBIFN 4O60hEJAgLLXOpC gpKDKX4VmVCDl4q Mgt8aBShGrC4eYm cjctIOuUbXlY9Tz gUxZAs8z6bKgDq5 OLbEgSgnCUIQAtv nY2f7vrmvFa2HAu cckXv7JUbYNhU4U Y15cFAR3U8 Evu4g3DJRerexgH EoiaOwHXPV6wgGY 10iG3RFbFbENqcV 1DNnFVUveX07i5Z ltABJqx0EXfb4Jl 1AsYzBjUS2zxFEK X8-niStTnEMsqpv Q2yfH9TPnldxh2S l4Y9WgxlgrvQLaP MXMLe7loIJhhuj3 HTkKAuGsmyouifO ThI
E...r&@
.G. .G.GET /volume/
Host: 192.168.121.129
User-Agent: python-cinderclient
Accept-Encoding: gzip, deflate
Accept: application/json
Connection: keep-alive
X-OpenStack-
X-Auth-Token: gAAAAABemB8N2IX
X-Service-Token: gAAAAABemB8Oypd