openstack
/
horizon
Code Issues Proposed changes

Document OPENSTACK_KEYSTONE_ADMIN_ROLES 

OPENSTACK_KEYSTONE_ADMIN_ROLES was added in Kilo and used by
django_openstack_auth. However, it was never documented. Adding now.

Closes-Bug: #1488154
Change-Id: I0ba4e15677d62e1176dc51456b1e2728640149e9
This commit is contained in:
David Lyle 2015-08-24 10:06:53 -06:00
parent ef1d49e086
commit 03b40d96f8
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
doc/source/topics/settings.rst
View File

@ -681,6 +681,24 @@ This value must correspond to an existing role name in Keystone. In general,
the value should match the ``member_role_name`` defined in ``keystone.conf``.
``OPENSTACK_KEYSTONE_ADMIN_ROLES``
----------------------------------
.. versionadded:: 2015.1(Kilo)
Default: ``["admin"]``
The list of roles that have administrator privileges in this OpenStack
installation. This check is very basic and essentially only works with
keystone v2.0 and v3 with the default policy file. The setting assumes there
is a common ``admin`` like role(s) across services. Example uses of this
setting are:
* to rename the ``admin`` role to ``cloud-admin``
* allowing multiple roles to have administrative privileges, like
``["admin", "cloud-admin", "net-op"]``
``OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT``
------------------------------------------