This is the part of the more comprehensive split of assignments, which rationalizes both the backend and controllers. In order to make this change easier for reviewers, it is divided into a number of smaller patches. Previous patches: - Move role management into its own manager and drivers (see: https://review.openstack.org/#/c/144239/) - Fix incorrect doc strings for grant driver methods (see: https://review.openstack.org/#/c/144403/) - Make controllers call the new, split out, role manager (see: https://review.openstack.org/#/c/144494/) - Make unit tests call the new, split out, role manager (see: https://review.openstack.org/#/c/144548/) - Refactor the assignment manager and drivers, enabling projects/domains to be split out (see: https://review.openstack.org/#/c/144650/) - Fix incorrect comment about circular dependency between assignment and identity (see: https://review.openstack.org/#/c/144850/) This patch moves the now logically separated project and domain functionality into their own manager/backend (called resource). Future patches will: - Remove unused pointer to assignment in identity driver - Update the controllers to call the new resource manager - Update the tests to call the new resource manager - Split the assignment controller, giving projects/domains their own controller Partially implements: bp pluggable-assignments Change-Id: I0ff1c2fa30237734d0a25d03dad5be03eb166367
OpenStack Keystone
Keystone provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. It is most commonly deployed as an HTTP interface to existing identity systems, such as LDAP.
Developer documentation, the source of which is in
doc/source/, is published at:
The API specification and documentation are available at:
The canonical client library is available at:
Documentation for cloud administrators is available at:
The source of documentation for cloud administrators is available at:
Information about our team meeting is available at:
Bugs and feature requests are tracked on Launchpad at:
Future design work is tracked at:
http://specs.openstack.org/openstack/keystone-specs/#identity-program-specifications
Contributors are encouraged to join IRC
(#openstack-keystone on freenode):
For information on contributing to Keystone, see
CONTRIBUTING.rst.