openstack
/
keystone
Code Issues Proposed changes
keystone/etc
History
Guang Yee a2e307ed4d correct the admin_or_target_domain rule 
With the removal of KeystoneToken from the token model, we longer
have the ability to use the token data syntax in the policy rules.
This change broke backward compatibility for those is deploying
customized Keystone policies. Unfortunately, we can't go back
to KeystoneToken model as the change was tightly coupled with
the other refactored authorization functionalities.

Since the scope information is now available in the credential
dictionary, we can just make use of it instead. Those who have
custom policies must update their policy files accordingly.

Change-Id: I83eae5c390d720da05e91264519ae01e8ca32159
closes-bug: 1810983
 		2019-01-28 09:07:34 -08:00
..
README.txt Remove the sample .conf file 2018-04-18 19:41:37 +00:00
default_catalog.templates Update sample catalog templates 2015-11-04 10:06:45 +08:00
keystone-paste.ini Remove pastedeploy 2018-06-06 19:30:26 +00:00
logging.conf.sample Generate apache-style common access logs 2013-01-31 08:16:21 -06:00
policy.v3cloudsample.json correct the admin_or_target_domain rule 2019-01-28 09:07:34 -08:00
sso_callback_template.html Add WebSSO support for federation 2015-02-18 23:35:30 -05:00

README.txt 

To generate the sample keystone.conf and keystone.policy.yaml files, run the
following commands from the top level of the keystone directory:

    tox -egenconfig
    tox -egenpolicy

For a pre-generated example of the latest files, see:

    https://docs.openstack.org/keystone/latest/configuration/samples/index.html