keystone/keystone
Harry Rybacki d44ed7f18c Ensure default roles created during bootstrap
Expand bootstrap process to include creation of roles outlined in
basic default roles spec.

The bootstrap process now creates two new roles, 'reader' and 'member,
in addition to the well established 'admin' role. During this process,
a role implication[1] chain is created: 'admin' implies 'member' and
'member' implies 'reader'.

[1] - https://developer.openstack.org/api-ref/identity/v3/#create-role-inference-rule

Co-Authored-By: Juan Antonio Osorio Robles <jaosorior@redhat.com>
bp basic-default-roles
Depends-On: https://review.openstack.org/574149
Change-Id: Ie18a269e3d1075d955fe494acaf634a393c6bd7b
2018-06-14 10:54:54 -04:00
..
application_credential Merge "Populate application credential data in token" 2018-02-20 04:50:33 +00:00
assignment Allow cleaning up non-existant group assignments 2018-04-09 16:08:34 +00:00
auth Remove the TokenAuth middleware 2018-05-10 14:40:39 +00:00
catalog Fixing multi-region support in templated v3 catalog 2018-03-13 11:10:08 -07:00
cmd Ensure default roles created during bootstrap 2018-06-14 10:54:54 -04:00
common Merge "Remove the TokenAuth middleware" 2018-06-01 15:04:55 +00:00
conf Remove token driver configuration 2018-05-10 11:28:16 +08:00
contrib Remove all v2.0 APIs except the ec2tokens API 2018-02-06 23:12:55 +01:00
credential Merge "Rename fernet_utils to token_utils" 2018-01-16 13:48:28 +00:00
endpoint_policy Use keystone.common.provider_api for endpoint_policy APIs 2017-12-27 16:56:49 +00:00
federation Merge "Update IdP sql model" 2018-05-21 04:44:22 +00:00
identity Invalidate the shadow user cache when deleting a user 2018-04-25 11:39:29 +08:00
limit Limit description support 2018-05-08 10:59:41 +08:00
locale Imported Translations from Zanata 2018-03-07 06:31:57 +00:00
middleware Remove the TokenAuth middleware 2018-05-10 14:40:39 +00:00
models Implement system-scoped tokens 2018-01-23 23:33:43 +00:00
oauth1 Simplify federation and oauth token callbacks 2018-02-16 21:41:30 +00:00
policy Use keystone.common.provider_api for policy APIs 2017-12-27 17:10:20 +00:00
resource Fix list_limit doesn't work correctly for domain 2018-04-03 14:26:59 +08:00
revoke Simplify token persistence callbacks 2018-02-16 21:40:07 +00:00
server Remove the sql token driver and uuid token provider 2018-02-12 17:32:47 +00:00
tests Ensure default roles created during bootstrap 2018-06-14 10:54:54 -04:00
token Remove dead code in token provider 2018-05-03 20:55:47 +00:00
trust Populate application credential data in token 2018-02-19 22:41:12 +01:00
version Remove all v2.0 APIs except the ec2tokens API 2018-02-06 23:12:55 +01:00
__init__.py Revert "Disable eventlet monkey-patching of DNS" 2013-05-10 10:24:48 -04:00
exception.py Remove unused exception 2018-05-03 20:32:01 +00:00
i18n.py Update links in keystone 2017-09-12 15:18:13 +08:00
notifications.py Simplify federation and oauth token callbacks 2018-02-16 21:41:30 +00:00