RFE: Support sub domains to enable namespaces for projects

Bug #1816097 reported by Lance Bragstad
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Triaged
Wishlist
Unassigned

Bug Description

The proposal is to support hierarchical domains so that domain administrators can
create new namespaces for the purposes of allowing hierarchies to exist. Since we already store domains as projects, this is essentially extending the project hierarchy to include hierarchical
domains.

With the introduction of nested domains, there is a need to control whether assignments are inherited into child domains. This specification proposes a new project attribute for this which, for completeness, can also be used with non-domain projects within a hierarchy.

Revision history for this message
Lance Bragstad (lbragstad) wrote :
tags: added: hierarchical-multitenancy
Changed in keystone:
status: New → Triaged
importance: Undecided → Wishlist
tags: added: rfe
Revision history for this message
Morgan Fainberg (mdrnstm) wrote :

Specification for the nested domain for inherited assignments into child domains: https://review.openstack.org/#/c/332940/

description: updated
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.