Comment 1 for bug 1566985

Revision history for this message
Ian Cordasco (icordasc) wrote :

> How's the project thinking about that idea?

The individual projects? Keystone? oslo.policy? Which project?

Keystone has been talking about admin-ness not being properly scoped for a while. [1] Meanwhile, if you look up domains, there are good examples of using domains in a policy rule. [2]

Do you want OSA to configure multi-domain clouds with configuration and create admins per-domain? If so, you're asking that in a very round-about manner and I'm not certain that's OSA's purpose (which is to deploy OpenStack). Yes part of deploying OpenStack is to create the service users in Keystone, but it really doesn't go much further than that. Something extending OSA could do this work. I'm not convinced OSA needs to support this though (outside maybe allowing for domains to be created with it's keystone library)

[1]: https://bugs.launchpad.net/keystone/+bug/968696
[2]: https://wiki.openstack.org/wiki/Domains