Bug 1165505

Summary:	[RFE][keystone]: Hierarchical Multitenancy improvements
Product:	Red Hat OpenStack	Reporter:	RHOS Integration <rhos-integ>
Component:	openstack-keystone	Assignee:	Nathan Kinder <nkinder>
Status:	CLOSED ERRATA	QA Contact:	Mike Abrams <mabrams>
Severity:	medium	Docs Contact:
Priority:	high
Version:	unspecified	CC:	ayoung, markmc, mlopes, nbarcet, pablo.iranzo, yeylon
Target Milestone:	Upstream M2	Keywords:	FutureFeature
Target Release:	7.0 (Kilo)
Hardware:	Unspecified
OS:	Unspecified
URL:	https://blueprints.launchpad.net/keystone/+spec/hierarchical-multitenancy-improvements
Whiteboard:	upstream_milestone_kilo-2 upstream_definition_approved upstream_status_implemented
Fixed In Version:	openstack-keystone-2015.1.0-1.el7ost	Doc Type:	Enhancement
Doc Text:	With this update, Identity Service (keystone), is now able to construct a hierarchy of projects by specifying a 'parent_id' within a project resource. Previously, the Identity service only allowed for a flat project model; a project hierarchy allows for more flexible project structures, which can be used to mimic organizational structures. As a result, Projects can now define a parent project, allowing project hierarchies to be constructed.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-08-05 13:16:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1213686

Description RHOS Integration 2014-11-19 05:05:34 UTC

Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/hierarchical-multitenancy-improvements.

Description:

In the first version, we implemented the basic features for Hierarchical Multitenancy, to improve the concept of Multitenancy in Openstack some improvements are needed, such as the following:

* Change the format of a returned project hierarchy to better reflect the hierarchy (e.g., a hierarchy of dictionaries);

* Enable recursive deletion of a sub-hierarchy;

* Change the default policy to enable granular control of the hierarchy (i.e., more granular than the default admin and member roles)

Specification URL (additional information):

None

Comment 2 Mike Abrams 2015-04-29 11:19:22 UTC

can't seem to create a project specifying another project (syntax). can you take a look for version openstack-keystone-2015.2-dev31.el7.centos.noarch:

curl -X POST -H "X-Auth-Token:45ee59645af94569a3f83398fa172f60" -H "Content-type:application/json" http://localhost:35357/v3/projects -d '{"project": {"name": "projectB", "parent_project_id": "620421345de14dcf8f41186e2ca65e07", "enabled": true, "description": "An example project"}}' |python -mjson.tool

Comment 7 errata-xmlrpc 2015-08-05 13:16:12 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2015:1548