Bug 1165505 – [RFE][keystone]: Hierarchical Multitenancy improvements

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1165505 - [RFE][keystone]: Hierarchical Multitenancy improvements

Summary:	[RFE][keystone]: Hierarchical Multitenancy improvements

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	openstack-keystone (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	Unspecified Unspecified

Priority	high Severity medium
Target Milestone:	Upstream M2
Target Release:	7.0 (Kilo)
Assigned To:	Nathan Kinder
QA Contact:	Mike Abrams
Docs Contact:

URL:	https://blueprints.launchpad.net/keys...
Whiteboard:	upstream_milestone_kilo-2 upstream_de...
Keywords:	FutureFeature

Depends On:
Blocks:	1213686
	Show dependency tree / graph

Reported:	2014-11-19 00:05 EST by RHOS Integration
Modified:	2016-04-26 09:28 EDT (History)
CC List:	6 users (show)

See Also:
Fixed In Version:	openstack-keystone-2015.1.0-1.el7ost
Doc Type:	Enhancement
Doc Text:	With this update, Identity Service (keystone), is now able to construct a hierarchy of projects by specifying a 'parent_id' within a project resource. Previously, the Identity service only allowed for a flat project model; a project hierarchy allows for more flexible project structures, which can be used to mimic organizational structures. As a result, Projects can now define a parent project, allowing project hierarchies to be constructed.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2015-08-05 09:16:12 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHEA-2015:1548	normal	SHIPPED_LIVE	Red Hat Enterprise Linux OpenStack Platform Enhancement Advisory	2015-08-05 13:07:06 EDT

Groups: None (edit)

Description RHOS Integration 2014-11-19 00:05:34 EST

Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/hierarchical-multitenancy-improvements.

Description:

In the first version, we implemented the basic features for Hierarchical Multitenancy, to improve the concept of Multitenancy in Openstack some improvements are needed, such as the following:

* Change the format of a returned project hierarchy to better reflect the hierarchy (e.g., a hierarchy of dictionaries);

* Enable recursive deletion of a sub-hierarchy;

* Change the default policy to enable granular control of the hierarchy (i.e., more granular than the default admin and member roles)

Specification URL (additional information):

None

Comment 2 Mike Abrams 2015-04-29 07:19:22 EDT

can't seem to create a project specifying another project (syntax). can you take a look for version openstack-keystone-2015.2-dev31.el7.centos.noarch:

curl -X POST -H "X-Auth-Token:45ee59645af94569a3f83398fa172f60" -H "Content-type:application/json" http://localhost:35357/v3/projects -d '{"project": {"name": "projectB", "parent_project_id": "620421345de14dcf8f41186e2ca65e07", "enabled": true, "description": "An example project"}}' |python -mjson.tool

Comment 7 errata-xmlrpc 2015-08-05 09:16:12 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2015:1548

Note You need to log in before you can comment on or make changes to this bug.