Bug 1165505 - [RFE][keystone]: Hierarchical Multitenancy improvements
Summary: [RFE][keystone]: Hierarchical Multitenancy improvements
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-keystone
Version: unspecified
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: Upstream M2
: 7.0 (Kilo)
Assignee: Nathan Kinder
QA Contact: Mike Abrams
URL: https://blueprints.launchpad.net/keys...
Whiteboard: upstream_milestone_kilo-2 upstream_de...
Depends On:
Blocks: 1213686
TreeView+ depends on / blocked
 
Reported: 2014-11-19 05:05 UTC by RHOS Integration
Modified: 2016-04-26 13:28 UTC (History)
6 users (show)

Fixed In Version: openstack-keystone-2015.1.0-1.el7ost
Doc Type: Enhancement
Doc Text:
With this update, Identity Service (keystone), is now able to construct a hierarchy of projects by specifying a 'parent_id' within a project resource. Previously, the Identity service only allowed for a flat project model; a project hierarchy allows for more flexible project structures, which can be used to mimic organizational structures. As a result, Projects can now define a parent project, allowing project hierarchies to be constructed.
Clone Of:
Environment:
Last Closed: 2015-08-05 13:16:12 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHEA-2015:1548 0 normal SHIPPED_LIVE Red Hat Enterprise Linux OpenStack Platform Enhancement Advisory 2015-08-05 17:07:06 UTC

Description RHOS Integration 2014-11-19 05:05:34 UTC
Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/hierarchical-multitenancy-improvements.

Description:

In the first version, we implemented the basic features for Hierarchical Multitenancy, to improve the concept of Multitenancy in Openstack some improvements are needed, such as the following:

* Change the format of a returned project hierarchy to better reflect the hierarchy (e.g., a hierarchy of dictionaries);

* Enable recursive deletion of a sub-hierarchy;

* Change the default policy to enable granular control of the hierarchy (i.e., more granular than the default admin and member roles)

Specification URL (additional information):

None

Comment 2 Mike Abrams 2015-04-29 11:19:22 UTC
can't seem to create a project specifying another project (syntax). can you take a look for version openstack-keystone-2015.2-dev31.el7.centos.noarch:

curl -X POST -H "X-Auth-Token:45ee59645af94569a3f83398fa172f60" -H "Content-type:application/json" http://localhost:35357/v3/projects -d '{"project": {"name": "projectB", "parent_project_id": "620421345de14dcf8f41186e2ca65e07", "enabled": true, "description": "An example project"}}' |python -mjson.tool

Comment 7 errata-xmlrpc 2015-08-05 13:16:12 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2015:1548


Note You need to log in before you can comment on or make changes to this bug.