Description of problem: Current documentation[0] doesn't show how to configure keystone AD/IdM/LDAP integration through Director and instead instructs the user to manually edit domain configuration files and use crudini to modify existing configuration files. [0] https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/10/html-single/integrate_with_identity_service/ Actual results: Manual steps are required to configure the overcloud after every stack update. Service outages occur until manual steps are executed. Expected results: No manual steps should be required and all configuration should be done using Director templates. Additional info: Configuration through Director templates is explained in an existing KCS: https://access.redhat.com/solutions/2988661
A Director-based integration chapter was added to the OSP12 version of the guide: https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/12/html-single/integrate_with_identity_service/#sec-director-ldap Checking if this can be applied to earlier releases...
For OSP12: docs were published here: https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/12/html-single/integrate_with_identity_service/#sec-director-ldap For OSP11, these are EOL.