yahoo-eng-team team mailing list archive

[Doug Hellmann <doug@xxxxxxxxxxxxxxxx>]

** Changed in: keystone
       Status: Fix Committed => Fix Released

** Changed in: keystone
    Milestone: None => liberty-1

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1445183

Title:
  Expose domain_name in the context for policy.json

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  The setup for cloud_admin in the policy file required knowing the uuid
  of the cloud admin domain ahead of time.  This would required
  additional handling for deployers, and adding complexity for
  deploment.

  Exposing the domain_name in the context would make it easier for the
  deployer to setup the cloud admin policy.

  Instead of defining the policy for cloud admin as:
  "cloud_admin": "rule:admin_required and domain_id:admin_domain_id",

  The deployer have the flexibility to define the policy as:
  "cloud_admin": "rule:admin_required and domain_name:admin_domain_name",

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1445183/+subscriptions