yahoo-eng-team team mailing list archive

[Morgan Fainberg <morgan.fainberg@xxxxxxxxx>]

I'm going to mark this as an "opinion" - I don't think we've resolved
domain scope is the right one. We can make changes w/o needing this bug.

** Changed in: keystone
       Status: Triaged => Opinion

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1378036

Title:
  Keystone unit tests should use domain scoped token

Status in OpenStack Identity (keystone):
  Opinion

Bug description:
  Keystone is moving towards v3.  Identity operations are supposed to
  use domain scoped token and all the services are supposed to use
  tenant scoped token.  The concept of domain_admin will work only if
  you use domain scoped token.

  Most of l the keystone unit tests use v3 tokens.  But those v3 tokens
  are "project scoped". It should have been domain scoped.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1378036/+subscriptions