yahoo-eng-team team mailing list archive

[Adam Young <1808059@xxxxxxxxxxxxxxxxxx>]

UNtil recently, this should be in bootstrap.  This is the minimal amount
of configuration a Keystone server needs: to be able to create a new
domain, or create projects on the domain, etc.

Now it should be one admin user with a service scoped admin role.  From
that, all other configuration can flow.

** Summary changed:

- admin user should have admin role in the Default domain
+ admin user should have service scoped admin role

** Changed in: keystone
       Status: Opinion => New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1808059

Title:
  admin user should have service scoped admin role

Status in OpenStack Identity (keystone):
  New

Bug description:
  
  * Some 3rd party (NFV) require the admin user to have the admin role in the Default domain. 

  * Some deployers automatically add the admin user to the Default
  domain post deployment but it could probably be better to have
  keystone-manage bootstrap a domain with --bootstrap-domain-name.

  * We already assign user to project and create the Default domain in
  the bootstrapping procedure.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1808059/+subscriptions