Re: [Openstack] Help needed to understand keystone

2017-12-16 Thread remo
Content-Type: multipart/alternative; boundary="=_feea5127e39d341283587e513af8bc0d" --=_feea5127e39d341283587e513af8bc0d Content-Transfer-Encoding: base64 Content-Type: text/plain; charset=utf-8 SWYgeW91IHdhbnQgbW9yZSByb2xlcyB5b3UgbmVlZCB0byBjcmVhdGUgZG9tYWlucyBhbmQgc2V0 dXAgZGlmZmVyZW50IH

Re: [Openstack] Help needed to understand keystone

2017-12-15 Thread Volodymyr Litovka
Hi Chengwei, You can create as much roles as you want and create/modify rules in policy.json (can be found in /etc/keystone and other configuration directories of Openstack modules) to put these roles into reality And there is no notion 'project admin'. Unfortunately, in Keystone everybody w

[Openstack] Help needed to understand keystone

2017-10-18 Thread Chengwei Yang
Hi list, I'm recently learn keystone and got some questions below, thanks any reply in advance! 1. It seems that there are only 2 kinds of roles, regardless how many roles you created, all of them should be non-admin or admin, am I right? 2. If I was wrong, how to create a role with specific ca