[openstack-dev] Multi-project tokens in Keystone Identity API

Jorge Williams jorge.williams at rackspace.com
Mon Jan 14 12:25:19 UTC 2013


In the mean time have you seen:  https://github.com/RackerWilliams/multi-tenant-accounting/blob/master/tenants.pdf?raw=true

This was the original proposal for tenant/projects in keystone,  it doesn't directly address your question, but it may help provide some context.

See you Tuesday,

-jOrGe W.

On Jan 14, 2013, at 5:04 AM, Henry Nash wrote:

> Jorge/Joe,
> Regarding your bp proposal on this (https://review.openstack.org/#/c/19014/), I am still struggling with the use case - maybe we just need to describe it in more detail - the summary provided so far doesn't quite go far enough.  I am a bit concerned over the changes required to process the tokens (which every policy engine will have to implement if we want the tokens to be honored)...and whether it is worth it.  A really good use case would convince me, however :-)
> I have added a discussion entry on this to the keystone project meeting tomorrow.
> Henry

More information about the OpenStack-dev mailing list