<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I've just dropped in place a bunch of developer documentation (RST) for Keystone - one in, one pending (<a href="https://review.openstack.org/#change,1089">https://review.openstack.org/#change,1089</a>). Making these docs brought up a number of questions that I wasn't able to answer. I want to put more context around the commands and concepts for the reader prior to updating the docbook documentaiton. Joe Savak suggested on IRC that I just drop them out here to the list, so here goes:<div><br></div><div>If any of these are "just bugs", let me know and I'll file them.<br><div><br></div><div>Q: Why is an administrative service token bound to a tenant?</div><div>Right now, keystone-manage to create an administrative service token, the token which in turn is configured into nova, swift, glance, and dashboard, requires a tenant - but as I understand tenant that doesn't make sense - as the various services all serve more than one tenant.</div><div><br></div><div>Q: How do you remove a service?</div><div><br></div><div>Q: How do you remove an EndpointTemplate?</div><div><br></div><div>Q: What's the purpose of a "role" prior to RBAC </div><div>Is it really just relevant for the Keystone administrative API, but more coming online later with the RBAC work? Does any role based link between a user and a tenant allow that user to get a scoped token for that tenant?</div><div><br></div><div>Q: How do you remove a role?</div><div><br></div><div>Q: What's the keystone-manage command for "credential add" do? There's also no corresponding delete or disable - is this password update for the passwords that are set on "keystone-manage user add"? If not, how are those passwords updated?</div><div><br></div><div>Q: What are "type" and "key" as related to "credential add" command, and what are they intended to do?</div><div><br></div><div>Q: Why isn't there a "user delete" and a "tenant delete"? Is this a "just haven't gotten to it yet" bug?</div><div><br></div><div>-joe</div></div></body></html>