openstack
/
keystone
Code Issues Proposed changes
keystone/keystone/conf
History
Kristi Nikolla b874977455 Deprecate [token] infer_roles=False 
The option `[token] infer_roles=False` is being deprecated in
favor of always expanding role implications during token
validation.

Default roles depend on a chain of implied role assignments.
Ex: an admin user will also have the reader and member role.
By ensuring that all these roles will always appear on the
token validation response, we can improve the simplicity and
readability of policy files.

blueprint deprecated-as-of-rocky

Change-Id: Id36c5b8f6a92f5f3e42e4bcedc3e2dd64eaeb130
 		2018-07-25 15:01:49 -04:00
..
__init__.py Remove pastedeploy 2018-06-06 19:30:26 +00:00
application_credential.py Impose limits on application credentials 2018-01-27 12:00:23 +01:00
assignment.py Default the assignment backend to SQL 2016-10-06 15:42:24 +00:00
auth.py Enable application_credential auth by default 2018-01-27 12:00:23 +01:00
catalog.py Fix misnamed variable in config 2017-05-08 05:00:51 +00:00
constants.py Enable application_credential auth by default 2018-01-27 12:00:23 +01:00
credential.py Add conf to support credential encryption 2016-08-18 14:58:13 +00:00
default.py Refresh the admin_token doc 2018-01-27 10:06:35 +08:00
domain_config.py Improve keystone.conf [domain_config] documentation 2016-06-29 14:16:03 -05:00
endpoint_filter.py Improve keystone.conf [endpoint_filter] documentation 2016-07-01 15:33:25 +00:00
endpoint_policy.py remove deprecated `[endpoint_policy] enable` option 2016-10-07 20:12:28 +00:00
eventlet_server.py Use HostAddressOpt for opts that accept IP and hostnames 2017-03-16 06:35:21 -04:00
federation.py Fix wording of configuration help text 2017-07-20 17:58:26 +00:00
fernet_tokens.py Improve keystone.conf [fernet_tokens] documentation 2016-07-02 08:07:58 +00:00
identity.py Remove rolling_upgrade_password_hash_compat 2017-12-18 09:20:53 +08:00
identity_mapping.py Improve keystone.conf [identity_mapping] documentation 2016-06-29 16:42:51 -05:00
ldap.py Remove LDAP write support 2017-01-21 21:32:07 -05:00
memcache.py Remove KVS code 2017-02-03 02:25:19 +00:00
oauth1.py Improve keystone.conf [oauth1] documentation 2016-07-01 13:41:34 +00:00
opts.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
policy.py Improve keystone.conf [policy] documentation 2016-06-30 19:51:25 +00:00
resource.py Resource backend is SQL only now 2017-08-14 19:01:02 +00:00
revoke.py Improve keystone.conf [revoke] documentation 2016-07-11 06:55:57 -05:00
role.py Improve keystone.conf [role] documentation 2016-07-11 07:46:26 -05:00
saml.py Set default value for [saml]/idp_contact_surname 2016-08-16 16:11:24 -07:00
security_compliance.py Update the help message for unique_last_password_count 2017-11-24 08:52:12 +08:00
shadow_users.py Improve keystone.conf [shadow_users] documentation 2016-07-13 20:14:46 +00:00
signing.py Removed the deprecated pki_setup command 2017-03-29 00:15:09 +00:00
token.py Deprecate [token] infer_roles=False 2018-07-25 15:01:49 -04:00
tokenless_auth.py Improve keystone.conf [tokenless_auth] documentation 2016-07-13 19:00:26 +00:00
trust.py Deprecate [trust]/enabled option 2018-01-02 19:42:21 +01:00
unified_limit.py Add configuration option for enforcement models 2018-04-30 16:19:12 +00:00
utils.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
wsgi.py Expand on debug_middleware option 2018-06-07 23:31:34 +00:00