Move the identity sources support matrix to the administrator guide and
clean up the remainder of the configuration page and the operator guide.
Change-Id: If6978121873b6b4a5438164f082f359688477298
Some of the admin guide pages were prefixed with "identity-" because
they came from the centralized install guide or operators guide or
security guide or somewhere else. We don't need the prefix, everything
in keystone is identity. Remove the prefix from the affected pages so
that everything is consistent.
Change-Id: Icd172a39fe720472f1fb15395178f90282696ac9
As part of the docs consolidation effort, move the SSL recommendation to
the installation guides for each distro. This also corrects the wording:
"running in a web server" is not necessarily secure on its own, the web
server must be configured to use SSL.
Change-Id: If0b547680cbbea4c7f29d82de3f4fe96bd14b4ec
Currently, the section "Public ID Generators" is a subsection of
"Identity sources" but it reads as very out of place. Looking at the
commit that introduced the section (1a50986e7c), it's clear this was
meant to be part of the domain-specific-config section and was missed in
a reshuffle. This patch puts it back in place.
Change-Id: I2873f104adf6af4da4ba23f8c0d8afb0c1161da3
We already have an admin guide on creating services in the catalog and
creating service users, so reduce the duplication in the configuration
guide.
Change-Id: I1de964753b8c6c95af10b8c84501e4f74ca382e4
Before keystone needed to be run on two separate ports to
accommodate the Identity v2 API which ran a separate
admin-only service commonly on port 35357. With the removal
of the v2 API, keystone runs only on port 5000.
Change-Id: I012662ea2af80441c99bafee757569d8b0d40ff3
With the docs migration and re-arrangement, some docs
have been shifted to new places, however the referenced
links are still old. Some of them give 404 error or
just point to the home page. This patch fixes those URLs.
Change-Id: Ie6b18ab3d4aa346dac8436dd426277fee4f07fcd
Added keystone-manage documentation from man pages
to the placeholder created for CLI Documentation.
Change-Id: I0e259c76d96c6479a6165c535bc49c032b2f41da
This is part of an effort to consolidate all the content in the
Operator guide into the Administrator guide.
Change-Id: I3431ecbff399bf6ae7620996e4c4cce9bb3489eb
This commit merges two documents that were both attempting to
document integrating keystone with LDAP. Instead, we should have a
single document so that it's easier to operators to understand and
find.
Change-Id: I1b1927b498d93f39d57a03b60384de22f07ad2f2
This is part of an effort to consolidate everything from the Operator
guide into the Administrator guide.
Change-Id: I76b0eaee11f5a8d68304a163381c905611edd43b
The admin-guide and configuration.rst both had separate sections
that detailed certificate documentation. Much of the documentation
was exactly the same. Now that keystone owns it's own admin-guide,
we can remove the duplication and simplify our docs.
Change-Id: I387902723637174c259ff421083a2933942f07fd
The operator documentation had a section specific to developing
authentication plugins. This type of documentation is better suited
to the contributor guide. This commit moves it there.
Change-Id: I74337e8b3d8c9031fa3cb7fb709cc41042161bb9
Keystone nows has it's own configuration guide, which means we no
longer need to maintain a separate configuration reference in the
operator guide.
Change-Id: Iadfb90db9f5f23798d57a442e372d35519332a49
The operator documentation had two sections that described
bootstrapping keystone. This is better suited for the admin-guide
and this commit moves it there.
Change-Id: Ibca2bc3e439ca6e26d8e4ead13ed101fd9010f12
The admin-guide and configuration guide both had separate sections
dedicated to documenting caching. This patch attempts to consolidate
them into a single section in the admin-guide. It also takes the
opportunity to update a couple pieces of information that have
changed since writing the original docs in configuration.rst.
The old configuration section also reference a lot of configuration
options for caching. These were removed because they should be
documented in the configuration guide.
Change-Id: Ifb39075a6a78419e5c44c7e0871f3e1c055c2332
Now that the admin guide is within keystone, we can remove all the
operator specific information we were maintaining in tree. This will
make it easier to operators to find all the information they need
related to tokens.
Change-Id: Iac2bf86a7b06b54fe8edea6ddbc62fe576b8959c
This commit moves the token cleanup documentation we had on our
configuration.rst to the official admin-guide. This is an effort to
consolidate all admin-like information into a single place for easier
discoverability and more consistent documentation.
Change-Id: I9e02fbe366a13e86d1be5cba46df71c4ff725b9d
In parsing the configuration.rst doc and porting important bits over
to the admin-guide, I noticed the revocation events section isn't
very accurate.
The revocation API (GET /v3/OS-REVOKE/events) has been deprecated and
only returns an empty list, since it was only used for PKI/Z tokens,
which are no longer supported by keystone.
Otherwise revocation events are a structure that keystone only uses
internally. This commit removes it from the configuration.rst guide.
The information that was accurate in the guide is already documented
in configuration and the API.
Change-Id: I45d16fd50239efc543fe20b228b021f65cfd104d
Divided the keystone docs into four categories, depending
upon the usage criteria: general information (which will
be common for all), developer documentation,
user documantation and operator documentation.
Change-Id: I2f5dd41acd9874739accc54c4f4fd69460b58334
The API specifications were moved out of the specs repo and into the
api-ref directory of the main keystone repo[1]. This patch updates some
of the straggler links in the configuration docs that still referenced
the old location.
[1] https://review.openstack.org/#/c/342399/
Change-Id: I883cfb4ab8b65873286f46194a8c8ccd7af97dd2
This patch just adds a note under the configuration section for
rolling upgrades to inform the user that
``keystone-manage db_sync --check`` is now available to run when
they would like information about the status of their upgrade.
Change-Id: I29e2ccd8973443daf592aaa45bb4e8167327c7cc