This patch provides Keystone documents for OAuth2.0 client
authorization. The specification about new API is added to API
Reference. Also OAuth2.0 client credentials grant flow is added to
admin guide.
Implement: blueprint oauth2-client-credentials-ext
Change-Id: I6ac5835fb64a4e81f34f7b8631d255b2bb7f66da
Now that most of the operator docs are consolidated into the admin
guide, it is huge and hard to find things. This patch breaks the guide
into groups to make it a little easier to navigate:
1. Getting started: basics of keystone and initializing a deployment.
2. Configuration: not a replacement for the main config docs but a
grouping of all discussions on the various config options.
3. Operations: maintenance workflows like upgrading and cleanups
4. Tokens: an important part of keystone
5. RBAC: gets a section to itself
6. Advanced keystone features: grouping of lesser-known/lesser-used,
not-required features.
7. Authentication mechanisms: various auth methods besides password,
including the federation guide
Change-Id: I9039b7023d843349154d28ee0ee2c7b9a9eb97ab
Part of the "manage services" document was redundant with the "service
catalog" document. This change combines the two, additionally adding a
note about how to create an endpoint once a service is created.
Change-Id: Ieee33fb73a61bc2d4d1746a05b9497740a99440d
Trusts are user-facing, so explaining how they work should be in the
user guide. Cleaning up expired trusts is still an administrative task,
so leave that in the admin guide.
Change-Id: I9a77efd3c93c9b5b504c8143a51fb08b50139119
Move the identity sources support matrix to the administrator guide and
clean up the remainder of the configuration page and the operator guide.
Change-Id: If6978121873b6b4a5438164f082f359688477298
The "Certificates for PKI" guide is about generating certificate pairs
for signing PKI tokens, which we don't support anymore. Remove the
crufty guide.
Change-Id: I0aff718cf580892d3e5378c6705c089f496c88fd
Some of the admin guide pages were prefixed with "identity-" because
they came from the centralized install guide or operators guide or
security guide or somewhere else. We don't need the prefix, everything
in keystone is identity. Remove the prefix from the affected pages so
that everything is consistent.
Change-Id: Icd172a39fe720472f1fb15395178f90282696ac9
User options have been available in keystone for a few releases but
there isn't any official documentation for them.
This commit add a general section to the administrator guide that
attempts to describe each options and its type.
Change-Id: Ib0cc07236ba9083c2a35bf8ac6444ccfd19b7219
Related-Bug: 1792026
The 'bind' option was deprecated and is
in no use now, thus removing it. Also
removing its rst file.
bp:removed-as-of-stein
Change-Id: Ie355733dc031b3c4908fdc4e44f8f1220cff456c
There is already a more extensive guide in the advanced topics
section[1] so this stub guide does not provide any value and feels out
of place. Remove it to avoid duplication and confusion.
[1] https://docs.openstack.org/keystone/latest/advanced-topics/external-auth.html
Change-Id: I2b96f4bf285cf5cc79ab0c44685bc15b5d9b61e9
The federated-identity guide in the admin section is out of date
relative to the one in the operator section. It is sort of incoherent
and the information within it that is valuable is already present in the
other guide. Delete this guide in favor of just promoting the operator
guide.
Related-bug: #1793374
Change-Id: I8c0190725d0f7297957bbf10fd9d7184e52ff5f3
This adds a new page of documentation to describe how keystone handles
case sensitivity (or the lack of) depending on the resource and
backend used.
Change-Id: I868b43e6be7809648f9260e1b272f5626b30a95d
This commit add some high-level documentation from the unified limit
specification to the administrator guide. A subsequent patch will
elaborate on enforcement models.
bp unified-limits
Change-Id: Ic644a7073fb8eeed9427b8c702ba2fa15fd4a9d5
This is part of an effort to consolidate all the content in the
Operator guide into the Administrator guide.
Change-Id: I3431ecbff399bf6ae7620996e4c4cce9bb3489eb
This is part of an effort to consolidate everything from the Operator
guide into the Administrator guide.
Change-Id: I76b0eaee11f5a8d68304a163381c905611edd43b
Now that the admin-guide lives within keystone, it should be home to
our performance documentation.
Change-Id: I522cf238a977e9cead384fcf993300e7f8c2a395
The doc migration spec requires each sub directory
to have an index page which could be directly
referenced in the main openstack documentation under
the topic specific pages, along with other projects.
This patch validates that and adds new files where
they are absent.
Change-Id: I180952857db758482fd767aa9f5cf6343fec9c42
Hiromu Asahina