Divided the keystone docs into four categories, depending
upon the usage criteria: general information (which will
be common for all), developer documentation,
user documantation and operator documentation.
Change-Id: I2f5dd41acd9874739accc54c4f4fd69460b58334
there is a lot of overlap between the two docs, let's have a
single doc instead.
also clean up the references to modules as they have bitrotted.
Change-Id: I05d30fa51052b875b1de94c4152036b1d0768793
The text in the architecture doc is somewhat out-of-date for the
current function level of keystone. Edits include:
* Removed references to domain, project, role information in LDAP.
* Removed capitialization of keystone objects
* Some line wrap adjustments
* Updated link on oslo.policy location
Change-Id: Iefcaf00c8844613b10a2cf77a820db7fe0934742
This patch moves the token abstract base class out of core and
into providers/base.py, which is consistent with the other
backend drivers.
Change-Id: Icf22adb2ccfa0470bb61ceb7d6c90467f44da6c8
Closes-Bug: #1563101
Many releases ago, we supported the notion of having migration
repositories per backend interface. If a backend needed to use the
database, it could manage it's own migrations independently from the
rest of keystone. That functionality was removed long ago, and this
blurb of text should have been removed with it.
Change-Id: If90e25ec556cf42322509ef28878e96120b0baad
This patch updates the service backends documentation, updating the
location for the abstract base classes (out of core and into
backends.base).
Closes-Bug: #1563101
Change-Id: I0b4ce448ba94ec09294b07f704ee07d433049ac8
As part of an effort to remove backend dependencies on higher level
classes, this patch updates the dev docs, defining a standard as to
where abstract base classes are located and named.
Partial-Bug: #1563101
Change-Id: I784e344f333ee616bda800f63af0b1c149a529f3
Extended support for versioned driver classes to the rest of the
backends based on the design of the initial support for catalog backend @
https://review.openstack.org/#/c/218481/
partially Implements bp stable-driver-interfaces
Change-Id: I0078f6dc32932beb6db534ecf22b160097c5a090
This is the final part of the more comprehensive split of
assignments, which rationalizes both the backend and controllers.
In order to make this change easier for reviewers, it is divided
into a number of smaller patches. This patch divides up the
assignment controller, giving resource its own controller.
Previous patches have:
- Moved role management into its own manager and drivers
- Fixed incorrect doc strings for grant driver methods
- Updated controllers to call the new role manager
- Updated unit tests to call the new role manager
- Refactored the assignment manager and drivers enabling
projects/domains to be split out
- Fixed incorrect comment about circular dependency between
assignment and identity
- Moved the logically separated project and domain
functionality into their own manager/backend (called resource).
- Removes unused pointer to assignment from identity driver
- Uddated controllers and managers to call the new resource
manager
- Updated tests to call the new resource manager
Partially implements: bp pluggable-assignments
Change-Id: Ic7a4dbe9e39c1910ecc23b37d0b798955544fde4
This is the part of the more comprehensive split of
assignments, which rationalizes both the backend and controllers.
In order to make this change easier for reviewers, it is divided
into a number of smaller patches.
Previous patches:
- Move role management into its own manager and drivers
(see: https://review.openstack.org/#/c/144239/)
- Fix incorrect doc strings for grant driver methods
(see: https://review.openstack.org/#/c/144403/)
- Make controllers call the new, split out, role manager
(see: https://review.openstack.org/#/c/144494/)
- Make unit tests call the new, split out, role manager
(see: https://review.openstack.org/#/c/144548/)
- Refactor the assignment manager and drivers, enabling
projects/domains to be split out
(see: https://review.openstack.org/#/c/144650/)
- Fix incorrect comment about circular dependency between
assignment and identity
(see: https://review.openstack.org/#/c/144850/)
This patch moves the now logically separated project and domain
functionality into their own manager/backend (called resource).
Future patches will:
- Remove unused pointer to assignment in identity driver
- Update the controllers to call the new resource manager
- Update the tests to call the new resource manager
- Split the assignment controller, giving projects/domains
their own controller
Partially implements: bp pluggable-assignments
Change-Id: I0ff1c2fa30237734d0a25d03dad5be03eb166367
During reading the Keystone Architecture documentation I've found a nit
issue under the Service Backends section. There is a missing "be" in the
sentence "Each of the services can configured to". Additionally double
space has been removed from LDAP backend session.
Change-Id: Ie9044cb251edf24ec3d6263769461ed9ff922e86
This is the first part of the more comprehensive split of
assignments, which rationalizes both the backend and controllers.
In order to make this change easier for reviewers, it is divided
into a number of smaller patches.
Follow-on patches will:
- Fix incorrect doc strings for grant driver methods
- Update unit tests to call the new role manager
- Update the assignment controller to call the role manager
- Refactor assignment manager and driver methods to logically
separate project/domains from the actual assignments
- Split projects and domains into their own backend
- Split the controllers so they call the correct manager
- Update the tests to call the new correct manager
Partially implements: bp pluggable-assignments
Change-Id: I41fc23a049c26e514222a966c1847e183448be00
The architecture docs are very dated, and have several references
to tenants, PAM backends, and controllers that don't exist.
Change-Id: I85de743006e7df4fcf8ddbc3afc1a4bcd69583e6
Several examples were either missing code-blocks entirely,
this patch added either bash or python, so the rendered HTML
is nicer.
Change-Id: Ia145dc78a871dc27cf0926ea1ef9cf9b6df564b7
There were quite a few instances of `keystone` where `Keystone`
should have been used. Code examples were not changed, since that
would break things.
Change-Id: I533ad1b71cc3af1b70bb54cca0a820aaad3f62da
Add the appropriate styling macro for the code snippets in the
documentation. This change highlights the language syntax making
the documentation more readable.
Closes-Bug: #1276299
Change-Id: Id331be204f688ccbb6e9f2c7ab9287310477312b
KVS backends are deprecated and removing references to them from the
documentation will discourage their use.
Change-Id: Iad2f9c39f9d92465ada5ecb6001cfc2b225cc01f
Related-Bug: #986980
Similar to the other APIs, this creates a Driver class that describes
expected functionality of the catalog driver and raises NotImplemented
accordingly. NotImplementedError()'s are caught and returned as proper
501s instead of AttributeErrors.
Also fixes some inconsistent paramters names in the sql backend.
Fixes bug 954087
Update: Convert usage of NotImplementedError() to new
keystone.exception.NotImplemented() for all
unimplemented driver actions.
Change-Id: I69d8e21a6f651e69b724ec5ed5784645bad80c00
Samriddhi Jain