openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update devstack from branch 'master'
  - Merge "Remove admin_domain_scope tempest setting"
  - Remove admin_domain_scope tempest setting
    
    Keystone is currently working through a bunch of changes to add proper
    system, domain, and project scope support for its API. This includes
    implementing ``admin``, ``member``, and ``reader`` roles for system,
    domain, and project assignments. More informaiton on those specific
    changes can be found here:
    
      https://review.openstack.org/#/q/(status:open+OR+status:closed)+project:openstack/keystone+branch:master+topic:implement-default-roles
    
    One thing that was uncovered in implementing that support for the
    project API was that setting tempest
    ``CONF.identity.admin_domain_scope = True`` meant domain admins of one
    domain would be able to list projects in other domains, highlighted in
    the following patch:
    
      https://review.openstack.org/#/c/624218/2
    
    This commit doesn't set this option and assumes the proper
    domain-scoping behavior being built into keystone natively.
    
    Change-Id: I12a57cc43de0b17eababa19b7b94de5277689f82
    Related-Bug: 1750660
This commit is contained in:
Zuul 2019-03-18 19:20:04 +00:00 committed by Gerrit Code Review
parent ec491085e8
commit 4eca8bc532
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
devstack

@ -1 +1 @@
Subproject commit d5a3a3e23feb4458ecbcb77813f1f4a4971912cc
Subproject commit 2ba01316f37fb2c41b7dbab4a244d712ab6ed8e0