From 9ea497539bb1e20fc2d247719f98401d5f7cd67c Mon Sep 17 00:00:00 2001 From: Attila Fazekas Date: Tue, 22 Mar 2016 15:22:03 +0100 Subject: [PATCH] Configure the admin as admin Make our usual admin user to be a real admin, and open the way for improving the per project policy.json files. Change-Id: I133a5953d209bc1edbd03ecfae750f77e3eaa64d Related-Change: https://review.openstack.org/#/c/242232 --- lib/keystone | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/lib/keystone b/lib/keystone index acdd7e40a9..71f20ac0b0 100644 --- a/lib/keystone +++ b/lib/keystone @@ -340,6 +340,12 @@ function configure_keystone { iniset $KEYSTONE_CONF DEFAULT max_token_size 16384 iniset $KEYSTONE_CONF fernet_tokens key_repository "$KEYSTONE_CONF_DIR/fernet-keys/" + + # Configure the project created by the 'keystone-manage bootstrap' as the cloud-admin project. + # The users from this project are globally admin as before, but it also + # allows policy changes in order to clarify the adminess scope. + iniset $KEYSTONE_CONF resource admin_project_domain_name default + iniset $KEYSTONE_CONF resource admin_project_name admin } # create_keystone_accounts() - Sets up common required keystone accounts