Re: [openstack-dev] Questions about token scopes

2018-06-01 Thread Lance Bragstad
It looks like I had a patch up to improve some developer documentation that is relevant to this discussion [0]. [0] https://review.openstack.org/#/c/554727/ On 06/01/2018 08:01 AM, Jens Harbott wrote: > 2018-05-30 20:37 GMT+00:00 Matt Riedemann : >> On 5/30/2018 9:53 AM, Lance Bragstad wrote:

Re: [openstack-dev] Questions about token scopes

2018-06-01 Thread Jens Harbott
2018-05-30 20:37 GMT+00:00 Matt Riedemann : > On 5/30/2018 9:53 AM, Lance Bragstad wrote: >> >> While scope isn't explicitly denoted by an >> attribute, it can be derived from the attributes of the token response. >> > > Yeah, this was confusing to me, which is why I reported it as a bug in the >

Re: [openstack-dev] Questions about token scopes

2018-06-01 Thread Ghanshyam Mann
On Thu, May 31, 2018 at 11:24 PM, Lance Bragstad wrote: > > > On 05/31/2018 12:09 AM, Ghanshyam Mann wrote: >> On Wed, May 30, 2018 at 11:53 PM, Lance Bragstad wrote: >>> >>> On 05/30/2018 08:47 AM, Matt Riedemann wrote: I know the keystone team has been doing a lot of work on scoped tokens

Re: [openstack-dev] Questions about token scopes

2018-05-31 Thread Lance Bragstad
On 05/31/2018 12:09 AM, Ghanshyam Mann wrote: > On Wed, May 30, 2018 at 11:53 PM, Lance Bragstad wrote: >> >> On 05/30/2018 08:47 AM, Matt Riedemann wrote: >>> I know the keystone team has been doing a lot of work on scoped tokens >>> and Lance has been trying to roll that out to other projects

Re: [openstack-dev] Questions about token scopes

2018-05-31 Thread Lance Bragstad
On 05/30/2018 03:37 PM, Matt Riedemann wrote: > On 5/30/2018 9:53 AM, Lance Bragstad wrote: >> While scope isn't explicitly denoted by an >> attribute, it can be derived from the attributes of the token response. >> > > Yeah, this was confusing to me, which is why I reported it as a bug in > the

Re: [openstack-dev] Questions about token scopes

2018-05-31 Thread Ghanshyam Mann
On Thu, May 31, 2018 at 2:09 PM, Ghanshyam Mann wrote: > On Wed, May 30, 2018 at 11:53 PM, Lance Bragstad wrote: >> >> >> On 05/30/2018 08:47 AM, Matt Riedemann wrote: >>> I know the keystone team has been doing a lot of work on scoped tokens >>> and Lance has been trying to roll that out to

Re: [openstack-dev] Questions about token scopes

2018-05-30 Thread Ghanshyam Mann
On Wed, May 30, 2018 at 11:53 PM, Lance Bragstad wrote: > > > On 05/30/2018 08:47 AM, Matt Riedemann wrote: >> I know the keystone team has been doing a lot of work on scoped tokens >> and Lance has been trying to roll that out to other projects (like nova). >> >> In Rocky the nova team is adding

Re: [openstack-dev] Questions about token scopes

2018-05-30 Thread Matt Riedemann
On 5/30/2018 9:53 AM, Lance Bragstad wrote: While scope isn't explicitly denoted by an attribute, it can be derived from the attributes of the token response. Yeah, this was confusing to me, which is why I reported it as a bug in the API reference documentation:

Re: [openstack-dev] Questions about token scopes

2018-05-30 Thread Lance Bragstad
On 05/30/2018 08:47 AM, Matt Riedemann wrote: > I know the keystone team has been doing a lot of work on scoped tokens > and Lance has been trying to roll that out to other projects (like nova). > > In Rocky the nova team is adding granular policy rules to the > placement API [1] which is a good

[openstack-dev] Questions about token scopes

2018-05-30 Thread Matt Riedemann
I know the keystone team has been doing a lot of work on scoped tokens and Lance has been trying to roll that out to other projects (like nova). In Rocky the nova team is adding granular policy rules to the placement API [1] which is a good opportunity to set scope on those rules as well.