This is possible to do by playing around with the Keystone endpoint table. The only problematic area is that it doesn't work in Horizon without making some changes.
This document describes the changes needed to get Horizon to work. I have been meaning to turn this into a proper blog post or article so it's actually searchable on the web. See the section on "Central Authentication".
There's a Blueprint that I have been meaning to work on that would officially incorporate these changes.
Besides regions, there's also Cells. Although fundamentally different than Regions, Cells can partition your OpenStack cloud into separate areas while still sharing services between areas.
Nice work. How much of this work has been merged into the codebase or at least been used as the basis for blueprints?
Nice! this will help my investigation, we are also interested in this blueprint implementation, maybe we can do a collaborative work, did you already talked with Gabriel Hurley about that?
I would suggest you to discuss new features on the Development mailing list https://wiki.openstack.org/wiki/MailingLists. Also, have you suggested this as a topic for the OpenStack Design Summit http://summit.openstack.org ?
Keystone has made lots of progress to enable federation. A good starting point is the [official documentation[(http://docs.openstack.org/developer/keystone/configure_federation.html).
Asked: 2013-03-20 16:29:40 -0500
Seen: 9,118 times
Last updated: Dec 11 '14
the document mentioned above can't be accessed, can you paste your document content here ?