You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
You're also welcome to generate your own mapping to suit your needs; however, if you want to use the example mapping (which is suitable for production) you can.
18
18
19
19
```json
20
-
[
21
-
{
22
-
"local": [
23
-
{
24
-
"user": {
25
-
"name": "{0}",
26
-
"email": "{1}"
27
-
}
28
-
},
29
-
{
30
-
"projects": [
31
-
{
32
-
"name": "{2}_Flex",
33
-
"roles": [
34
-
{
35
-
"name": "member"
36
-
},
37
-
{
38
-
"name": "load-balancer_member"
39
-
},
40
-
{
41
-
"name": "heat_stack_user"
42
-
}
43
-
]
44
-
}
45
-
]
46
-
}
47
-
],
48
-
"remote": [
49
-
{
50
-
"type": "RXT_UserName"
51
-
},
52
-
{
53
-
"type": "RXT_Email"
54
-
},
55
-
{
56
-
"type": "RXT_TenantName"
57
-
},
58
-
{
59
-
"type": "RXT_orgPersonType",
60
-
"any_one_of": [
61
-
"admin",
62
-
"default",
63
-
"user-admin",
64
-
"tenant-access"
65
-
]
66
-
}
67
-
]
68
-
}
69
-
]
20
+
--8<-- "etc/keystone/mapping.json"
70
21
```
71
22
72
23
!!! tip
73
24
74
-
Save the mapping to a local file before uploading it to keystone. In the examples, the mapping is stored at `/tmp/mapping.json`.
25
+
The example mapping **JSON** file can be found within the genestack repository at `etc/keystone/mapping.json`.
The following commands will setup a readonly user which is able to read data across domains.
4
+
5
+
## Create the VMM user and project
6
+
7
+
After running the following commands, a readonly user (example: `vmm`) will have read only access to everything under the `default` and `rackspace_cloud_domain` domains.
0 commit comments