settingsLogin | Registersettings

[openstack-dev] [keystone] newton midcycle recap

0 votes

Hey Keystoners!

I’ve written up a summary for a few of the technical aspects of the
mid-cycle [1]. Dolph has written up a mid-cycle retrospective [2]. For a
full summary see the etherpad [3].

We came out of the mid-cycle with a lot of TODOs, here is a summary of the
action items.

everyone
- Review the code for bp views [4]
- Review the code for bp PCI [5]
- Review the code for bp credential encryption [6]
- Review the spec and code for MFA
- Spend 10 minutes looking at bugs and blueprints you own, mark as
invalid | fix released or implemented | obsolete as needed

ayoung
- Modify policy files of each project so they can use “isadminproject”
and document how to upgrade

bknudson
- Come up with a list of reviews/examples that violated the idea of
tracking/deploying master. Use that list of anti-patterns to generate solid
code review documentation so we are less likely to do it again.

breton
- Implement bp ldap-preprocessing [7]

dolphm
- Implement bp keystone-doctor [8] (DONE)
- Create a performance doc, bootstrap it with content (DONE)

henrynash:
- Finalize the rolling upgrade spec
- Implement support for rolling upgrades
- Write up a reseller spec using sub domains including the auth URL idea
(Ocata)

jamielennox
- Implement the work bp views [4]
- Create spec to resolve long running operations problem

lamt
- Create a spec for notifications for PCI events

rderose
- Implement bp PCI [5]

roxanaghe
- Create a facade for keystone LDAP code to make it nicer to use in the
identity backend. Compare performance of ldap3 vs pyldap

stevemar
- Submit bugs for RFEs for keystone doctor (DONE)
- Bump implementation of Unified Delegation to Ocata (DONE)

henrynash or bknudson
- Change federation shadow mapping to use the existing ID mapping (LDAP
already uses it) (Ocata)

bknudson and karthikb
- Propose patches to oslo.policy for improvements to external
authorization

[1]
https://developer.ibm.com/opentech/2016/07/28/openstack-keystone-newton-mid-cycle/

[2] http://dolphm.com/retrospective-on-openstack-midcycles
[3] https://etherpad.openstack.org/p/keystone-newton-midcycle
[4] https://review.openstack.org/#/q/topic:bp/views
[5] https://review.openstack.org/#/q/topic:bp/pci-dss
[6] https://review.openstack.org/#/q/topic:bp/credential-encryption
[7] https://blueprints.launchpad.net/keystone/+spec/ldap-preprocessing
[8] https://blueprints.launchpad.net/keystone/+spec/keystone-manage-doctor


OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
asked Jul 28, 2016 in openstack-dev by s.martinelli_at_gmai (5,460 points)   1 2 2
retagged Jan 26, 2017 by admin
...