# Keystone Team Update - Week of 9 April 2018
This week was another quiet week with our primary focus being
specification reviews. We did reach consensus on the application
credentials specification , which landed on Tuesday. Even though it
hasn't landed yet, there's been a bunch of good discussion on the
cross-project default roles specification, which is shaping up nicely .
Keystonemiddleware is now officially VMT managed , meaning
keystonemiddleware is treated as more of a first class citizen when
dealing with vulnerabilities. This effort has been underway for over a
year and it finally became official this week.
## Open Specs
Search query: https://goo.gl/eyTktx
No new specifications were proposed this week, but there are several
that still need reviews. Specifically default roles , unified limits
 and JWT . Those specifications would really benefit from some
more eyes. If you have questions, let us know in IRC and we can discuss it.
## Recently Merged Changes
Search query: https://goo.gl/hdD9Kw
We merged 6 changes this week. Mainly dealing with PTI changes, updated
pysaml2 requirements, and a bug fix or two.
## Changes that need Attention
Search query: https://goo.gl/tW5PiH
There are 51 changes that are passing CI, not in merge conflict, have no
negative reviews and aren't proposed by bots. Please have a look if you
have time. If you're curious about what to review or have questions
about a change, please stop by #openstack-keystone or check out the
priorities in Trello .
There are a total of 127 bugs open against openstack/keystone, with a
pretty even distribution ranging from High through Undecided. If you see
something that interests you, please don't hesitate to communicate it
with us. We do set aside time every week during office hours to help
High (14): https://bit.ly/2v7yedC
Medium (33): https://bit.ly/2qvb23L
Low (32): https://bit.ly/2JEjoyJ
Wishlist (32): https://bit.ly/2JFGa9c
Undecided (16): https://bit.ly/2qsSjXe
## Milestone Outlook
Next Friday is specification proposal freeze. Our next deadline is June
8th, which is specification freeze. We should be focused on finishing up
our specification reviews so that we can get implementations moving for
Big thanks to Gage and Kristi for the work they did to get
keystonemiddleware VMT managed! This took a long time and it easily
could have been dropped. Thanks for pushing this forward!
## Help with this newsletter
Help contribute to this newsletter by editing the
OpenStack Development Mailing List (not for usage questions)