# Keystone Team Update - Week of 4 June 2018 ## News
Sorry this didn't make it out last week. This week we were busy wrapping up specification discussion before spec freeze. Most of which revolved around unified limits [0]. We're also starting to see implementations for MFA receipts [1] and application credentials capability lists [2]. [0] https://review.openstack.org/#/c/540803/ [1] https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:spec/auth_receipts [2] https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bp/whitelist-extension-for-app-creds ## Open Specs Search query: https://bit.ly/2G8Ai5q With the last few bits for hierarchical limits addressed and the specification merged, we don't expect to accept any more specifications for the Rocky release. ## Recently Merged Changes Search query: https://bit.ly/2IACk3F We merged 28 changes last week. Most of which were to move keystone off its homegrown WSGI implementation. Converting to Flask is a pretty big move for keystone and the team, but it reduces technical dept and will help with maintenance costs in the future since it's one less wheel we have to look after. ## Changes that need Attention Search query: https://bit.ly/2wv7QLK There are 50 changes that are passing CI, not in merge conflict, have no negative reviews and aren't proposed by bots. Please take it look if you have time to do a review or two. ## Bugs This week we opened 7 new bugs, closed 5, and fixed 5. Bugs opened (7) Bug #1775094 (keystone:Medium) opened by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1775094 Bug #1774654 (keystone:Undecided) opened by Wyllys Ingersoll https://bugs.launchpad.net/keystone/+bug/1774654 Bug #1774688 (keystone:Undecided) opened by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1774688 Bug #1775140 (keystone:Undecided) opened by Andras Kovi https://bugs.launchpad.net/keystone/+bug/1775140 Bug #1775207 (keystone:Undecided) opened by Pavlo Shchelokovskyy https://bugs.launchpad.net/keystone/+bug/1775207 Bug #1775295 (keystone:Undecided) opened by johnpham https://bugs.launchpad.net/keystone/+bug/1775295 Bug #1774722 (oslo.config:Low) opened by Kent Wu https://bugs.launchpad.net/oslo.config/+bug/1774722 Bugs closed (5) Bug #1578466 (keystone:Medium) https://bugs.launchpad.net/keystone/+bug/1578466 Bug #1578401 (keystone:Low) https://bugs.launchpad.net/keystone/+bug/1578401 Bug #1775140 (keystone:Undecided) https://bugs.launchpad.net/keystone/+bug/1775140 Bug #1775295 (keystone:Undecided) https://bugs.launchpad.net/keystone/+bug/1775295 Bug #1774722 (oslo.config:Low) https://bugs.launchpad.net/oslo.config/+bug/1774722 Bugs fixed (5) Bug #1728907 (keystone:Low) fixed by Gage Hugo https://bugs.launchpad.net/keystone/+bug/1728907 Bug #1673859 (oslo.policy:Undecided) fixed by ChangBo Guo(gcb) https://bugs.launchpad.net/oslo.policy/+bug/1673859 Bug #1741073 (oslo.policy:Undecided) fixed by Lance Bragstad https://bugs.launchpad.net/oslo.policy/+bug/1741073 Bug #1771442 (oslo.policy:Undecided) fixed by Lance Bragstad https://bugs.launchpad.net/oslo.policy/+bug/1771442 Bug #1773473 (oslo.policy:Undecided) fixed by Lance Bragstad https://bugs.launchpad.net/oslo.policy/+bug/1773473 ## Milestone Outlook https://releases.openstack.org/rocky/schedule.html Specification freeze and rocky-2 were last Friday. If you're working on a feature for this release (strict two level enforcement models [0], MFA receipts [1], capability lists [2], or basic default roles [3]), feature freeze is a month away. Reminder that we've bumped feature freeze up two weeks ahead of rocky-3 this release due to the issues we had last release with the rush before freeze. If you need help, please socialize it somewhere (ML or IRC). If you are available for reviews, some people implementing those features have asked for early feedback. [0] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/rocky/strict-two-level-enforcement-model.html [1] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/rocky/mfa-auth-receipt.html [2] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/rocky/capabilities-app-creds.html [3] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/rocky/define-default-roles.html ## Shout-outs Thanks to Morgan for all the work he did this week to get keystone converted to Flask [0]! This is going to help us a bunch in the future with things we've been talking about for a while (e.g. improved granularity for scope checks in keystone's API). [0] https://review.openstack.org/#/q/status:merged+project:openstack/keystone+branch:master+topic:flaskification ## Help with this newsletter Help contribute to this newsletter by editing the etherpad: https://etherpad.openstack.org/p/keystone-team-newsletter Dashboard generated using gerrit-dash-creator and https://gist.github.com/lbragstad/9b0477289177743d1ebfc276d1697b67
signature.asc
Description: OpenPGP digital signature
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
