# Keystone Team Update - Catch-up report 8 October - 28 October 2018

It's been a few weeks since I've been able to get one of these out, so here's a 
summary of what's been happening in that time.

## News

### Community Goals Status

Mutable config: Kristi has a patch under review[1].
Python3-first: Keystone has python3 functional tests completed, working our way 
through the remainder of our repositories.
Upgrade status checks: Scaffolding is in place[2] but we need to decide what 
checks should be included.

[1] https://review.openstack.org/585417
[2] https://review.openstack.org/608785

### Flask conversion complete

The last patch to migrate keystone to Flask has merged[3]. Thanks Morgan for 
pushing all this through! There is still some work to be done to migrate 
keystonemiddleware away from the Webob implementation.

With the migration to Flask, some users have noticed that the healthcheck 
middleware no longer works the same way[4]. Custom middleware is also no longer 
possible, but there are workarounds[5].

[3] https://review.openstack.org/609839
[4] http://lists.openstack.org/pipermail/openstack-dev/2018-October/135696.html
[5] 
http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2018-10-02.log.html#t2018-10-02T13:53:12

### Oath federation examples

Oath open-sourced their custom auth plugin for Athenz[6], which we may want to 
model our federated shadow user implementation after. We're analyzing the 
difference and collaborating on a path to move in this direction in keystone[7].

[6] 
https://github.com/yahoo/openstack-collab/tree/master/keystone-federation-ocata
[7] https://etherpad.openstack.org/p/keystone-shadow-mapping-athenz-delta

### Outreachy

I submitted two projects for Outreachy and there has been a lot of interest in 
both of them. Applicants now need to log a contribution so they can be eligible 
to apply for the project, so you may see a lot of new faces before the November 
6 deadline. If you have ideas for beginner-friendly tasks, let me know so I can 
hand them out to our newcomers.

## Open Specs

Search query: https://bit.ly/2Pi6dGj

In addition to the three Stein specs that have been open for a while, we opened 
and closed another to allow for explicit domain IDs upon domain creation[8]. 

There are also a number of "ongoing" specs proposed that need attention[9]

[8] https://bit.ly/2OyDLTh
[9] https://review.openstack.org/611201

## Help with this newsletter

Help contribute to this newsletter by editing the etherpad: 
https://etherpad.openstack.org/p/keystone-team-newsletter
Dashboard generated using gerrit-dash-creator and 
https://gist.github.com/lbragstad/9b0477289177743d1ebfc276d1697b67

__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Reply via email to