Re: [Openstack-operators] Operator feedback on App Keys...
Great Edmund! We’d appreciate that. -Ron From: Edmund Rhudy (BLOOMBERG/ 120 PARK) [mailto:erh...@bloomberg.net] Sent: Thursday, April 6, 2017 12:43 PM To: De Rose, Ronald <ronald.de.r...@intel.com> Cc: openstack-operators@lists.openstack.org Subject: Re:[Openstack-operators] Operator feedback on App Keys... We have had internal discussions about app keys in Keystone and would be very happy to see it implemented (and to assist with the implementation where possible). From: ronald.de.r...@intel.com<mailto:ronald.de.r...@intel.com> Subject: Re:[Openstack-operators] Operator feedback on App Keys... During the PTG, the keystone team had a lengthy discussion on a new security credential for applications/scripts/3rd party tools, to avoid having to put username/password in configuration files. The following is a spec that addresses this feature by implementing App Keys to be used for application authentication. https://review.openstack.org/#/c/450415/ I’m looking for feedback from operators and others on this idea to determine if there is a strong need/demand for this. Thanks in advance. -Ron Ron De Rose Keystone Core IRC: rderose ___ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org<mailto:OpenStack-operators@lists.openstack.org> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators ___ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
[Openstack-operators] Operator feedback on App Keys...
During the PTG, the keystone team had a lengthy discussion on a new security credential for applications/scripts/3rd party tools, to avoid having to put username/password in configuration files. The following is a spec that addresses this feature by implementing App Keys to be used for application authentication. https://review.openstack.org/#/c/450415/ I'm looking for feedback from operators and others on this idea to determine if there is a strong need/demand for this. Thanks in advance. -Ron Ron De Rose Keystone Core IRC: rderose ___ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
Re: [Openstack-operators] Keystone to drop support for driver versioning…
Operators, We did not receive any feedback that dropping Keystone driver versioning would negatively impact anyone. Thus, the Keystone team met yesterday and decided to drop support for driver versioning. However, we will continue to support current legacy drivers. Moving forward though, what this means is, that if a Keystone driver interface changes and you have a custom implementation, you would need to upgrade your custom drivers to meet the new interface in order to upgrade OpenStack. Let us know if you have any questions. Regards, Ron Ron De Rose Intel (Keystone Developer) More information on Keystone drivers can be found here: http://docs.openstack.org/developer/keystone/developing_drivers.html From: De Rose, Ronald Sent: Monday, June 6, 2016 1:38 PM To: openstack-operators@lists.openstack.org Subject: Keystone to drop support for driver versioning… Operators, Currently in Keystone, we support driver versioning, where we support a driver interface for at least one version back. However, this has become burdensome in terms of maintenance and some of us are questioning the value of supporting this. Thus, we have a proposal in Newton to drop support for driver versioning. Under the new proposal, if a driver interface changes, we would clearly document it in the release notes and in order for you to upgrade, you would need to upgrade your custom drivers to meet the new interface. That being said, before deciding on this, we are looking for feedback on whether or not this would significantly impact you. Regards, Ron Ron De Rose Intel (Keystone Developer) More information on Keystone drivers can be found here: http://docs.openstack.org/developer/keystone/developing_drivers.html ___ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
[Openstack-operators] Keystone to drop support for driver versioning…
Operators, Currently in Keystone, we support driver versioning, where we support a driver interface for at least one version back. However, this has become burdensome in terms of maintenance and some of us are questioning the value of supporting this. Thus, we have a proposal in Newton to drop support for driver versioning. Under the new proposal, if a driver interface changes, we would clearly document it in the release notes and in order for you to upgrade, you would need to upgrade your custom drivers to meet the new interface. That being said, before deciding on this, we are looking for feedback on whether or not this would significantly impact you. Regards, Ron Ron De Rose Intel (Keystone Developer) More information on Keystone drivers can be found here: http://docs.openstack.org/developer/keystone/developing_drivers.html ___ OpenStack-operators mailing list OpenStack-operators@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators