Jump to: navigation, search

Meetings/KeystoneMeeting

< Meetings
Revision as of 01:58, 9 November 2015 by Henry-nash (talk | contribs) (Main Agenda)

Weekly Keystone team meeting

If you're interested in identity, authentication, authorization, and/or policy for OpenStack, we hold public meetings weekly on IRC in #openstack-meeting, on Tuesdays at 18:00 UTC. Please feel free to add items to the agenda below with your name and we'll cover them.

Regular attendees

Add yourself to this list to be pinged prior to each meeting:

ajayaa, amakarov, ayoung, breton, browne, davechen, david8hu, dolphm, dstanek, ericksonsantos, geoffarnold, gyee, henrynash, hogepodge, htruta, jamielennox, joesavak, lbragstad, lhcheng, marekd, morganfainberg, nkinder, raildo, rharwood, rodrigods, roxanaghe, samueldmq, shaleh, stevemar, tsymanczyk, topol, vivekd, wanghong, claudiub, rderose, samleon, xek

Agenda for next meeting

Main Agenda

Please add agenda items to the bottom of this section's list (be sure to include your irc_handle!).

2015-11-10

  • Converting from MySQL's DATETIME to integers for timestamps. lbragstad odyssey4me
  • Prefer built-in xml rather than lxml bknudson
    • Proposed switch of saml2 auth plugin: https://review.openstack.org/#/c/242512/
    • lxml requires a binary build when deploying, which takes a while to build
    • lxml has some features that xml doesn't
      • namespaces on elements & in xpath queries -- xml namespace registration is global so can't be used in a library
      • query on element requires relative
      • query doesn't support picking out attribute /@whatever
  • Custom project ID at project creation? gyee
  • Let's create a new assignment driver (V9): Hmm, how does one do that and ensure the old one is still tested? henrynash
  • Enhancing list_role_assignments: Should we add name or whole entities? henrynash
  • HMT Phase 1 & Phase 2 henrynash
    • At the summit we endorsed the 2-phase approach to HMT. Phase 1 being to store top-level domains as projects. For phase 2 (the actually reseller case where a cloud provider, delegates part of they cloud to a reseller who in turn sells this to their own customers), the request was to investigate using Federation instead of the propose hierarchy of projects acting as domains. The analysis of this has been carried out and was sent to the dev list (see: http://lists.openstack.org/pipermail/openstack-dev/2015-October/078063.html)
    • As proposed in the mail, I believe we cannot solve this with federation, but should implement the planned hierarchy of projects acting as domains.

Review of Keystone Blueprints for No-Spec Requires Status

Please add BPs to the bottom of this sections list that should be reviewed as not requiring a spec (include your irc_handle!).

Keystone Weekly Bug Reports

Bugs for the various Keystone repositories are collects and published to the following links. (lbragstad)


Roles

Please keep this as a standing topic until we have consensus on direction

Previous meetings

Logs and meeting summaries of previous meetings are located here.