Train Project Update Colleen Murphy (cmurphy/@cmurpheus) Lance - - PowerPoint PPT Presentation

▶

Feb 20, 2023 203 likes •602 views

Train Project Update Colleen Murphy (cmurphy/@cmurpheus) Lance Bragstad (lbragstad/@LanceBragstad) What is keystone ? Contributions in Stein Achievements in Stein Plans for Train Looking ahead Cross-project initiatives How to participate Related

SLIDE 1

Train Project Update

Colleen Murphy (cmurphy/@cmurpheus) Lance Bragstad (lbragstad/@LanceBragstad)

SLIDE 2

What is keystone? Contributions in Stein Achievements in Stein Plans for Train Looking ahead Cross-project initiatives How to participate Related sessions and talks

SLIDE 3

What is keystone?

implementation of the OpenStack Identity API shared service for authentication and authorization broker between OpenStack and other identity services discovery service

SLIDE 4

What is keystone?

implementation of the OpenStack Identity API shared service for authentication and authorization broker between OpenStack and other identity services discovery service

SLIDE 5

What is keystone?

implementation of the OpenStack Identity API shared service for authentication and authorization broker between OpenStack and other identity services discovery service

SLIDE 6

What is keystone?

implementation of the OpenStack Identity API shared service for authentication and authorization broker between OpenStack and other identity services discovery service

SLIDE 7

What is keystone?

implementation of the OpenStack Identity API shared service for authentication and authorization broker between OpenStack and other identity services discovery service

SLIDE 8

What does keystone do?

supplies identity information to end users and services protects services from unauthenticated access facilitates collaboration through multi-tenancy emits event notifications for auditing

SLIDE 9

What does keystone do?

supplies identity information to end users and services protects services from unauthenticated access facilitates collaboration through multi-tenancy emits event notifications for auditing

SLIDE 10

What does keystone do?

supplies identity information to end users and services protects services from unauthenticated access facilitates collaboration through multi-tenancy emits event notifications for auditing

SLIDE 11

What does keystone do?

supplies identity information to end users and services protects services from unauthenticated access facilitates collaboration through multi-tenancy emits event notifications for auditing

SLIDE 12

What does keystone do?

supplies identity information to end users and services protects services from unauthenticated access facilitates collaboration through multi-tenancy emits event notifications for auditing

SLIDE 13

Contributions in Stein

707 commits 73%, 85 committers 3% 3724 reviews 42%, 124 reviewers 1%, 10 core reviewers 33% 194 bug reports 59%, 195 bugs closed 91%

SLIDE 14

Generated with https://github.com/lbragstad/openstack-release-summarizer

SLIDE 15

Achievements in Stein

MFA Receipts JWS tokens domain level quota limits system scope APIs read-only role

SLIDE 16

Achievements in Stein

MFA Receipts JWS tokens domain level quota limits system scope APIs read-only role

SLIDE 17

Achievements in Stein

MFA Receipts JWS tokens domain level quota limits system scope APIs read-only role

SLIDE 18

Achievements in Stein

MFA Receipts JWS tokens domain level quota limits system scope APIs read-only role

SLIDE 19

Achievements in Stein

MFA Receipts JWS tokens domain level quota limits system scope APIs read-only role

SLIDE 20

Plans for Train

access rules for application credentials renewable application credentials client support for MFA receipts complete system scope policy changes polish read-only role implementation immutable resources

SLIDE 21

Plans for Train

access rules for application credentials renewable application credentials client support for MFA receipts complete system scope policy changes polish read-only role implementation immutable resources

SLIDE 22

Plans for Train

access rules for application credentials renewable application credentials client support for MFA receipts complete system scope policy changes polish read-only role implementation immutable resources

SLIDE 23

Plans for Train

access rules for application credentials renewable application credentials client support for MFA receipts complete system scope policy changes polish read-only role implementation immutable resources

SLIDE 24

Plans for Train

access rules for application credentials renewable application credentials client support for MFA receipts complete system scope policy changes polish read-only role implementation immutable resources

SLIDE 25

Plans for Train

access rules for application credentials renewable application credentials client support for MFA receipts complete system scope policy changes polish read-only role implementation immutable resources

SLIDE 26

Looking ahead

federation and edge improvements identity provider proxy hierarchical enforcement models for unified limits enhance tokenless authentication

SLIDE 27

Looking ahead

federation and edge improvements identity provider proxy hierarchical enforcement models for unified limits enhance tokenless authentication

SLIDE 28

Looking ahead

federation and edge improvements identity provider proxy hierarchical enforcement models for unified limits enhance tokenless authentication

SLIDE 29

Looking ahead

federation and edge improvements identity provider proxy hierarchical enforcement models for unified limits enhance tokenless authentication

SLIDE 30

Looking ahead

federation and edge improvements identity provider proxy hierarchical enforcement models for unified limits enhance tokenless authentication

SLIDE 31

Cross-project initiatives

adoption of unified limits properly consuming scope types default roles support

SLIDE 32

Cross-project initiatives

adoption of unified limits properly consuming scope types default roles support

SLIDE 33

Cross-project initiatives

adoption of unified limits properly consuming scope types default roles support

SLIDE 34

Cross-project initiatives

adoption of unified limits properly consuming scope types default roles support

SLIDE 35

How to participate

irc

#openstack-keystone

email

penstack-discuss@lists.openstack.org, tag [keystone]

meetings

Tuesdays at 16:00 UTC in #openstack-meeting-alt

bugs

https://bugs.launchpad.net/keystone

specs

http://specs.openstack.org/openstack/keystone-specs/

roadmap

https://trello.com/b/ClKW9C8x/keystone-train-roadmap

PTG

Thursday-Saturday, room 106

SLIDE 36

Forum sessions

Keystone Application Credentials: Status and Planning

Monday 11:10 Ballroom level 4A

Keystone Operator Feedback

Monday 12:00 Ballroom level 4A

Increasing API accessibility with granular policy and default roles

Wednesday 16:20 Ballroom level 4A

Unified limits update and migration

Wednesday 17:10 Ballroom level 4B

SLIDE 37

Presentations

You can't make a (Denver) omelette without breaking eggs: Using OpenStack policies for great good

Monday 12:00 Meeting Room Level 401/402

Access Control Policy Hands On Lab

Monday 15:50 Meeting Room Level 4D

Bridging Clouds with Keystone to Keystone Federation

Wednesday 11:40 Meeting Room Level 501/502

Keystone JWS Tokens: Past, Present, and Future

Wednesday 11:40 Meeting Room Level 505/506

Keystone - Project Onboarding

Wednesday 13:40 Room 406

SLIDE 38