[openstack-dev] [keystone][all] Keystone V2 and V3 support in icehouse

Dolph Mathews dolph.mathews at gmail.com
Tue Feb 18 17:26:57 UTC 2014


On Tue, Feb 18, 2014 at 10:21 AM, Frittoli, Andrea (HP Cloud) <
frittoli at hp.com> wrote:

> Hi,
>
>
>
> thanks for the update
>
>
>
> Link to the tempest bp I’m working on:
> https://blueprints.launchpad.net/tempest/+spec/multi-keystone-api-version-tests
>
>
>
> The update of the python binding to use the keystone binding is targeted
> for icehouse or juno?
>

Clients are tracked against the same release milestones of the services, so
the integration can happen whenever someone wants to tackle it and we can
release them when they're ready.


>
>
> andrea
>
>
>
>
>
> *From:* Dolph Mathews [mailto:dolph.mathews at gmail.com]
> *Sent:* 18 February 2014 13:54
> *To:* OpenStack Development Mailing List (not for usage questions)
> *Cc:* Jamie Lennox
> *Subject:* Re: [openstack-dev] [keystone][all] Keystone V2 and V3 support
> in icehouse
>
>
>
>
>
> On Mon, Feb 10, 2014 at 5:23 PM, Frittoli, Andrea (Cloud Services) <
> frittoli at hp.com> wrote:
>
> Hi,
>
>
>
> I’m working on a tempest blueprint to make tempest able to run 100% on
> keystone v3 (or later versions) – the auth version to be used will be
> available via a configuration switch.
>
>
>
> The rationale is that Keystone V2 is deprecated in icehouse, V3 being the
> primary version. Thus it would be good to have (at least) one of the  gate
> jobs running entirely with keystone v3.
>
>
>
> Much appreciated! Have a link to that bp?
>
>
>
>
>
> There are other components beyond tempest that would need some changes to
> make this happen.
>
>
>
> Nova and cinder python bindings work only with keystone v2 [0], and as far
> as I know all core services work with keystone v2 (at least by default).
>
> Is there a plan to support identity v3 there until the end of icehouse?
>
>
>
> Yes (but maybe not by the end of icehouse)- we'd like to make all other
> client libraries depend on keystoneclient's library for authentication in
> the long run. Jamie Lennox has done a ton of great work to prepare
> keystoneclient for that responsibility during Icehouse.
>
>
>
> If not I think we may have to consider still supporting v2 in icehouse.
>
>
>
> v2 should certainly be supported in icehouse; which version other projects
> default to is up to them, but I'd like to see *all* projects at least
> defaulting to v3 by the end of Juno.
>
>
>
>
>
> Andrea
>
>
>
> [0] https://bugs.launchpad.net/python-novaclient/+bug/1262843
>
>
>
> --
>
> Andrea Frittoli
>
> IaaS Systems Engineering Team
>
> HP Cloud ☁
>
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140218/ee3db1a5/attachment.html>


More information about the OpenStack-dev mailing list