<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>
<div>We've already started an implementation for key management that was demoed at the conference and we are looking to incubate. This is CloudKeep and can be found here:</div>
</div>
</div>
<div><br>
</div>
<div><a href="https://github.com/cloudkeep">https://github.com/cloudkeep</a></div>
<div><br>
</div>
<div>Is this a suggestion for a competing project? From my discussions with everyone at the conference, there doesn't seem to be any active development occurring anywhere else (please let me know if that's not the case as we should join forces!).</div>
<div><br>
</div>
<div>CloudKeep will be publishing our blueprints this week or early next after we get everything updated from all our discussions at the summit. There is a lot of good thought in Malini's blueprint and ours will take some of into account along with many of
the discussions we had at the conference. However, there are some parts that I'm still very leery of implementing including any hard requirements on hardware features, KMIP and some of the scoping questions. Some of these issues were discussed at the design
session and still need to be hammered out.</div>
<div><br>
</div>
<div><br>
</div>
<div>Jarret</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Dolph Mathews <<a href="mailto:dolph.mathews@gmail.com">dolph.mathews@gmail.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>OpenStack Development Mailing List <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Date: </span>Tuesday, April 23, 2013 8:33 AM<br>
<span style="font-weight:bold">To: </span>OpenStack Development Mailing List <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [openstack-dev] Key Manager blueprint updated<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">ignition?</div>
<div class="gmail_extra"><br clear="all">
<div>
<div><br>
</div>
-Dolph</div>
<br>
<br>
<div class="gmail_quote">On Tue, Apr 23, 2013 at 3:09 AM, Bhandaru, Malini K <span dir="ltr">
<<a href="mailto:malini.k.bhandaru@intel.com" target="_blank">malini.k.bhandaru@intel.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">Hello Everyone!<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thank you to those of you who attended the key manager design summit session and provided input.<u></u><u></u></p>
<p class="MsoNormal">Missed some of you who have provided feedback on the mailing list.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I’ve updated the blueprint based on the discussions. Do let me know if you are in favor of<u></u><u></u></p>
<p class="MsoNormal">Limiting access to keys based on original owner (user/project/tenant). With this approach, a put/create would need an additional<u></u><u></u></p>
<p class="MsoNormal">Argument to indicate scope.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I anticipate over this week breaking out the details into sub-blueprints for easier parceling into implementation sub-units.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><a href="https://wiki.openstack.org/wiki/KeyManager" target="_blank">https://wiki.openstack.org/wiki/KeyManager</a><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Also open to suggestions for a name for the project <span style="font-family:Wingdings">
J</span><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Jangle – the sound a bunch of keys make?<u></u><u></u></p>
<p class="MsoNormal">Key Manager (no obfuscation !)<u></u><u></u></p>
<p class="MsoNormal">(keystore is too similar to keystone .. -1)<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Regards<span class="HOEnZb"><font color="#888888"><u></u><u></u></font></span></p>
<span class="HOEnZb"><font color="#888888">
<p class="MsoNormal">Malini<u></u><u></u></p>
</font></span></div>
</div>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</span>
</body>
</html>