<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Feb 18, 2014 at 10:21 AM, Frittoli, Andrea (HP Cloud) <span dir="ltr"><<a href="mailto:frittoli@hp.com" target="_blank">frittoli@hp.com</a>></span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-GB" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi, <u></u><u></u></span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">thanks for the update<u></u><u></u></span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Link to the tempest bp I’m working on: <a href="https://blueprints.launchpad.net/tempest/+spec/multi-keystone-api-version-tests" target="_blank">https://blueprints.launchpad.net/tempest/+spec/multi-keystone-api-version-tests</a> <u></u><u></u></span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">The update of the python binding to use the keystone binding is targeted for icehouse or juno?</span></p>

</div></div></blockquote><div><br></div><div>Clients are tracked against the same release milestones of the services, so the integration can happen whenever someone wants to tackle it and we can release them when they're ready.</div>

<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-GB" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> <u></u><u></u></span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">andrea<u></u><u></u></span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>

<p class="MsoNormal" style="margin-left:36.0pt"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif""> Dolph Mathews [mailto:<a href="mailto:dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>] <br>

<b>Sent:</b> 18 February 2014 13:54<br><b>To:</b> OpenStack Development Mailing List (not for usage questions)<br><b>Cc:</b> Jamie Lennox<br><b>Subject:</b> Re: [openstack-dev] [keystone][all] Keystone V2 and V3 support in icehouse<u></u><u></u></span></p>

<div><div class="h5"><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p><div><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p><div><p class="MsoNormal" style="margin-left:36.0pt">On Mon, Feb 10, 2014 at 5:23 PM, Frittoli, Andrea (Cloud Services) <<a href="mailto:frittoli@hp.com" target="_blank">frittoli@hp.com</a>> wrote:<u></u><u></u></p>

<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm"><div><div><p class="MsoNormal" style="margin-left:36.0pt">Hi,<u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">

 <u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">I’m working on a tempest blueprint to make tempest able to run 100% on keystone v3 (or later versions) – the auth version to be used will be available via a configuration switch.<u></u><u></u></p>

</div></div></blockquote><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm"><div><div><p class="MsoNormal" style="margin-left:36.0pt"> <u></u><u></u></p>

<p class="MsoNormal" style="margin-left:36.0pt">The rationale is that Keystone V2 is deprecated in icehouse, V3 being the primary version. Thus it would be good to have (at least) one of the  gate jobs running entirely with keystone v3.<u></u><u></u></p>

</div></div></blockquote><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt">Much appreciated! Have a link to that bp?<u></u><u></u></p></div>

<div><p class="MsoNormal" style="margin-left:36.0pt"> <u></u><u></u></p></div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm"><div><div><p class="MsoNormal" style="margin-left:36.0pt">

 <u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">There are other components beyond tempest that would need some changes to make this happen.<u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">

 <u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">Nova and cinder python bindings work only with keystone v2 [0], and as far as I know all core services work with keystone v2 (at least by default). <u></u><u></u></p>

<p class="MsoNormal" style="margin-left:36.0pt">Is there a plan to support identity v3 there until the end of icehouse?<u></u><u></u></p></div></div></blockquote><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>

</div><div><p class="MsoNormal" style="margin-left:36.0pt">Yes (but maybe not by the end of icehouse)- we'd like to make all other client libraries depend on keystoneclient's library for authentication in the long run. Jamie Lennox has done a ton of great work to prepare keystoneclient for that responsibility during Icehouse.<u></u><u></u></p>

</div><div><p class="MsoNormal" style="margin-left:36.0pt"> <u></u><u></u></p></div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm"><div><div><p class="MsoNormal" style="margin-left:36.0pt">

If not I think we may have to consider still supporting v2 in icehouse.<u></u><u></u></p></div></div></blockquote><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt">

v2 should certainly be supported in icehouse; which version other projects default to is up to them, but I'd like to see *all* projects at least defaulting to v3 by the end of Juno.<u></u><u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt">

 <u></u><u></u></p></div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm"><div><div><p class="MsoNormal" style="margin-left:36.0pt"> <u></u><u></u></p>

<p class="MsoNormal" style="margin-left:36.0pt">Andrea<u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt"> <u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">[0] <a href="https://bugs.launchpad.net/python-novaclient/+bug/1262843" target="_blank">https://bugs.launchpad.net/python-novaclient/+bug/1262843</a> <u></u><u></u></p>

<p class="MsoNormal" style="margin-left:36.0pt"> <u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">-- <u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">Andrea Frittoli<u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">

<span lang="EN-US">IaaS Systems Engineering Team </span><u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt">HP Cloud <span lang="EN-US" style="font-family:"Segoe UI Symbol","sans-serif"">☁</span><u></u><u></u></p>

</div></div><p class="MsoNormal" style="margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt"><br>_______________________________________________<br>OpenStack-dev mailing list<br><a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>

<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><u></u><u></u></p></blockquote></div><p class="MsoNormal" style="margin-left:36.0pt">

<u></u> <u></u></p></div></div></div></div></div></div><br>_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div></div>