<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 02/19/2015 02:32 PM, Morgan Fainberg
wrote:<br>
</div>
<blockquote cite="mid:etPan.54e63a31.74b0dc51.7d6@nullptr.local"
type="cite">
<style>body{font-family:Helvetica,Arial;font-size:13px}</style>
<div id="bloop_customfont"
style="font-family:Helvetica,Arial;font-size:13px; color:
rgba(0,0,0,1.0); margin: 0px; line-height: auto;">
<div id="bloop_customfont" style="margin: 0px;">The Keystone
development team is planning to deprecate deployment of
Keystone under Eventlet during the Kilo cycle. Support for
deploying under eventlet will be dropped as of the “M”-release
of OpenStack.</div>
</div>
</blockquote>
<br>
I swear I heard a chorus of Angles singing Hallelujah as I read
this. I need to get my hearing checked.<br>
<br>
<br>
<blockquote cite="mid:etPan.54e63a31.74b0dc51.7d6@nullptr.local"
type="cite">
<div id="bloop_customfont"
style="font-family:Helvetica,Arial;font-size:13px; color:
rgba(0,0,0,1.0); margin: 0px; line-height: auto;">
<div id="bloop_customfont" style="margin: 0px;"><br>
</div>
<div id="bloop_customfont" style="margin: 0px;">The reasoning
behind this move is multifaceted but the core of the reasons
are as follows:</div>
<div id="bloop_customfont" style="margin: 0px;"><br>
</div>
<ul>
<li>Keystone relies on apache/web-server modules to handle
federated identity (validation of SAML, etc) and similar SSO
type authentication (Kerberos).</li>
<li>Eventlet has proven problematic when it comes to workloads
within Keystone, notably that a number of actions cannot
yield (either due to lacking in Eventlet, or that the
dependent library uses C-bindings that eventlet is not able
to work with).</li>
<li>Keystone has recommended (for multiple cycles) deploying
Keystone under apache instead of eventlet. In the gate we
primarily test all new development under Apache/mod_wsgi
deployments. </li>
<li>Most deployers I’ve discussed keystone deployment with are
either already on httpd+mod_wsgi or looking to move that
direction (for support of features such as federated auth).</li>
</ul>
<div>The review to finalize the deprecation is: <a
moz-do-not-send="true"
href="https://review.openstack.org/#/c/157495/">https://review.openstack.org/#/c/157495/</a> (Please
only provide comments on deprecation, verbiage can be modified
separately from the actual act of deprecation).</div>
<div><br>
</div>
<div>Please comment on the review or in reply to this Email.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>—Morgan</div>
<br>
<div id="bloop_sign_1424373821460910080" class="bloop_sign">
<div style="font-family: helvetica, arial;">-- <br>
Morgan Fainberg</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: <a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev-request@lists.openstack.org?subject:unsubscribe">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</pre>
</blockquote>
<br>
</body>
</html>