[openstack-dev] [keystone] [keystone] [ptl] PTL candidacy for Queens

Lance Bragstad lbragstad at gmail.com
Fri Aug 4 20:39:00 UTC 2017


*

Hi all,

**

I'd like to formally communicate my desire to continue serving as the
keystone PTL for the upcoming Queen’s release. Despite some turbulence
throughout the Pike development cycle, keystone has managed to make
progress on some long standing issues. Even though the pace of
development has decreased, I think we can build momentum from the small
victories in Pike and have a productive Queens release. I'd like to
direct our focus on the following areas for continued improvement and
stability of the keystone project throughout the Queen’s cycle.


      Policy Improvements

We dedicated a significant portion of our time this release getting
policy into code and documented. We also had meaningful discussions with
operators and developers, resulting in a plan that improves
long-standing issues with OpenStack policy enforcement. I'd like to
carry this momentum into Queens and ensure we’re implementing global
role assignments. Additionally, I'd like to work closely with the oslo
team to find ways we can signal deprecations to operators though the
oslo.policy library. This will help us define a better set of default
roles in Rocky, and clean-up policy enforcement at each service. Lastly,
I look forward to championing the community goal to move policy and
documentation into code for all applicable projects.


      Application Credentials

At the forum and while reviewing the specification, we realized just how
important this work is to our users. While it's unfortunate we didn't
make as much progress here as we hoped during Pike, the discussions this
cycle highlighted a lot of concerns with design as well as usability. I
think we're all better off and more prepared to address the last few
tough design bits during the PTG. One of my goals during the PTG is to
facilitate those conversations and verbosely communicate our approach. I
think that will help us keep the goal in mind as we drive towards
delivering this in Queens.


      Unified Limits

Addressing unified limits was another long-standing issue that we did a
good job of capturing and documenting throughout the Pike release [0].
Pending available resources, it would be great to push this forward,
starting with unified limits in keystone. This will have a positive
impact on any project currently experiencing issues with quota and will
make quota usability more consistent overall.


      Testing

Throughout Pike, our team spent a significant amount of time paying down
testing, technical debt. We cleaned-up and extended support for
federated testing, and we've integrated testing with our tempest plugin.
We added experimental support to test rolling upgrades and look forward
to gating on rolling upgrades in Queens. In the upcoming months, we need
to focus our efforts on better LDAP integration testing, which has been
on our TODO list for too long.


      Team Building

Last, but certainly not least, we need to recruit new keystone
contributors - part or full-time. Some of our most experienced and
well-versed developers moved onto other projects outside of OpenStack.
Luckily, the remaining team members have ambitiously stepped up to fill
the gaps. I want to ensure this project is working optimally on all
cylinders. In order for us to do this and achieve our Queen’s goals, we
need more contributors.


Thanks for reading and I look forward to seeing everyone in Denver,

Lance



[0]http://specs.openstack.org/openstack/keystone-specs/specs/keystone/ongoing/unified-limits.html*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20170804/f7c42806/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20170804/f7c42806/attachment.sig>


More information about the OpenStack-dev mailing list