Open Stack

# Keystone Team Update - Week of 25 February 2019

## News

### Releases and Feature Freeze

Yesterday we released keystonemiddleware, keystoneauth, and python-keystoneclient, and then the release team was kind enough to let us release keystoneauth again today. Next week will be the feature freeze for keystone, so we should aim for having all of the domain limits changes[1] and ideally the default roles and system scope changes[2] merged by then. We'll hold off on application credentials access rules (capabilities) changes[3] until the next cycle opens for development.

[1] https://review.openstack.org/#/q/status:open+topic:bp/domain-level-limit
[2] https://review.openstack.org/#/q/status:open+topic:implement-default-roles
[3] https://review.openstack.org/#/q/status:open+topic:bp/whitelist-extension-for-app-creds

### Forum/PTG prep

As a reminder, we're brainstorming for Forum and PTG topics[4]. If you are prepared to moderate a Forum topic don't hesitate to speak up and mark it on etherpad.

[4] https://etherpad.openstack.org/p/DEN-keystone-forum-sessions

### Rate-limiting in keystoneauth

Lance and Morgan heroically walked through[5], tested and landed Monty's threaded rate limiting feature in keystoneauth[6]. They found the interface for it to be slightly but unavoidably unintuitive, but docs will be forthcoming. We released keystoneauth again to include this feature.

[5] http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2019-02-28.log.html#t2019-02-28T18:13:32
[6] https://review.openstack.org/605043

### Domain admin in tempest

There are issues with the assumptions tempest makes the scope requirements for a deployment administrator role that prevent us from landing one of the reader role changes[7][8]. A workaround is proposed[9] that will help us move forward, but we need to unwind the tempest/devstack implementation with the QA team to ensure that tempest can understand and validate scope the way we intend for it to work. It's also an opportunity to consider what interesting workarounds operators may have come up with for managing the admin role so that we can come up with migration plans.

[7] http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2019-02-28.log.html#t2019-02-28T15:02:43
[8] http://eavesdrop.openstack.org/irclogs/%23openstack-qa/%23openstack-qa.2019-02-28.log.html#t2019-02-28T18:03:26
[9] https://review.openstack.org/624218

## Recently Merged Changes

Search query: https://bit.ly/2pquOwT

We merged 30 changes this week.

## Changes that need Attention

Search query: https://bit.ly/2tymTje

There are 46 changes that are passing CI, not in merge conflict, have no negative reviews and aren't proposed by bots.

## Bugs

This week we opened 9 new bugs and closed 14.

Bugs opened (9) 
Bug #1816833 (keystone:High) opened by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1816833 
Bug #1817313 (keystone:High) opened by Colleen Murphy https://bugs.launchpad.net/keystone/+bug/1817313 
Bug #1816927 (keystone:Low) opened by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1816927 
Bug #1817047 (keystone:Low) opened by André Luis Penteado https://bugs.launchpad.net/keystone/+bug/1817047 
Bug #1817780 (keystone:Low) opened by Patrick Lepak https://bugs.launchpad.net/keystone/+bug/1817780 
Bug #1818085 (keystone:Wishlist) opened by Colleen Murphy https://bugs.launchpad.net/keystone/+bug/1818085 
Bug #1817623 (keystone:Undecided) opened by Rastislav Fukas https://bugs.launchpad.net/keystone/+bug/1817623 
Bug #1817769 (keystone:Undecided) opened by prashkre https://bugs.launchpad.net/keystone/+bug/1817769 
Bug #1817953 (oslo.policy:Low) opened by Ben Nemec https://bugs.launchpad.net/oslo.policy/+bug/1817953 

Bugs closed (1) 
Bug #1817623 (keystone:Undecided) https://bugs.launchpad.net/keystone/+bug/1817623 

Bugs fixed (13) 
Bug #1815539 (keystone:High) fixed by Guang Yee https://bugs.launchpad.net/keystone/+bug/1815539 
Bug #1757000 (keystone:Medium) fixed by erus https://bugs.launchpad.net/keystone/+bug/1757000 
Bug #1804292 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1804292 
Bug #1804463 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1804463 
Bug #1804516 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1804516 
Bug #1804517 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1804517 
Bug #1804519 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1804519 
Bug #1804521 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1804521 
Bug #1804523 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1804523 
Bug #1805369 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1805369 
Bug #1805402 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1805402 
Bug #1806713 (keystone:Medium) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1806713 
Bug #1817953 (oslo.policy:Low) fixed by Ben Nemec https://bugs.launchpad.net/oslo.policy/+bug/1817953

## Milestone Outlook

https://releases.openstack.org/stein/schedule.html

Yesterday was the non-client library release deadline. Next week will be the final client release deadline as well as feature freeze. After that we'll being prepping the RC.

## Help with this newsletter

Help contribute to this newsletter by editing the etherpad: https://etherpad.openstack.org/p/keystone-team-newsletter