[Openstack] Project Alignment

Vishvananda Ishaya vishvananda at gmail.com
Mon May 16 20:33:26 UTC 2011


I still had meeting in scrollback.  Pastie'd here:
http://pastie.org/1912671

On May 16, 2011, at 1:06 PM, Brian Lamar wrote:

> Dave,
> 
> While I'm not Vish, I have been working on/around authentication for the past couple weeks and I'll provide my thoughts.
> 
> EC2 and OpenStack Nova APIs should not be affected by the authentication work going on. The Keystone project is the only candidate I'm aware of, and it seems like it is, or soon will be, a good candidate for integration into the stack. Migration to a separate authentication service is going to be tricky, but the goal is to do it as seamlessly as possible. "Near stable" should be able to be promised.
> 
> This is the phased approach myself and Brian Waldon have been playing around with:
> http://wiki.openstack.org/Nova/AuthManagerSpec
> 
> Keystone should be able to provide the features of IAM.
> 
> I'm not able to find the PTL meeting logs, perhaps a #startmeeting was never issued for it? I was eavesdropping at the time but can't find the logs, perhaps someone can find them or send them out. The meeting I'm refering to was right after this:
> 
> http://eavesdrop.openstack.org/meetings/openstack-meeting/2011/openstack-meeting.2011-05-10-21.01.log.html
> 
> 
> 
> -----Original Message-----
> From: "Dave Walker" <DaveWalker at ubuntu.com>
> Sent: Monday, May 16, 2011 3:33pm
> To: openstack at lists.launchpad.net
> Subject: Re: [Openstack] Project Alignment
> 
> On 16/05/11 18:11, Vishvananda Ishaya wrote:
>> Hello Everyone,
>> 
>> The PTLs had a quick meeting the other day  to try and align some things between the projects.  In order for openstack to be successful, it is very important that we create a consistent user experience for users and administrators.  We realize that it is hard to find agreement between all developers on implementation details, so we focused less on the idea of code-sharing and more on the idea of bringing the user-experience into alignment. If we are going to be successful in this effort, we all need to realize that we should value doing things the same way over doing things the best way.
>> 
>> We have a few actions that we are taking to help move in this direction.
>> 1. Consistent Auth -- all of the projects are working on integrating the keystone project so that we have one auth system.  For nova, this means that we may lose some of the rbac features we provide for the ec2 api, but by the diablo release we expect to have equivalent features and a migration plan for cactus deployments.
> <SNIP>
> 
> Hi Vish,
> 
> This is really useful to know, thank you for the highlevel outline.
> 
> I didn't quite understand the "Consistent Auth", and what it means for 
> ec2 api for the Diablo release.  Would you be able to confirm the extent 
> / roadmap of the ec2 api breakage expected?  Are you expecting the base 
> ec2 api functionality to be near stable throughout the transition, or 
> are you expecting large breakage?
> 
> In regards to the loss of RBAC, is this expected to be transitional; and 
> be fixable in time for Diabalo release?  Essentially, can you clarify 
> "equivalent features".  The blueprint[0] or specification on the wiki[1] 
> doesn't seem to mention "ec2' anywhere, can you confirm where this was 
> discussed?
> 
> I'd also like to check if consideration on how this might impact 
> possible future implementation of comparative feature of AWS Identity 
> and Access Management (IAM)[2] support in both ec2 and openstack API was 
> discussed?
> 
> Additionally, are the logs of the PTL's meeting available anywhere?
> 
> Thanks.
> 
> [0] https://blueprints.launchpad.net/nova/+spec/integrate-nova-authn
> [1] http://wiki.openstack.org/openstack-authn
> [2] http://aws.amazon.com/documentation/iam/
> 
> Kind Regards,
> Dave Walker
> 
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack at lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
> 
> 
> 
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack at lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20110516/e18319ba/attachment.html>


More information about the Openstack mailing list