# Keystone Team Update - Week of 25 June 2018 ## News
### Policy Auditing Auditing the keystone APIs and resolving what roles they need under which scope types is the next step in implementing basic default roles. This was already done for barbican but we still need to go through the exercise for keystone[1]. However, the ongoing Flask work[2] will have implications for our policy handling and we may want to wait to complete that work before proceeding so that we don't end up having to do it twice[3]. [1] https://docs.google.com/spreadsheets/d/1kd3OJCLMsIkPgULN31WFw9PA9-3-X99yaDnjWDGOvm0/edit?usp=sharing [2] https://bugs.launchpad.net/keystone/+bug/1776504 [3] http://eavesdrop.openstack.org/meetings/keystone/2018/keystone.2018-06-26-16.00.log.html#l-56 ### Flask Work The flaskification work has necessitated a new mechanism for policy enforcement[4] which will replace @protected. Take a look at the change that introduces the RBACEnforcer[5] and try to get familiar with it. [4] http://eavesdrop.openstack.org/meetings/keystone/2018/keystone.2018-06-26-16.00.log.html#l-229 [5] https://review.openstack.org/576639 ## Recently Merged Changes Search query: https://bit.ly/2IACk3F We merged 10 changes this week. ## Changes that need Attention Search query: https://bit.ly/2wv7QLK There are 57 changes that are passing CI, not in merge conflict, have no negative reviews and aren't proposed by bots. ## Bugs This week we opened 6 new bugs and closed 2. Bugs opened (6) Bug #1778603 (keystone:High) opened by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1778603 Bug #1778945 (keystone:Medium) opened by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1778945 Bug #1778989 (keystone:Undecided) opened by Lars Kellogg-Stedman https://bugs.launchpad.net/keystone/+bug/1778989 Bug #1779286 (keystone:Undecided) opened by Dmitry https://bugs.launchpad.net/keystone/+bug/1779286 Bug #1778949 (oslo.policy:Undecided) opened by Lance Bragstad https://bugs.launchpad.net/oslo.policy/+bug/1778949 Bug #1779172 (oslo.policy:Undecided) opened by Lance Bragstad https://bugs.launchpad.net/oslo.policy/+bug/1779172 Bugs closed (0) Bugs fixed (2) Bug #1757022 (keystone:Undecided) fixed by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1757022 Bug #1778109 (keystone:Undecided) fixed by Jeremy Freudberg https://bugs.launchpad.net/keystone/+bug/1778109 This report was generated with http://paste.openstack.org/show/724598/ and https://github.com/lbragstad/launchpad-toolkit#building-bug-reports ## Milestone Outlook https://releases.openstack.org/rocky/schedule.html Keystone's feature freeze is in just two weeks. Please help out by reviewing our major feature work: https://review.openstack.org/#/q/is:open+topic:bp/mfa-auth-receipt https://review.openstack.org/#/q/is:open+topic:bp/whitelist-extension-for-app-creds https://review.openstack.org/#/q/is:open+topic:bp/strict-two-level-model As well as the flaskification work which will have a major impact on other ongoing work: https://review.openstack.org/#/q/is:open+topic:bug/1776504 ## Help with this newsletter Help contribute to this newsletter by editing the etherpad: https://etherpad.openstack.org/p/keystone-team-newsletter Dashboard generated using gerrit-dash-creator and https://gist.github.com/lbragstad/9b0477289177743d1ebfc276d1697b67 __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
