openstack team mailing list archive

[Dave Walker <DaveWalker@xxxxxxxxxx>]

On 16/05/11 18:11, Vishvananda Ishaya wrote:
> Hello Everyone,
>
> The PTLs had a quick meeting the other day  to try and align some things between the projects.  In order for openstack to be successful, it is very important that we create a consistent user experience for users and administrators.  We realize that it is hard to find agreement between all developers on implementation details, so we focused less on the idea of code-sharing and more on the idea of bringing the user-experience into alignment. If we are going to be successful in this effort, we all need to realize that we should value doing things the same way over doing things the best way.
>
> We have a few actions that we are taking to help move in this direction.
> 1. Consistent Auth -- all of the projects are working on integrating the keystone project so that we have one auth system.  For nova, this means that we may lose some of the rbac features we provide for the ec2 api, but by the diablo release we expect to have equivalent features and a migration plan for cactus deployments.
<SNIP>

Hi Vish,

This is really useful to know, thank you for the highlevel outline.

I didn't quite understand the "Consistent Auth", and what it means for 
ec2 api for the Diablo release.  Would you be able to confirm the extent 
/ roadmap of the ec2 api breakage expected?  Are you expecting the base 
ec2 api functionality to be near stable throughout the transition, or 
are you expecting large breakage?

In regards to the loss of RBAC, is this expected to be transitional; and 
be fixable in time for Diabalo release?  Essentially, can you clarify 
"equivalent features".  The blueprint[0] or specification on the wiki[1] 
doesn't seem to mention "ec2' anywhere, can you confirm where this was 
discussed?

I'd also like to check if consideration on how this might impact 
possible future implementation of comparative feature of AWS Identity 
and Access Management (IAM)[2] support in both ec2 and openstack API was 
discussed?

Additionally, are the logs of the PTL's meeting available anywhere?

Thanks.

[0] https://blueprints.launchpad.net/nova/+spec/integrate-nova-authn
[1] http://wiki.openstack.org/openstack-authn
[2] http://aws.amazon.com/documentation/iam/

Kind Regards,
Dave Walker