openstack team mailing list archive

[Devin Carlen <devin.carlen@xxxxxxxxx>]

I agree fully with Jesse.  I think given the timelines the first cut of Keystone was great.  Moving forward we'll also have more folks that are burdened (honored?) with operating it in production environments which means that more rubber meets the road kinds of issues will be identified and dealt with quickly. 

Keystone was originally pushed into core a bit too soon, but this was simply a byproduct of the fact that the need for it was very real.  All the groundwork done to unify the projects was a huge benefit to the community.  Before that point, most of the time when someone was working on "OpenStack", they were really just working on one individual component in an isolated environment.  Keystone forced the issue for the community and led to the creation of the fabulous DevStack project.  This integration made it far simpler to do integration testing, and projects like Tempest greatly benefited from it as well.

Devin 


On Tuesday, February 14, 2012 at 6:20 PM, Jesse Andrews wrote:

> The major lessons of keystone:
> While keystone served as an effective proof of concept for unified authentication (before keystone each component had its own users/passwords), it didn't get enough attention from other developers and integration with other core projects.
> The pain caused by not having shared authentication caused it to grow up too fast.  Keystone was in incubation during Diablo and is scheduled for official core at the Essex release.
> Going forward when something is added to core we need to make sure it has the project wide support necessary to present a consistent openstack during the transition and afterwards.
> As an example, before quantum becomes a core project we are documenting what becomes of Nova network and existing APIs.  Glance integration into nova was a good example where the image list API call proxies to glance.
> Additional if the code is vastly different, it is harder to get existing contributors to participate.
> The original keystone team had a hard task and didn't get enough time and help due to circumstances (some within their control and some not)
> Jesse
>