yahoo-eng-team team mailing list archive

[Lance Bragstad <lbragstad@xxxxxxxxx>]

Public bug reported:

(Original specification and blueprint was written by Rodrigo Duarte and
Marek Denis)

Endpoint filtering is a keystone extension since the Havana release, in
Juno it was expanded by the Multi-Attribute Endpoint Grouping spec [1]
that improves the filtering flexibility.

Since Kilo, we added the concept of Service Providers to keystone, the
list of such resources is returned in the token alongside the service
catalog [2]. In Liberty we are proposing to extend endpoints filtering
to also support Service Providers [3]. This should not bring API nor
model changes, just extra checks to the endpoint filter
controller/backend.

[1] https://github.com/openstack/keystone-specs/blob/master/specs/juno/endpoint-group-filter.rst
[2] https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst#authentication-responses
[3] https://review.openstack.org/#/c/188534/

** Affects: keystone
     Importance: Wishlist
         Status: Triaged

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1816165

Title:
  RFE: Expand endpoint filters to service providers

Status in OpenStack Identity (keystone):
  Triaged

Bug description:
  (Original specification and blueprint was written by Rodrigo Duarte
  and Marek Denis)

  Endpoint filtering is a keystone extension since the Havana release,
  in Juno it was expanded by the Multi-Attribute Endpoint Grouping spec
  [1] that improves the filtering flexibility.

  Since Kilo, we added the concept of Service Providers to keystone, the
  list of such resources is returned in the token alongside the service
  catalog [2]. In Liberty we are proposing to extend endpoints filtering
  to also support Service Providers [3]. This should not bring API nor
  model changes, just extra checks to the endpoint filter
  controller/backend.

  [1] https://github.com/openstack/keystone-specs/blob/master/specs/juno/endpoint-group-filter.rst
  [2] https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst#authentication-responses
  [3] https://review.openstack.org/#/c/188534/

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1816165/+subscriptions