yahoo-eng-team team mailing list archive

[frantisek reznicek <2069960@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Use-case

Highly federated OpenStack cloud environment connected with EGI.eu OIDC
infrastructure.


We are about to allow "personal projects" provisioned on-the-fly with Keystone mapped extension.
"personal projects"can be seen as free tier initial project for trying OpenStack IaaS cloud capabilities.

As with other OIDC domains (MetaCentrum / e-INFRA CZ or LifeScience)
"personal projects" are created with special openstack mapping relying
on creation of the project name as the federated user identity.

Here comes the problem, all OIDS federation we use have identity strings
(OIDC sub fields) shorter than 64 characters and thus working out of the
box.

Unfortunatelly EGI.eu OIDC identity as OIDC sub string exceeds 64
characters, for instance
(62aedced82d1060e00000000000000000000000000000000000000000050ac15@xxxxxx).


At the moment (OpenStack version Yoga) Keystone enforces in its ProjectsModel and also directly in database to that project name can have max. 64 characters.

I'd like to change it to at lest 64+32 characters.

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/2069960

Title:
  Allow OpenStack project name to be longer than 64 characters

Status in OpenStack Identity (keystone):
  New

Bug description:
  Use-case

  Highly federated OpenStack cloud environment connected with EGI.eu
  OIDC infrastructure.

  
  We are about to allow "personal projects" provisioned on-the-fly with Keystone mapped extension.
  "personal projects"can be seen as free tier initial project for trying OpenStack IaaS cloud capabilities.

  As with other OIDC domains (MetaCentrum / e-INFRA CZ or LifeScience)
  "personal projects" are created with special openstack mapping relying
  on creation of the project name as the federated user identity.

  Here comes the problem, all OIDS federation we use have identity
  strings (OIDC sub fields) shorter than 64 characters and thus working
  out of the box.

  Unfortunatelly EGI.eu OIDC identity as OIDC sub string exceeds 64
  characters, for instance
  (62aedced82d1060e00000000000000000000000000000000000000000050ac15@xxxxxx).

  
  At the moment (OpenStack version Yoga) Keystone enforces in its ProjectsModel and also directly in database to that project name can have max. 64 characters.

  I'd like to change it to at lest 64+32 characters.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/2069960/+subscriptions