Lance Bragstad

Related bugs

Medium

Confirmed

#1850186 oslopolicy-checker should support domain-scope

oslo.policy 6

Medium

Incomplete

#1865050 clouds.yaml is inconsistent with stackrc

tripleo 6

Medium

New

#1917795 Cinder ignores reader role conventions in default policies

Cinder 18

Medium

Confirmed

#1926342 Allow tempest tests to run with system scope

tempest 8

Low

In Progress

#1117923 instance_system_metadata column type truncates on snapshot

OpenStack Compute (nova) 16

Low

In Progress

#1133435 policy should return a 400 if a required field is missing

OpenStack Identity (keystone) 6

Low

In Progress

#1593192 oidc plugins should check for their required options

keystoneauth 8

Low

Confirmed

#1615084 Keystone server should define "type" attribute as a MIME Media Type but accepts everything

OpenStack Identity (keystone) 6

Low

Triaged

#1626131 Race condition in functional tests

python-keystoneclient 6

Low

Triaged

#1638978 Debug data isn't sanitized

keystoneauth 280

Low

Triaged

#1643112 Auth plugins should be linked to Federation Protocol

OpenStack Identity (keystone) 6

Low

Triaged

#1644862 domain ldap tls_cacertfile "forgotten" in multidomain configuration

OpenStack Identity (keystone) 12

Low

In Progress

#1671887 Revocation API is used in places where where it doesn't need to be

OpenStack Identity (keystone) 6

Low

Triaged

#1675528 Need debug logging of SAML messages

keystoneauth 8

Low

Triaged

#1693773 ipv6 address is not being parsed correctly in memcache server

keystonemiddleware 6

Low

Confirmed

#1701541 Keystone v3/roles has differnt response for HEAD and GET (again)

tempest 10

Low

Confirmed

#1596829 String interpolation should be delayed at logging calls

ec2-api 22

Low

Triaged

#1705553 We should have a hacking check for dependencies

keystoneauth 6

Low

Confirmed

#1715080 Update global requirements to handle encoding issues with python2-pyldap-2.4.35

OpenStack Identity (keystone) 16

Low

Triaged

#1717918 Failed to create sahara cluster if reauthentication_auth_method =trusts

OpenStack Identity (keystone) 10

Low

Confirmed

#1724685 HTTP 404 creating trust with role that you don't have

OpenStack Identity (keystone) 6

Low

Fix Committed

#1712415 Keystone should handle ldap.SIZELIMIT_EXCEEDED error

OpenStack Identity (keystone) pike 10

Low

In Progress

#1736985 many things that were deprecated long ago were never removed

keystonemiddleware 14

Low

Triaged

#1743603 Unexpected service token warning message in keystone log

OpenStack Identity (keystone) 20

Low

In Progress

#1755056 role assignment query filter names inconsistent

OpenStack Identity (keystone) 6

Low

In Progress

#1763510 Trust scoped tokens leak domain information about a role

OpenStack Identity (keystone) 6

Low

Triaged

#1766954 Tests reference stale token formats

keystonemiddleware 6

Low

Triaged

#1767323 Keystone ldap logs personal information

OpenStack Identity (keystone) 22

Low

Confirmed

#1777086 OAuth API reference documentation is out-of-date

OpenStack Identity (keystone) 6

Low

Triaged

#1790894 RFE: Add limit caching

oslo.limit 6

Low

Triaged

#1790935 RFE: Enforcer should optionally handle resource cleanup

oslo.limit 8

Low

In Progress

#1800077 LDAP Referrals were returned and ignored

OpenStack Identity (keystone) 10

Low

Confirmed

#1810278 list_opts() should return plugin specific options

keystonemiddleware 6

Low

In Progress

#1813335 x509 configured domains are redundant with auto-generated identity provider domains

OpenStack Identity (keystone) 8

Low

Triaged

#1815810 [RFE] Allow keystone to query sub-group membership for group role-assignment

OpenStack Identity (keystone) 16

Low

Triaged

#1835103 Refactor keystoneauth connection logic

oslo.limit 6

Low

Triaged

#1835104 Refactor pluggable enforcement models

oslo.limit 6

Low

In Progress

#1835106 Investigate endpoint, service, and region configuration options

oslo.limit 6

Low

Triaged

#1842496 Relationship between keystone performance backed by ldap and using ldappool is confusing

OpenStack Identity (keystone) 6

Low

Triaged

#1845718 keystone-manage hangs when the AMQP server is down

OpenStack Identity (keystone) 6

Low

Confirmed

#1918945 Nova API fails with 500s when called with non-project-scoped keystone tokens

OpenStack Compute (nova) 12

Low

Confirmed

#1926336 The cinder API should fail early if a system-scoped token is provided without a project ID

Cinder 6

Low

Confirmed

#1926344 Document rationale for protection testing in tempest

tempest 8

Wishlist

Confirmed

#968696 "admin"-ness not properly scoped

OpenStack Compute (nova) 370

Wishlist

Confirmed

#1173117 API calls need to be atomic

OpenStack Identity (keystone) 36

Wishlist

Confirmed

#1208280 V3 Identity API: 'Methods' on auth needs better documentation

OpenStack Identity (keystone) 8

Wishlist

Confirmed

#1347974 unable to filter users by default project in V3

python-keystoneclient 12

Wishlist

Confirmed

#1277104 wrong order of assertEquals args

Rally 16

Wishlist

In Progress

#1405574 endpoint group filters are not applied on getting token

OpenStack Identity (keystone) 22

Wishlist

Triaged

#1552795 enhance notification for user events with user name

OpenStack Identity (keystone) 22

Wishlist

Confirmed

#1577996 Unable to distinguish between not is_admin_project and feature not enabled

oslo.policy 14

Wishlist

In Progress

#1596829 String interpolation should be delayed at logging calls

Glance 22

Wishlist

In Progress

#1596829 String interpolation should be delayed at logging calls

glance_store 22

Wishlist

Triaged

#1642985 Support for arrays of entities in endpoint group definition

OpenStack Identity (keystone) 6

Wishlist

Triaged

#1654084 Listing resources with invalid filters should result in a 400

OpenStack Identity (keystone) 20

Wishlist

In Progress

#1662624 Fix foreign key drop and recreation

OpenStack Identity (keystone) 6

Wishlist

Triaged

#1700858 fails to log auth headers, request logging incomplete

keystoneauth 6

Wishlist

Triaged

#1709362 Add support for multiple authentication plugins

keystoneauth 6

Wishlist

Triaged

#1719141 Kick off Ansible Playbook from Keystone Actions

OpenStack Identity (keystone) 6

Wishlist

Triaged

#1733836 Support LDAP server discovery via DNS SRV records

OpenStack Identity (keystone) 6

Wishlist

Confirmed

#1578466 oslo.cache should offer encryption in a similar manner to keystonemiddleware

oslo.cache 12

Wishlist

Triaged

#1795800 Timing oracle in core auth plugin simplifies brute-forcing usernames

OpenStack Identity (keystone) 8

Wishlist

Confirmed

#1805817 provide a 'whoami' service for authenticated users

OpenStack Dashboard (Horizon) 6

Wishlist

In Progress

#1815966 RFE: YAML Catalog Backend

OpenStack Identity (keystone) 6

Wishlist

In Progress

#1815971 RFE: Improved OpenID Connect Support

OpenStack Identity (keystone) 12

Wishlist

Triaged

#1816054 RFE: Token Key Store

OpenStack Identity (keystone) 10

Wishlist

Triaged

#1816059 RFE: Native SAML Support

OpenStack Identity (keystone) 6

Wishlist

Triaged

#1816066 RFE: Multi-node job for rolling upgrades testing

OpenStack Identity (keystone) 6

Wishlist

Triaged

#1816097 RFE: Support sub domains to enable namespaces for projects

OpenStack Identity (keystone) 12

Wishlist

Triaged

#1816105 RFE: Project Tree Deletion/Disabling

OpenStack Identity (keystone) 6

Wishlist

Triaged

#1816107 RFE: Use Alembic for database migrations

OpenStack Identity (keystone) 12

Wishlist

Triaged

#1816109 RFE: Add materialized path to project model

OpenStack Identity (keystone) 6

Wishlist

Triaged

#1816115 RFE: Unified Delegation

OpenStack Identity (keystone) 6

Wishlist

In Progress

#1816120 RFE: Devstack plugin

OpenStack Identity (keystone) 6

Wishlist

Triaged

#1816160 RFE: Domain Specific Mappings

OpenStack Identity (keystone) 6