Arrows should show direction of message flows in figure for Identity Service concepts in OpenStack Installation Guide for Ubuntu 12.04/14.04 (LTS) - icehouse

[Mohit Malik]

In the diagram describing flows of messages between different entities involved in Keystone services, there is no directional information given to interpret the sender/receiver in a flow.
-----------------------------------
Built: 2014-08-21T22:14:25 00:00
git SHA: d9e3ab1f86d8157cd4a7b0ad5be680aaa300ceb3
URL: http://docs.openstack.org/icehouse/install-guide/install/apt/content/keystone-concepts.html
source File: file:/home/jenkins/workspace/openstack-manuals-tox-doc-publishdocs/doc/common/section_keystone-concepts.xml
xml:id: keystone-concepts

[Mohit Malik (hr-malik)]

URL for document -> http://docs.openstack.org/icehouse/install-guide/install/apt/content/keystone-concepts.html

[Tom Fifield (fifieldt)]

Thanks for the report Mohit. Any assistance with updating the diagram appreciated!

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/125560

[Darren Chan (dazzachan)]

I'm confirming the process flow directions in the patch, however I think this diagram needs to be redrawn. It's trying to convey too much information in one diagram. My suggestion is a drawing a simplified process flow diagram with swimlanes, and have supporting text.

Any thoughts?

[Anne Gentle (annegentle)]

Sounds good to me, this diagram has been around years and it's better to simplify.

[Darren Chan (dazzachan)]

I've simplified the process flow diagram, keeping concepts at a high level.
What happens if the token is not correct or authorized to use a particular service?
I'd appreciate feedback so I can complete the diagram.

[Mohit Malik (hr-malik)]

Hi,

This looks good. I Just have one query, what if the user doesn't want to launch any instance, he just needs credentials to login ? The current process flow diagram doesn't depict this case.

Thanks a lot.

Thanks
Mohit

From: Darren Chan &lt;<email address hidden>&gt;
Sent: Fri, 10 Oct 2014 06:35:54
To: <email address hidden>
Subject: [Bug 1362460] There aint any arrow to show direction of message flows in figure for Identity Service concepts in OpenStack Installation Guide for Ubuntu 12.04/14.04 (LTS) &nbsp;-&nbsp;icehouse
I've simplified &nbsp;the process flow diagram, keeping concepts at a high level.

What happens if the token is not correct or authorized to use a particular service?

I'd appreciate feedback so I can complete the diagram.

** Attachment added: "simplified process flow diagram"

 &nbsp; https://bugs.launchpad.net/openstack-manuals/+bug/1362460/+attachment/4230160/+files/launching%20an%20instance.png

--

You received this bug notification because you are subscribed to the bug

report.

https://bugs.launchpad.net/bugs/1362460

Title:

 &nbsp;There aint any arrow to show direction of message flows in figure for

 &nbsp;Identity Service concepts in OpenStack Installation Guide for Ubuntu

 &nbsp;12.04/14.04 (LTS) &nbsp; - &nbsp;icehouse

Status in OpenStack Manuals:

 &nbsp;In Progress

Bug description:

 &nbsp;In the diagram describing flows of messages between different entities involved in Keystone services, there is no directional information given to interpret the sender/receiver in a flow.

 &nbsp;-----------------------------------

 &nbsp;Built: 2014-08-21T22:14:25 00:00

 &nbsp;git SHA: d9e3ab1f86d8157cd4a7b0ad5be680aaa300ceb3

 &nbsp;URL: http://docs.openstack.org/icehouse/install-guide/install/apt/content/keystone-concepts.html

 &nbsp;source File: file:/home/jenkins/workspace/openstack-manuals-tox-doc-publishdocs/doc/common/section_keystone-concepts.xml

 &nbsp;xml:id: keystone-concepts

To manage notifications about this bug go to:

https://bugs.launchpad.net/openstack-manuals/+bug/1362460/+subscriptions

[Anne Gentle (annegentle)]

If the token is not valid, has expired, isn't scoped for the correct user/privileges, then Keystone raises a validation error. (reference: https://github.com/openstack/keystone/blob/master/keystone/tests/test_auth.py)

I don't think there's a difference if the token is scoped incorrectly (which is the closest meaning to "Does the token allow service usage") in the exception raised. So you might just have one diamond there.

[Anne Gentle (annegentle)]

Credentials to log into the dashboard are created using the Identity service as well by sending the request to Keystone.

One thing that's unclear in the diagram is -- what's the difference between a generic catalog and a service list? Perhaps that distinction isn't necessary.

[Darren Chan (dazzachan)]

Thanks Anne. I've revised the diagram, see attached.

[Anne Gentle (annegentle)]

Yes, this diagram is an improvement, thank you! Just one nit, use authorization rather than with an s.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/125560
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=8343d6da61fd2cd03796b90fae0999b2cbde471b
Submitter: Jenkins
Branch: master

commit 8343d6da61fd2cd03796b90fae0999b2cbde471b
Author: darrenchan <email address hidden>
Date: Thu Oct 2 16:30:38 2014 +1000

    Edited Identity service concept diagram

    Establish process flow direction in the diagram

    Change-Id: I0bf498752d8dda5d02223e624a00ef4c469ac81d
    backport: none
    Partial-bug: #1362460