Skip to content

Instantly share code, notes, and snippets.

View dolph's full-sized avatar

Dolph Mathews dolph

79 followers · 2 following
View GitHub Profile
@dolph
dolph / keybase.md
Created October 27, 2014 12:52

Keybase proof

I hereby claim:

  • I am dolph on github.
  • I am dolph (https://keybase.io/dolph) on keybase.
  • I have a public key whose fingerprint is C1B5 629D E7A3 C2E7 3CF3 D665 7BC8 38D0 688A 4993

To claim this, I am signing this object:

@dolph
dolph / release-notes.md
Last active August 29, 2015 14:07
Keystone Juno release notes

Key New Features

  • PKIZ is a new token provider available for users of PKI tokens, which simply adds zlib-based compression to traditional PKI tokens.
  • Database migrations for releases prior to Havana have been dropped, meaning that you must upgrade to the Juno release from either a Havana or Icehouse deployment.
  • Proxy methods from the identity backend to the assignment backend (created to provide backwards compatibility as a result of the split of the Assignment backend from the Identity backend), have been removed. This should only affect custom, out-of-tree API extensions.
  • The hashing algorithm used for PKI tokens has been made configurable (the default is still MD5, but the Keystone team recommends that deployments migrate to SHA256).
  • Identity-driver-configuration-per-domain now supports Internet domain names of arbitrary hierarchical complexity (for example, customer.cloud.example.com).
  • Service names were added to the v3 service catalog.
  • The LDAP identity backend now supports
@dolph
dolph / keystone_reviews.md
Last active August 29, 2015 14:06
@dolph
dolph / reviews.md
Last active November 17, 2015 14:25
Release-blocking keystone reviews
@dolph
dolph / keystone.conf
Last active August 29, 2015 14:04
Sample keystone configuration for identity-only LDAP (no assignments)
[ldap]
#
# Options defined in keystone
#
# URL for connecting to the LDAP server. (string value)
#url=ldap://localhost
# User BindDN to query the LDAP server. (string value)
@dolph
dolph / identity-api-v3.rst
Created July 7, 2014 16:25
pandoc --from=markdown --to=rst

OpenStack Identity API v3

The Identity API primarily fulfills authentication and authorization needs within OpenStack, and is intended to provide a programmatic facade in front of existing authentication and authorization system(s).

The Identity API also provides endpoint discovery through a service catalog, identity management, project management, and a centralized repository for policy engine rule sets.

@dolph
dolph / service.conf
Created July 7, 2014 16:01
Keystone auth_token cache settings
memcached_servers = 127.0.0.1
token_cache_time = 300
revocation_cache_time = 60
# if your memcached server is shared, use these settings to avoid cache poisoning
memcache_security_strategy = ENCRYPT
memcache_secret_key = <generate a secret key>
# if your keystone deployment uses PKI, and you value security over performance:
check_revocations_for_cached = true
@dolph
dolph / k2k.rst
Created July 2, 2014 15:31

Keystone to Keystone federation

`bp keystone-to-keystone-federation

@dolph
dolph / property.py
Created April 16, 2014 22:57
Lazily import dependency package
@property
def access_token(self):
if self._access_token is None:
from contrib import oauth1
self._access_token = oauth1.Whatever()
return self._access_token
@dolph
dolph / token.json
Last active August 29, 2015 13:59
ID-only tokens
{
"token": {
"catalog": [
{
"endpoints": [
{"id": "39dc32"},
{"id": "ec642f"},
{"id": "c609fc"}
],
"id": "4363ae"