Lance Bragstad

Bugs affecting


1 → 50 of 66 results First • Previous • • Last
High
Fix Committed
#1749267 System role assignments exist after removing groups
OpenStack Identity (keystone) queens 6
High
Fix Committed
#1748970 Role assignment API doesn't prune system roles when querying role.id={role_id}
OpenStack Identity (keystone) queens 6
High
Fix Committed
#1749264 System role assignments exist after removing users
OpenStack Identity (keystone) queens 6
High
Fix Committed
#1749268 `keystone-manage bootstrap` doesn't handle system role assignments
OpenStack Identity (keystone) queens 6
High
Fix Committed
#1843609 Domain-specific domain ID resolution breaks with system-scoped tokens
OpenStack Identity (keystone) stein 6
High
Fix Committed
#1843609 Domain-specific domain ID resolution breaks with system-scoped tokens
OpenStack Identity (keystone) rocky 6
High
Fix Committed
#1843609 Domain-specific domain ID resolution breaks with system-scoped tokens
OpenStack Identity (keystone) queens 6
High
New
#1926331 Allow cinderclient to handle system-scoped tokens
python-cinderclient 6
High
Triaged
#1926345 Horizon should use the authorization API in keystone to build authorization targets for users
OpenStack Dashboard (Horizon) 6
High
Triaged
#1926347 Add a configuration option so that horizon can be deployed to enforce scope
OpenStack Dashboard (Horizon) 6
Medium
Fix Committed
#1635389 keystone.contrib.ec2.controllers.Ec2Controller is untested
OpenStack Identity (keystone) ocata 6
Medium
Triaged
#1754438 keystone tests fail scope checking
OpenStack Identity (keystone) 6
Medium
Triaged
#1774688 keystone-manage db_sync fails with MariaDB 10.3
OpenStack Identity (keystone) 24
Medium
In Progress
#1775094 Lack of documentation for role permutations and possibilities
OpenStack Identity (keystone) 8
Medium
Confirmed
#1778949 Deprecating a policy is confusing
oslo.policy 6
Medium
Triaged
#1790931 RFE: ProjectClaims should support multiple resources
oslo.limit 8
Medium
In Progress
#1800161 Policy names need to be updated for consistency
OpenStack Identity (keystone) 6
Medium
Triaged
#1813183 x509 authentication doesn't work with auto-provisioning
OpenStack Identity (keystone) 8
Medium
Triaged
#1813336 Requesting a scoped token when using x509 authentication is redundant
OpenStack Identity (keystone) 8
Medium
Confirmed
#1850186 oslopolicy-checker should support domain-scope
oslo.policy 6
Medium
Incomplete
#1865050 clouds.yaml is inconsistent with stackrc
tripleo 6
Medium
New
#1917795 Cinder ignores reader role conventions in default policies
Cinder 18
Medium
Confirmed
#1926342 Allow tempest tests to run with system scope
tempest 8
Low
In Progress
#1117923 instance_system_metadata column type truncates on snapshot
OpenStack Compute (nova) 16
Low
Confirmed
#1659317 Unable to upgrade using different repo and branch
openstack-ansible 8
Low
In Progress
#1671887 Revocation API is used in places where where it doesn't need to be
OpenStack Identity (keystone) 6
Low
Triaged
#1705553 We should have a hacking check for dependencies
keystoneauth 6
Low
In Progress
#1763510 Trust scoped tokens leak domain information about a role
OpenStack Identity (keystone) 6
Low
Triaged
#1766954 Tests reference stale token formats
keystonemiddleware 6
Low
Triaged
#1790894 RFE: Add limit caching
oslo.limit 6
Low
Triaged
#1790935 RFE: Enforcer should optionally handle resource cleanup
oslo.limit 8
Low
In Progress
#1813335 x509 configured domains are redundant with auto-generated identity provider domains
OpenStack Identity (keystone) 8
Low
Triaged
#1835103 Refactor keystoneauth connection logic
oslo.limit 6
Low
Triaged
#1835104 Refactor pluggable enforcement models
oslo.limit 6
Low
In Progress
#1835106 Investigate endpoint, service, and region configuration options
oslo.limit 6
Low
Triaged
#1842496 Relationship between keystone performance backed by ldap and using ldappool is confusing
OpenStack Identity (keystone) 6
Low
Triaged
#1845718 keystone-manage hangs when the AMQP server is down
OpenStack Identity (keystone) 6
Low
Confirmed
#1918945 Nova API fails with 500s when called with non-project-scoped keystone tokens
OpenStack Compute (nova) 12
Low
Confirmed
#1926336 The cinder API should fail early if a system-scoped token is provided without a project ID
Cinder 6
Low
Confirmed
#1926344 Document rationale for protection testing in tempest
tempest 8
Wishlist
Triaged
#1709362 Add support for multiple authentication plugins
keystoneauth 6
Wishlist
In Progress
#1815966 RFE: YAML Catalog Backend
OpenStack Identity (keystone) 6
Wishlist
In Progress
#1815971 RFE: Improved OpenID Connect Support
OpenStack Identity (keystone) 12
Wishlist
Triaged
#1816054 RFE: Token Key Store
OpenStack Identity (keystone) 10
Wishlist
Triaged
#1816059 RFE: Native SAML Support
OpenStack Identity (keystone) 6
Wishlist
Triaged
#1816066 RFE: Multi-node job for rolling upgrades testing
OpenStack Identity (keystone) 6
Wishlist
Triaged
#1816097 RFE: Support sub domains to enable namespaces for projects
OpenStack Identity (keystone) 12
Wishlist
Triaged
#1816105 RFE: Project Tree Deletion/Disabling
OpenStack Identity (keystone) 6
Wishlist
Triaged
#1816107 RFE: Use Alembic for database migrations
OpenStack Identity (keystone) 12
Wishlist
Triaged
#1816109 RFE: Add materialized path to project model
OpenStack Identity (keystone) 6
1 → 50 of 66 results First • Previous • • Last