)]}'
{"specs/keystone/backlog/federation-testing-setup.rst":[{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"d77f5a94235b0215335d9c8f7f02e10000c260c2","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Problem Description"},{"line_number":22,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"To test federation, one needs to install and configure Shibboleth, an Identity"},{"line_number":25,"context_line":"Provider and configure Keystone as the Service Provider. To test it in the"},{"line_number":26,"context_line":"gate or locally, it needs to be automated."},{"line_number":27,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_007dfeb0","line":24,"range":{"start_line":24,"start_character":55,"end_line":24,"end_character":65},"updated":"2016-04-25 17:41:40.000000000","message":"a service provider (not necessarily Shibboleth)","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c79556a371cf24af94e9cf8671ff7b9ee6d80ecb","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"To test federation, one needs to install and configure Shibboleth, an Identity"},{"line_number":25,"context_line":"Provider and configure Keystone as the Service Provider. To test it in the"},{"line_number":26,"context_line":"gate or locally, it needs to be automated."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Proposed Change"},{"line_number":29,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_fc52b911","line":26,"updated":"2016-06-01 18:04:28.000000000","message":"nit: the setup and configuration of federation needs to be automated.","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"d77f5a94235b0215335d9c8f7f02e10000c260c2","unresolved":false,"context_lines":[{"line_number":31,"context_line":"Basic idea"},{"line_number":32,"context_line":"----------"},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"We\u0027ve decided to handle set up of test-specific components in a devstack"},{"line_number":35,"context_line":"plugin, ``openstack/devstack-plugin-keystone-tests``. Federation will be"},{"line_number":36,"context_line":"configured at mode \"stack\" and phase \"post-config\"."},{"line_number":37,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_a0440a74","line":34,"range":{"start_line":34,"start_character":0,"end_line":34,"end_character":14},"updated":"2016-04-25 17:41:40.000000000","message":"think you can be more clear here, seems a bit imperative saying it like that","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"change_message_id":"e7512254d14b036b43ffebda4cb68eebb9153071","unresolved":false,"context_lines":[{"line_number":31,"context_line":"Basic idea"},{"line_number":32,"context_line":"----------"},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"We\u0027ve decided to handle set up of test-specific components in a devstack"},{"line_number":35,"context_line":"plugin, ``openstack/devstack-plugin-keystone-tests``. Federation will be"},{"line_number":36,"context_line":"configured at mode \"stack\" and phase \"post-config\"."},{"line_number":37,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_a03e6eb5","line":34,"range":{"start_line":34,"start_character":0,"end_line":34,"end_character":14},"in_reply_to":"1a122d0e_a0440a74","updated":"2016-04-28 14:50:55.000000000","message":"I will fix it when the parent spec is merged","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c79556a371cf24af94e9cf8671ff7b9ee6d80ecb","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"We\u0027ve decided to handle set up of test-specific components in a devstack"},{"line_number":35,"context_line":"plugin, ``openstack/devstack-plugin-keystone-tests``. Federation will be"},{"line_number":36,"context_line":"configured at mode \"stack\" and phase \"post-config\"."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"The plugin will configure Keystone to be Identity Provider and Service Provider"},{"line_number":39,"context_line":"at the same time on the same node. It will:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_bc5cb119","line":36,"updated":"2016-06-01 18:04:28.000000000","message":"What do the mode and phase mean? Are those terms documented somewhere we can point to?","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c79556a371cf24af94e9cf8671ff7b9ee6d80ecb","unresolved":false,"context_lines":[{"line_number":36,"context_line":"configured at mode \"stack\" and phase \"post-config\"."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"The plugin will configure Keystone to be Identity Provider and Service Provider"},{"line_number":39,"context_line":"at the same time on the same node. It will:"},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"1. Configure Keystone as an IdP"},{"line_number":42,"context_line":"2. Set up Shibboleth and Apache"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_dcbd3503","line":39,"updated":"2016-06-01 18:04:28.000000000","message":"Could we leverage multi-node devstack support to separate the identity provider from the service provider? What work would that take if multi-node devstack support currently isn\u0027t there?","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"d77f5a94235b0215335d9c8f7f02e10000c260c2","unresolved":false,"context_lines":[{"line_number":38,"context_line":"The plugin will configure Keystone to be Identity Provider and Service Provider"},{"line_number":39,"context_line":"at the same time on the same node. It will:"},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"1. Configure Keystone as an IdP"},{"line_number":42,"context_line":"2. Set up Shibboleth and Apache"},{"line_number":43,"context_line":"3. Set up Keystone as a SP"},{"line_number":44,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_ce3a10cd","line":41,"range":{"start_line":41,"start_character":3,"end_line":41,"end_character":31},"updated":"2016-04-25 17:41:40.000000000","message":"seems like this is specific to k2k, right? so the spec is not \"general\" federation","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c79556a371cf24af94e9cf8671ff7b9ee6d80ecb","unresolved":false,"context_lines":[{"line_number":38,"context_line":"The plugin will configure Keystone to be Identity Provider and Service Provider"},{"line_number":39,"context_line":"at the same time on the same node. It will:"},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"1. Configure Keystone as an IdP"},{"line_number":42,"context_line":"2. Set up Shibboleth and Apache"},{"line_number":43,"context_line":"3. Set up Keystone as a SP"},{"line_number":44,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_9c99edc6","line":41,"in_reply_to":"1a122d0e_b73cfbe1","updated":"2016-06-01 18:04:28.000000000","message":"I think David Stanek is working on a saml-in-python implementation for keystone.","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"change_message_id":"181cafa31e102bb9b6aea9caad9c9cee4353413c","unresolved":false,"context_lines":[{"line_number":38,"context_line":"The plugin will configure Keystone to be Identity Provider and Service Provider"},{"line_number":39,"context_line":"at the same time on the same node. It will:"},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"1. Configure Keystone as an IdP"},{"line_number":42,"context_line":"2. Set up Shibboleth and Apache"},{"line_number":43,"context_line":"3. Set up Keystone as a SP"},{"line_number":44,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1a122d0e_b73cfbe1","line":41,"range":{"start_line":41,"start_character":3,"end_line":41,"end_character":31},"in_reply_to":"1a122d0e_ce3a10cd","updated":"2016-04-28 11:42:58.000000000","message":"This is the first iteration of setup. k2k is still federation. For keystone acting as SP, there is no difference between ADFS and Keystone acting as IdP. After this part is implemented, one could add his own tests with his own identity providers. k2k is selected here only because of easiness to setup.","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c79556a371cf24af94e9cf8671ff7b9ee6d80ecb","unresolved":false,"context_lines":[{"line_number":111,"context_line":"Dependencies"},{"line_number":112,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"None at the first stage, pysaml2 might be needed in the future."},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"Documentation Impact"},{"line_number":117,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9abb7d3a_9c4e0d39","line":114,"updated":"2016-06-01 18:04:28.000000000","message":"David Stanek has some work for this somewhere. Maybe we can ping him and see if we can reference it here?","commit_id":"95adc43c242df83d11be38a540830792d5341940"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"998cc16c1c12e2bb38b21d59257c7fce5418879f","unresolved":false,"context_lines":[{"line_number":12,"context_line":"\u003chttps://blueprints.launchpad.net/keystone/+spec/functional-testing-setup\u003e`_"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"The new direction for functional testing is to `move`_ it out of tempest and"},{"line_number":16,"context_line":"into the projects."},{"line_number":17,"context_line":""},{"line_number":18,"context_line":".. _move: http://lists.openstack.org/pipermail/openstack-dev/2014-July/041188.html"},{"line_number":19,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7aa08908_239238a0","line":16,"range":{"start_line":15,"start_character":0,"end_line":16,"end_character":18},"updated":"2016-06-09 12:00:14.000000000","message":"Test code live in project\u0027s repo, but it\u0027s still a tempest thing. Keystone already has a tempest plugin for such integration tests","commit_id":"9e01130cfe679c1b451d88038bc6aaf407f6aaaf"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"5f7dc900dcb286036ff215282ca5a2b96f5dce90","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"To test federation, one needs to install and configure Shibboleth, an Identity"},{"line_number":25,"context_line":"Provider and configure Keystone as the Service Provider. To test it in the"},{"line_number":26,"context_line":"gate or locally, it needs to be automated."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Proposed Change"},{"line_number":29,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9abb7d3a_1cbdfdd7","line":26,"updated":"2016-06-01 18:06:49.000000000","message":"nit: the setup and configuration of federation needs to be automated.","commit_id":"9e01130cfe679c1b451d88038bc6aaf407f6aaaf"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"5f7dc900dcb286036ff215282ca5a2b96f5dce90","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"We\u0027ve decided to handle set up of test-specific components in a devstack"},{"line_number":35,"context_line":"plugin, ``openstack/devstack-plugin-keystone-tests``. Federation will be"},{"line_number":36,"context_line":"configured at mode \"stack\" and phase \"post-config\"."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"The plugin will configure Keystone to be Identity Provider and Service Provider"},{"line_number":39,"context_line":"at the same time on the same node. It will:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9abb7d3a_fcbf59cd","line":36,"updated":"2016-06-01 18:06:49.000000000","message":"What do the mode and phase mean? Are those terms documented somewhere we can point to?","commit_id":"9e01130cfe679c1b451d88038bc6aaf407f6aaaf"},{"author":{"_account_id":13055,"name":"Alexander Makarov","email":"ajiekcahdp.makapob@gmail.com","username":"amakarov"},"change_message_id":"32c850f8dc50644830821401a660f534889aef1e","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"We\u0027ve decided to handle set up of test-specific components in a devstack"},{"line_number":35,"context_line":"plugin, ``openstack/devstack-plugin-keystone-tests``. Federation will be"},{"line_number":36,"context_line":"configured at mode \"stack\" and phase \"post-config\"."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"The plugin will configure Keystone to be Identity Provider and Service Provider"},{"line_number":39,"context_line":"at the same time on the same node. It will:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9abb7d3a_1742783e","line":36,"in_reply_to":"9abb7d3a_fcbf59cd","updated":"2016-06-03 15:41:14.000000000","message":"Will a link to the phase description/code be suffice?","commit_id":"9e01130cfe679c1b451d88038bc6aaf407f6aaaf"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"5f7dc900dcb286036ff215282ca5a2b96f5dce90","unresolved":false,"context_lines":[{"line_number":36,"context_line":"configured at mode \"stack\" and phase \"post-config\"."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"The plugin will configure Keystone to be Identity Provider and Service Provider"},{"line_number":39,"context_line":"at the same time on the same node. It will:"},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"1. Configure Keystone as an IdP"},{"line_number":42,"context_line":"2. Set up Shibboleth and Apache"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9abb7d3a_3cb601f9","line":39,"updated":"2016-06-01 18:06:49.000000000","message":"Could we leverage multi-node devstack support to separate the identity provider from the service provider? What work would that take if multi-node devstack support currently isn\u0027t there?","commit_id":"9e01130cfe679c1b451d88038bc6aaf407f6aaaf"},{"author":{"_account_id":13055,"name":"Alexander Makarov","email":"ajiekcahdp.makapob@gmail.com","username":"amakarov"},"change_message_id":"32c850f8dc50644830821401a660f534889aef1e","unresolved":false,"context_lines":[{"line_number":36,"context_line":"configured at mode \"stack\" and phase \"post-config\"."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"The plugin will configure Keystone to be Identity Provider and Service Provider"},{"line_number":39,"context_line":"at the same time on the same node. It will:"},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"1. Configure Keystone as an IdP"},{"line_number":42,"context_line":"2. Set up Shibboleth and Apache"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9abb7d3a_f791b49b","line":39,"in_reply_to":"9abb7d3a_3cb601f9","updated":"2016-06-03 15:41:14.000000000","message":"IIRC we agreed on single node setup to have something to test on, and then move tests to multi-node. Multi-node is currently out of scope.","commit_id":"9e01130cfe679c1b451d88038bc6aaf407f6aaaf"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"998cc16c1c12e2bb38b21d59257c7fce5418879f","unresolved":false,"context_lines":[{"line_number":44,"context_line":""},{"line_number":45,"context_line":"As the plugin evolves, we can add ability to use other tools as Identity"},{"line_number":46,"context_line":"Providers, such as pysaml2, or run Federation tests on multiple nodes."},{"line_number":47,"context_line":""},{"line_number":48,"context_line":".. _plugins: http://docs.openstack.org/developer/devstack/plugins.html"},{"line_number":49,"context_line":""},{"line_number":50,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7aa08908_63ff20ab","line":47,"updated":"2016-06-09 12:00:14.000000000","message":"This basically treats the setup, it might be worth it to specify that the tests will be written within the tempest plugin in keystone? Or don\u0027t you see it like that ?","commit_id":"9e01130cfe679c1b451d88038bc6aaf407f6aaaf"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"5f7dc900dcb286036ff215282ca5a2b96f5dce90","unresolved":false,"context_lines":[{"line_number":111,"context_line":"Dependencies"},{"line_number":112,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"None at the first stage, pysaml2 might be needed in the future."},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"Documentation Impact"},{"line_number":117,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9abb7d3a_bcc2f150","line":114,"updated":"2016-06-01 18:06:49.000000000","message":"David Stanek has some work for this somewhere. Maybe we can ping him and see if we can reference it here?","commit_id":"9e01130cfe679c1b451d88038bc6aaf407f6aaaf"}]}