[Fiware-lab-federation-nodes] distributed keystone solution

[Giorgio Robino]

Hi Fernando,

> How you know, we are working to translate our current centralized 
> keyrock solution to a distributed keystone solution in which the first 
> step is to translate to a Keystone (Liberty) centralized solution. 
> This also involve the migration to a Horizon portal with our CSS 
> FIWARE style. This last two steps are almost finished and we have 
> planned to make the final migration on 18th July.

In Genoa FIWARE Lab node, we are using a standard Openstack Kilo 
installation.
Does the new keystone management requires any action (node admin side)? 
If yes, can you share all info needed to upgrade?
It's a question of configuration file updates? If yes, there is any 
script file or any guide/README available?

> The purpose of this email is to share with you the current status of 
> the migration but more important to share with you the new process to 
> create accounts. As you know, in OpenStack, if you planned to create a 
> new account, if is something that have to be done by the administrator 
> of the OpenStack going into Horizon. It means that there is no 
> automatic way (at the moment if I could remember) to create accounts 
> in OpenStack.

> Therefore, our ideas are to modify the login landing page to add two 
> buttons andin that way control the request of new accounts and 
> afterward using some ticketing system control or manage the manual 
> creation of those OpenStack accounts.
Not fully clear to me; do you mean that it will be up to the FIWARE Lab 
administrators to open an account on behalf of the final user?

> In a first step, it could be manage through a specific project in JIRA 
> and in that way we do not lose any creation request. Honestly, I do 
> not like so much this approach but I cannot find any other alternative 
> at the moment. I would like that this process should be more automatic 
> in order to not overload FIWARE Lab administrators.
I see. I also admit that the fiware.org website workflow to open an 
account and proceed (final user side) is not super clear, right now (my 
modest opinion).

Thanks & regards
giorgio

-- 
ing. Giorgio Robino

CNIT c/o - DITEN, Università di Genova
Via Opera Pia 11
16145 Genova

Tel.: +39 010 3532797