Vancouver, BC
May 21-24, 2018

Event Details

Please note: All times listed below are in Central Time Zone

Enabling Cloud-Native Applications with Application Credentials in Keystone

Keystone has long been the barrier blocking cloud-native applications from truly automation-compatible support. Applications, deployment tools, and OpenStack services have all required dedicated keystone users whose passwords are committed to configuration files. This talk introduces Application Credentials, a new feature in the Queens release of keystone that enables applications and automation to authenticate with keystone without requiring a dedicated keystone user, allows graceful rotation of credentials with minimal downtime, and encourages restrictive permissions delegation to applications.

What can I expect to learn?

This talk will discuss the use cases that drove this feature request to the top of our priority list and some history on how we've tried to solve some of these problems before now. Attendees will learn how to create application credentials and how to use them in application development. Finally, we'll cover some of the limitations application credentials have, and the next steps we plan to take with them.

Wednesday, May 23, 5:30pm-6:10pm (12:30am - 1:10am UTC)
Difficulty Level: Intermediate
Cloud Developer, SUSE
Colleen is a software engineer for the cloud team at SUSE. She has been contributing to OpenStack since 2014, including sitting on the OpenStack Technical Committee, and currently serves as the Project Team Lead for the keystone project. Colleen lives in beautiful Portland, Oregon in the USA. FULL PROFILE