OpenStack Day France 2017

Federated Identity has been possible in keystone since Icehouse, allowing cloud administrators to enable users to securely access keystone with external credentials. However, understanding federation and setting it up is still a difficult endeavor that does not always go smoothly. This talk will review the core concepts and technologies behind federated keystone, then dive into how to configure it, from registering the identity and service providers to the attribute mappings, highlighting common issues found in the process and concluding with a live debugging session. We'll also discuss recent improvements and features as well as our future goals for making keystone federation easier and more useful.

In the operation of cloud environments where high availability and high reliability are not luxuries, non availability of service or service interruption are key operational requirements. Can we ensure these high availability and high reliability goals are achieved in operation of an OpenStack cloud environment? OpenStack version upgrades should not face any downtime and service interruption. Is there any way these negative service impacts can be avoided all together? The presentation's aim is to draw on lessons learnt from the full lifecycle operation of several large scale private cloud environments in Academia, Finance and Government sectors.