Bug 1041858

Summary:	[RFE][keystone]: List Revocation Events
Product:	Red Hat OpenStack	Reporter:	RHOS Integration <rhos-integ>
Component:	openstack-keystone	Assignee:	RHOS Maint <rhos-maint>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Udi Kalifon <ukalifon>
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	aberezin, ayoung, breeler, markmc, nkinder, ukalifon, yeylon
Target Milestone:	Upstream M3	Keywords:	FutureFeature, Triaged
Target Release:	5.0 (RHEL 7)
Hardware:	Unspecified
OS:	Unspecified
URL:	https://blueprints.launchpad.net/keystone/+spec/revocation-events
Whiteboard:	upstream_milestone_icehouse-3 upstream_status_implemented upstream_definition_new
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-05-05 13:35:37 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	1041856

Description RHOS Integration 2013-12-12 19:44:38 UTC

Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/revocation-events.

Description:

List the events that lead to revoked tokens instead of the revoked token ids

revocation events will be a tuple:  UserId, ProjectId, time.
The list of revocation events will only last until the project has expired.
Revocation lists will be grouped by domain id or project id

As a consequence of this blueprint, GET /v3/auth/tokens/OS-PKI/revoked should be deprecated.

This will close bug 1242620.

Specification URL (additional information):

https://etherpad.openstack.org/keystone-revocation-events

Comment 2 Udi Kalifon 2014-04-09 14:10:00 UTC

Arthur, is this listing of revocation events something internal, or is there a use case we can test it with? How can we see the events (is there an API for it or can we write a small listener that shows the events)?

Comment 3 Arthur Berezin 2014-04-29 08:36:02 UTC

Deferring to the father of the feature

Comment 4 Udi Kalifon 2014-04-30 13:26:38 UTC

Adam's answer:
ukalifon, don't bother testing the internal events...that BP was written in support of the revocation events