Unify Your OpenStack with Your Identity Provider
summary
OVHcloud explains how it federates its public cloud with its IAM to provide a single user and rights repository across its product environments. The talk covers configuring OIDC identity federation in Keystone, implementation details and scalability, and how that federation is used from Horizon, OpenStack APIs, the CLI and Terraform.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 3:23Identity federation issues
- 7:00OpenStack federation operation
- 10:57Apache proxy limits
- 11:59Keystone real architecture
- 15:11Role optimization and performance
- 16:16Securing federated privileges
- 18:21Horizon and CLI usage
- 21:51Terraform current limits
- 23:37Terraform solutions
- 24:23Q&A
related talks
33mPractical Federated Identity
24mOpenID Connect: The bridge between an Azure AD identity & your cloud platforms
34mWho Are You? I Really Want to Know… the Magic Behind OIDC
15mImprovements to Identity Federation in Keystone
11mThe Hardest Part of Building Your Own Cloud: Identity
18mOne Identity to Rule Them All
20mMulti-Cloud Without the Myth: What Actually Works in Practice
28mIdentity: From Legacy to Microservices