Open Stack

We are overjoyed to announce the release of:

keystone 12.0.0: OpenStack Identity

This release is part of the pike release series.

Download the package from:

    https://tarballs.openstack.org/keystone/

For more details, please see below.

12.0.0
^^^^^^


Upgrade Notes
*************

* [bug 1702211 (https://bugs.launchpad.net/keystone/+bug/1702211)]
  Password *created_at* field under some versions/deployments of MySQL
  would lose sub-second precision. This means that it was possible for
  passwords to be returned out-of-order when changed within one second
  (especially common in testing). This change stores password
  *created_at* and *expires_at* as an integer instead of as a DATETIME
  data-type.

* The resource backend cannot be configured to anything but SQL if
  the SQL Identity backend is being used. The resource backend must
  now be SQL which allows for the use of Foreign Keys to
  domains/projects wherever desired. This makes managing project
  relationships and such much more straight forward. The inability to
  configure non-SQL resource backends has been in Keystone since at
  least Ocata. This is eliminating some complexity and preventing the
  need for some really ugly back-port SQL migrations in favor of a
  better model. Resource is highly relational and should be SQL based.


Bug Fixes
*********

* [bug 1701324 (https://bugs.launchpad.net/keystone/+bug/1701324)]
  Token bodies now contain only unique roles in the authentication
  response.

Changes in keystone 12.0.0.0rc1..12.0.0
---------------------------------------

10a9ef5 Remove duplicate roles from federated auth
66a1047 Add int storage of datetime for password created/expires
05c535c Resource backend is SQL only now


Diffstat (except docs and test files)
-------------------------------------

.../024_contract_create_created_at_int_columns.py  | 61 +++++++++++++++++++
keystone/common/sql/core.py                        | 48 +++++++++++++++
.../024_migrate_create_created_at_int_columns.py   | 22 +++++++
.../024_expand_create_created_at_int_columns.py    | 33 +++++++++++
keystone/conf/resource.py                          |  8 +++
keystone/identity/backends/sql_model.py            | 35 +++++++++--
keystone/resource/backends/sql.py                  |  2 +
keystone/resource/core.py                          |  9 ++-
keystone/token/providers/common.py                 | 24 ++++++--
.../notes/bug-1701324-739a31f38037f77b.yaml        |  5 ++
.../notes/bug-1702211-abb59adda73fd78e.yaml        |  9 +++
...resource-backend-sql-only-03154d8712b36bd0.yaml | 12 ++++
requirements.txt                                   |  1 +
setup.cfg                                          |  3 -
test-requirements.txt                              |  1 +
20 files changed, 380 insertions(+), 26 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index fa2f24d..7fb3993 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -42,0 +43 @@ osprofiler>=1.4.0 # Apache-2.0
+pytz>=2013.6 # MIT
diff --git a/test-requirements.txt b/test-requirements.txt
index 88f0c44..a67eaf0 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -10,0 +11 @@ freezegun>=0.3.6 # Apache-2.0
+pytz>=2013.6 # MIT