[release-announce] [barbican] barbican 6.0.0 (queens)
no-reply at openstack.org
no-reply at openstack.org
Wed Feb 28 11:33:04 UTC 2018
We eagerly announce the release of:
barbican 6.0.0: OpenStack Secure Key Management
This release is part of the queens release series.
Download the package from:
https://tarballs.openstack.org/barbican/
For more details, please see below.
Changes in barbican 5.0.0..6.0.0
--------------------------------
bb9da32 Imported Translations from Zanata
7342013 Use default policy in code
3d86d32 Update doc to match our in-repo configuration file
ed0bb3f Add sample config and policy to documentation
198a08d Correct link address in doc
c93fc17 Fix coverage job
70b6269 [DOC] Install client package before verification
48f50a0 Make grenade-devstack-barbican job nonvoting
09caab6 Adding #nosec for pycrypto use
1a312ba Modify simple_crypto init message
b4c06c9 Remove Simple Crypto plugin production warning
33283a9 Add secret store sync functionality to barbican-manage
d6b25ae Update virtual_environment for genconfig and genpolicy
ab90a1e Updated from global requirements
d594751 Authorites spelling error
2630503 Update link address
10ef7ad Updated from global requirements
0539a28 Ensure only api app initializes secret store
8561bc3 Remove Certificate Orders and CAs from API
6647eb9 Updated from global requirements
21deca8 Remove redundancy code
0861657 Fix Dogtag mode on key generation
93141ca Add defaults for Dogtag backend plugin
5617d60 zuul: run tripleo-scenario002 job
6011b8c Remove setting of version/release from releasenotes
f00254c Updated from global requirements
c45ca6d Imported Translations from Zanata
3538f51 Updated from global requirements
66ed951 Use assertRegex instead of assertRegexpMatches
cabf864 Zuul: add file extension to playbook path
a61105b Migrate to Zuul v3
f060da5 writing convention: do not use “-y” for package install
35e5043 Imported Translations from Zanata
3bea711 Database session need to rollback after duplication
94693c7 Updated from global requirements
13d1c13 Imported Translations from Zanata
7182966 Fix Race Condition in get_or_create_project()
4ae0e4c Imported Translations from Zanata
2a58454 Update the documentation link for doc migration
11391d4 Cleanup test-requirements
80f17e8 Updated from global requirements
b8d2ee3 Dynamically determine SSL version in unit tests
622df49 Delete python bytecode including pyo
cc5858c Use Castellan's backend option instead of api_class
4b3f665 Updated from global requirements
73dc46c Updated from global requirements
4ad06c1 Add flag to allow devstack to run on f26 in gate
f3bec31 Updated from global requirements
5745f4a Use PortOpt for KMIP port
4211114 Add extra time in functional test that fails intermittently
2a4732a Updated from global requirements
de7478d Use PortOpt for port options
a84670b Pick up general URI when constructing barbican endpoint
e86d57a Put base policy rules at first
bc9581c Fix some reST field lists in docstrings
bed85c6 Revert "Revert "Use devstack functions for deploying barbican-svc""
9eb9c80 [TrivialFix] Change container_id to right value.
6c422cd Remove unused policy check
acec046 Fix to use "." to source script files
b833108 Replace http with https for doc links
fcab230 [Trivialfix]Fix typos
43d3899 writing convention: do not use “-y” for package install
5c615d1 Updated from global requirements
f4be17d Ensure module is initialized before being used
94bf667 Put "rm" command to whitelist_externals to avoid warning
d14cf4b Imported Translations from Zanata
912a6b5 Update reno for stable/pike
0eb5f38 allow redirects in .htaccess files on the static web servers
657d47b Removed unnecessary setUp() calls in tests
854087d Stop using deprecated 'message' attribute in Exception
Diffstat (except docs and test files)
-------------------------------------
.gitignore | 3 +
.zuul.yaml | 192 +++
HACKING.rst | 2 +-
README.md | 4 +-
api-guide/source/acls.rst | 24 +-
api-guide/source/consumers.rst | 2 +-
api-guide/source/containers.rst | 2 +-
api-guide/source/dogtag_setup.rst | 2 +-
api-guide/source/orders.rst | 10 +-
api-guide/source/quotas.rst | 12 +-
api-guide/source/secret_metadata.rst | 2 +-
api-guide/source/secrets.rst | 16 +-
barbican/api/__init__.py | 3 +-
barbican/api/app.py | 4 +-
barbican/api/controllers/cas.py | 499 -------
barbican/api/controllers/orders.py | 52 -
barbican/api/controllers/versions.py | 4 +-
barbican/cmd/barbican_manage.py | 23 +
barbican/cmd/pkcs11_migrate_kek_signatures.py | 5 +-
barbican/common/policies/__init__.py | 4 +-
barbican/common/policies/versions.py | 23 -
barbican/common/policy.py | 71 +
barbican/common/resources.py | 10 +-
barbican/common/utils.py | 12 +-
barbican/context.py | 11 +-
.../locale/de/LC_MESSAGES/barbican-log-warning.po | 37 -
barbican/locale/en_GB/LC_MESSAGES/barbican.po | 1455 ++++++++++++++++++++
.../locale/zh_CN/LC_MESSAGES/barbican-log-error.po | 125 --
.../locale/zh_CN/LC_MESSAGES/barbican-log-info.po | 231 ----
.../zh_CN/LC_MESSAGES/barbican-log-warning.po | 46 -
barbican/locale/zh_CN/LC_MESSAGES/barbican.po | 295 +---
barbican/model/repositories.py | 7 +-
barbican/model/sync.py | 65 +
barbican/plugin/crypto/simple_crypto.py | 5 +-
barbican/plugin/dogtag.py | 8 +-
barbican/plugin/dogtag_config_opts.py | 10 +-
barbican/plugin/kmip_secret_store.py | 8 +-
barbican/plugin/store_crypto.py | 1 -
barbican/queue/client.py | 9 -
barbican/queue/server.py | 13 -
.../repositories/test_repositories_consumers.py | 3 +-
.../test_repositories_secret_stores.py | 5 +-
devstack/README.md | 2 +-
devstack/gate_hook.sh | 2 +-
devstack/lib/barbican | 12 +-
devstack/plugin.sh | 6 +-
devstack/settings | 6 +-
etc/barbican/policy.json | 90 --
.../api/v1/behaviors/secret_behaviors.py | 2 +-
.../api/v1/functional/test_certificate_orders.py | 767 -----------
.../api/v1/functional/test_containers.py | 8 +-
.../api/v1/functional/test_quotas_enforce.py | 73 -
.../api/v1/functional/test_secretmeta.py | 4 +-
playbooks/legacy/barbican-devstack-base/post.yaml | 15 +
playbooks/legacy/barbican-devstack-base/run.yaml | 65 +
.../barbican-devstack-functional-base/post.yaml | 15 +
.../barbican-devstack-functional-base/run.yaml | 74 +
.../barbican-devstack-tempest-base/post.yaml | 15 +
.../legacy/barbican-devstack-tempest-base/run.yaml | 72 +
.../legacy/grenade-devstack-barbican/post.yaml | 15 +
.../legacy/grenade-devstack-barbican/run.yaml | 60 +
.../notes/multiple-backends-75f5b85c63b930b7.yaml | 4 +-
...ng-cas-certificate-orders-96fc47a7acaea273.yaml | 38 +
releasenotes/source/conf.py | 10 +-
releasenotes/source/index.rst | 1 +
.../locale/en_GB/LC_MESSAGES/releasenotes.po | 316 +++++
.../locale/zh_CN/LC_MESSAGES/releasenotes.po | 13 +-
releasenotes/source/pike.rst | 6 +
requirements.txt | 36 +-
setup.cfg | 5 +-
test-requirements.txt | 21 +-
tox.ini | 7 +-
125 files changed, 2964 insertions(+), 4532 deletions(-)
Requirements updates
--------------------
diff --git a/requirements.txt b/requirements.txt
index 9bcfec8..d34665d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,2 +6,2 @@ Babel!=2.4.0,>=2.3.4 # BSD
-cffi # MIT
-cryptography!=2.0,>=1.6 # BSD/Apache-2.0
+cffi>=1.7.0 # MIT
+cryptography!=2.0,>=1.9 # BSD/Apache-2.0
@@ -9,13 +9,13 @@ eventlet!=0.18.3,!=0.20.1,<0.21.0,>=0.18.2 # MIT
-jsonschema!=2.5.0,<3.0.0,>=2.0.0 # MIT
-oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0
-oslo.context>=2.14.0 # Apache-2.0
-oslo.db>=4.24.0 # Apache-2.0
-oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0
-oslo.messaging!=5.25.0,>=5.24.2 # Apache-2.0
-oslo.middleware>=3.27.0 # Apache-2.0
-oslo.log>=3.22.0 # Apache-2.0
-oslo.policy>=1.23.0 # Apache-2.0
-oslo.serialization!=2.19.1,>=1.10.0 # Apache-2.0
-oslo.service>=1.10.0 # Apache-2.0
-oslo.utils>=3.20.0 # Apache-2.0
-Paste # MIT
+jsonschema<3.0.0,>=2.6.0 # MIT
+oslo.config>=5.1.0 # Apache-2.0
+oslo.context>=2.19.2 # Apache-2.0
+oslo.db>=4.27.0 # Apache-2.0
+oslo.i18n>=3.15.3 # Apache-2.0
+oslo.messaging>=5.29.0 # Apache-2.0
+oslo.middleware>=3.31.0 # Apache-2.0
+oslo.log>=3.36.0 # Apache-2.0
+oslo.policy>=1.30.0 # Apache-2.0
+oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0
+oslo.service!=1.28.1,>=1.24.0 # Apache-2.0
+oslo.utils>=3.33.0 # Apache-2.0
+Paste>=2.0.2 # MIT
@@ -26 +26 @@ pycrypto>=2.6 # Public Domain
-pyOpenSSL>=0.14 # Apache-2.0
+pyOpenSSL>=16.2.0 # Apache-2.0
@@ -28,2 +28,2 @@ ldap3>=1.0.2 # LGPLv3
-keystonemiddleware>=4.12.0 # Apache-2.0
-six>=1.9.0 # MIT
+keystonemiddleware>=4.17.0 # Apache-2.0
+six>=1.10.0 # MIT
diff --git a/test-requirements.txt b/test-requirements.txt
index fab8066..389550e 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -10,3 +10,3 @@ ddt>=1.0.1 # MIT
-mock>=2.0 # BSD
-oslotest>=1.10.0 # Apache-2.0
-pykmip>=0.5.0 # Apache 2.0 License
+mock>=2.0.0 # BSD
+oslotest>=3.2.0 # Apache-2.0
+pykmip>=0.7.0 # Apache 2.0 License
@@ -14 +14 @@ testrepository>=0.0.18 # Apache-2.0/BSD
-testtools>=1.4.0 # MIT
+testtools>=2.2.0 # MIT
@@ -17 +17 @@ requests>=2.14.2 # Apache-2.0
-WebTest>=2.0 # MIT
+WebTest>=2.0.27 # MIT
@@ -19,2 +19 @@ python-keystoneclient>=3.8.0 # Apache-2.0
-tempest>=16.1.0 # Apache-2.0
-python-subunit>=0.0.18 # Apache-2.0/BSD
+tempest>=17.1.0 # Apache-2.0
@@ -26,4 +25,4 @@ bandit>=1.1.0 # Apache-2.0
-sphinx>=1.6.2 # BSD
-os-api-ref>=1.0.0 # Apache-2.0
-reno!=2.3.1,>=1.8.0 # Apache-2.0
-openstackdocstheme>=1.16.0 # Apache-2.0
+sphinx!=1.6.6,>=1.6.2 # BSD
+os-api-ref>=1.4.0 # Apache-2.0
+reno>=2.5.0 # Apache-2.0
+openstackdocstheme>=1.18.1 # Apache-2.0
More information about the Release-announce
mailing list