- Release-announce - lists.openstack.org

kolla-ansible 9.0.0.0rc1 (train)
by no-reply＠openstack.org 11 Nov '19

11 Nov '19

Hello everyone, A new release candidate for kolla-ansible for the end of the Train cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/null/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Train release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/train release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/train Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/null/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *train-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

python-openstackclient 3.16.3 (rocky)
by no-reply＠openstack.org 07 Nov '19

07 Nov '19

We are pleased to announce the release of: python-openstackclient 3.16.3: OpenStack Command-line Client This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. 3.16.3 ^^^^^^ New Features ************ * Add "--name-lookup-one-by-one" option to the "server list" command that is (mutually exclusive with "-n | --no-name-lookup"). When provided, the names of images and flavors will be resolved one by one only for those images and flavors that are needed to display the obtained list of servers instead of fetching all the images and flavors. Depending on amount of images in your deployment this can speed up the execution of this command. * When given "--image" or "--flavor" argument, the "server list" command now resolves only single image or flavor instead of fetching all the images or flavors for name lookup purposes. Bug Fixes ********* * Fix "endpoint group delete" command to properly delete endpoint groups. [Story 2005521 (https://storyboard.openstack.org/#!/story/2005521) * The "compute service set" command now properly handles "--os- compute-api-version" 2.53 and greater. [Story 2005349 (https://storyboard.openstack.org/#!/story/2005349) Changes in python-openstackclient 3.16.2..3.16.3 ------------------------------------------------ 72922ae1 Document 2.53 behavior for compute service list/delete fc5f2978 Fix compute service set handling for 2.53+ 9698c667 Fix BFV server list handling with --name-lookup-one-by-one dda007ba Add --name-lookup-one-by-one option to server list bb7f4916 Fix bug in endpoint group deletion 7882463f Fix: Restore output 'VolumeBackupsRestore' object is not iterable fa480850 Stable branch combination fix d57ca328 OpenDev Migration Patch 21abb431 Remove str() when setting network objects names 42155fae Don't display router's is_ha and is_distributed attributes always Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 10 +- openstackclient/compute/v2/server.py | 73 ++- openstackclient/compute/v2/service.py | 74 ++- openstackclient/identity/v3/endpoint_group.py | 6 +- openstackclient/network/v2/network.py | 4 +- openstackclient/network/v2/network_agent.py | 2 +- openstackclient/network/v2/network_qos_policy.py | 2 +- openstackclient/network/v2/port.py | 2 +- openstackclient/network/v2/router.py | 26 +- openstackclient/network/v2/subnet.py | 2 +- openstackclient/network/v2/subnet_pool.py | 2 +- openstackclient/volume/v2/backup.py | 4 +- .../notes/bug-2005521-0274fc26bd9b3842.yaml | 5 + .../name-lookup-one-by-one-e0f15f4eab329b19.yaml | 14 + ...-compute-service-set-2.53-3d2db875154e633a.yaml | 6 + test-requirements.txt | 2 +- 26 files changed, 1005 insertions(+), 74 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 8ec69331..4cb66cfd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -19 +19 @@ osprofiler>=1.4.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0

1 0

magnum 9.1.0 (train)
by no-reply＠openstack.org 06 Nov '19

06 Nov '19

We exuberantly announce the release of: magnum 9.1.0: Container Management project for OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 9.1.0 ^^^^^ New Features ************ * Add fedora coreos driver. To deploy clusters with fedora coreos operators or users need to add os_distro=fedora-coreos to the image. The scripts to deploy kubernetes on top are the same with fedora atomic. Note that this driver has selinux enabled. * Along with the kubernetes version upgrade support we just released, we're adding the support to upgrade the operating system of the k8s cluster (including master and worker nodes). It's an inplace upgrade leveraging the atomic/ostree upgrade capability. * Cluster upgrade API supports upgrading specific nodegroups in kubernetes clusters. If a user chooses a default nodegroup to be upgraded, then both of the default nodegroups will be upgraded since they are in one stack. For non-default nodegroups users are allowed to use only the cluster template already set in the cluster. This means that the cluster (default nodegroups) has to be upgraded on the first hand. For now, the only label that is taken into consideration during upgrades is the kube_tag. All other labels are ignored. * Choose whether system containers etcd, kubernetes and the heat- agent will be installed with podman or atomic. This label is relevant for k8s_fedora drivers. k8s_fedora_atomic_v1 defaults to use_podman=false, meaning atomic will be used pulling containers from docker.io/openstackmagnum. use_podman=true is accepted as well, which will pull containers by k8s.gcr.io. k8s_fedora_coreos_v1 defaults and accepts only use_podman=true. Note that, to use kubernetes version greater or equal to v1.16.0 with the k8s_fedora_atomic_v1 driver, you need to set use_podman=true. This is necessary since v1.16 dropped the --containerized flag in kubelet. https://github.com/kubernetes/kubernetes/pull/80043/files Known Issues ************ * The startup of the heat-container-agent uses a workaround to copy the SoftwareDeployment credentials to /var/lib/cloud/data/cfn-init- data. The fedora coreos driver requires heat train to support ignition. Changes in magnum 9.0.0..9.1.0 ------------------------------ 347b7b74 Use v1.15.0 as default octavia_ingress_controller_tag 2d4cc396 coreos: Use heat params for heat-agent image 020e1f3b Docker volume size from nodegroups dacaeb03 k8s_fedora: Add use_podman label be992a7d [fedora-atomic][k8s] Support operating system upgrade 7a70542f No new NGs for clusters without an api_address ece4adb0 Failed state was ignored for default ngs efc654d1 heat-agent: Check if scripts exists b8d9eeb4 bug: Cluster should be creatable w/o fixed subnet 3c984603 ng-13: Support nodegroup upgrade b56b164d ng-12: Label nodegroup nodes 952700e8 ng-11: API microversion 1.9 25dd88c9 ng-10: Fix cluster template conditions 0341f921 Support Fedora CoreOS 30 d4766aa8 update api-ref for clustertemplate 58ae69d8 Convert fixed_subnet name to uuid for OCCM f15ee976 Fixing typos and spelling errors in driver template files b449ed89 zuul: drop secret from stable branch f8981ee3 k8s_atomic: Run all syscontainer with podman 1ef99de8 Pass ssh public key as string e780e34d Delete the ca-rotate api-ref eb02e82b k8s_fedora: Move rp_filter=1 for calico up 3afd376c k8s_fedora: Label master nodes with kubectl 01ae402f Add hostname-override to kube-proxy b2ee79e2 Set cniVersion for flannel 27f0cf63 Improve log of k8s health status check 209846ca Change the order of resource creation b4ee00b7 Drop deprecated APIs for kube v1.16 support b53c8826 ng-9: Driver for nodegroup operations e6be08e5 ng-8: APIs for nodegroup CRUD operations 21f71af8 ng-7: Adapt parameter and output mappings 88916993 ng-6: Add new fields to nodegroup objects a21f6b8f Return default quota from API 178d455d Update TOX/UPPER_CONSTRAINTS_FILE for stable/train Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 26 - api-ref/source/certificates.inc | 26 - api-ref/source/clustertemplates.inc | 6 + api-ref/source/parameters.yaml | 7 + .../dcos_centos_v1/templates/dcoscluster.yaml | 5 + .../scripts/configure_container_agent.sh | 40 +- .../scripts/write-os-apply-config-templates.sh | 9 +- .../kubernetes-controller-manager/launch.sh | 2 + .../kubernetes-kubelet/config.json.template | 5 +- magnum/api/controllers/v1/cluster.py | 30 +- magnum/api/controllers/v1/cluster_actions.py | 10 +- magnum/api/controllers/v1/nodegroup.py | 179 ++- magnum/api/controllers/v1/quota.py | 17 +- magnum/api/controllers/versions.py | 3 +- magnum/cmd/conductor.py | 2 + magnum/common/exception.py | 35 +- magnum/common/neutron.py | 39 +- magnum/common/nova.py | 34 + magnum/common/policies/nodegroup.py | 33 + magnum/conductor/api.py | 23 + magnum/conductor/handlers/cluster_conductor.py | 11 + magnum/conductor/handlers/nodegroup_conductor.py | 152 +++ magnum/conductor/utils.py | 2 + magnum/db/api.py | 2 +- .../alembic/versions/c04e925e65c2_nodegroups_v2.py | 50 + magnum/db/sqlalchemy/api.py | 6 +- magnum/db/sqlalchemy/models.py | 4 + magnum/drivers/common/driver.py | 15 + magnum/drivers/common/k8s_monitor.py | 15 +- .../kubernetes/fragments/calico-service.sh | 7 +- .../kubernetes/fragments/configure-etcd.sh | 109 +- .../fragments/configure-kubernetes-master.sh | 224 +++- .../fragments/configure-kubernetes-minion.sh | 133 +- .../kubernetes/fragments/enable-helm-tiller.sh | 6 +- .../kubernetes/fragments/enable-ingress-octavia.sh | 14 +- .../kubernetes/fragments/enable-ingress-traefik.sh | 2 +- .../kubernetes/fragments/enable-keystone-auth.sh | 5 +- .../fragments/enable-prometheus-monitoring.sh | 9 +- .../kubernetes/fragments/enable-services-master.sh | 11 +- .../kubernetes/fragments/enable-services-minion.sh | 3 +- .../kubernetes/fragments/flannel-service.sh | 7 + .../kubernetes/fragments/kube-dashboard-service.sh | 12 +- .../kubernetes/fragments/start-container-agent.sh | 55 +- .../kubernetes/fragments/upgrade-kubernetes.sh | 140 ++- .../fragments/write-heat-params-master.sh | 3 + .../kubernetes/fragments/write-heat-params.sh | 3 + magnum/drivers/heat/driver.py | 393 +++++- magnum/drivers/heat/k8s_coreos_template_def.py | 79 +- magnum/drivers/heat/k8s_fedora_template_def.py | 63 +- magnum/drivers/heat/k8s_template_def.py | 160 ++- magnum/drivers/heat/swarm_fedora_template_def.py | 87 +- magnum/drivers/heat/swarm_mode_template_def.py | 86 +- magnum/drivers/heat/template_def.py | 103 +- magnum/drivers/k8s_coreos_v1/template_def.py | 2 +- .../templates/fragments/enable-coredns.yaml | 2 +- .../k8s_coreos_v1/templates/kubecluster.yaml | 37 +- magnum/drivers/k8s_fedora_atomic_v1/driver.py | 66 +- .../templates/kubecluster.yaml | 162 ++- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 31 + .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 33 + magnum/drivers/k8s_fedora_coreos_v1/__init__.py | 0 magnum/drivers/k8s_fedora_coreos_v1/driver.py | 32 + .../drivers/k8s_fedora_coreos_v1/template_def.py | 45 + .../drivers/k8s_fedora_coreos_v1/templates/COPYING | 202 +++ .../templates/kubecluster.yaml | 1311 ++++++++++++++++++++ .../k8s_fedora_coreos_v1/templates/kubemaster.yaml | 889 +++++++++++++ .../k8s_fedora_coreos_v1/templates/kubeminion.yaml | 589 +++++++++ .../k8s_fedora_coreos_v1/templates/user_data.json | 84 ++ magnum/drivers/k8s_fedora_coreos_v1/version.py | 17 + .../templates/kubecluster.yaml | 37 +- magnum/drivers/mesos_ubuntu_v1/template_def.py | 78 +- .../mesos_ubuntu_v1/templates/mesoscluster.yaml | 20 +- .../swarm_fedora_atomic_v1/templates/cluster.yaml | 18 +- .../templates/swarmmaster.yaml | 2 +- .../templates/swarmcluster.yaml | 20 +- .../templates/swarmmaster.yaml | 2 +- magnum/objects/fields.py | 3 +- magnum/objects/nodegroup.py | 18 +- .../api/controllers/v1/test_cluster_actions.py | 127 +- .../unit/api/controllers/v1/test_nodegroup.py | 482 ++++++- .../conductor/handlers/test_cluster_conductor.py | 10 +- .../handlers/test_k8s_cluster_conductor.py | 108 +- .../handlers/test_mesos_cluster_conductor.py | 36 +- .../conductor/handlers/test_nodegroup_conductor.py | 218 ++++ .../handlers/test_swarm_cluster_conductor.py | 42 +- .../drivers/test_k8s_fedora_atomic_v1_driver.py | 142 +++ playbooks/container-builder-vars.yaml | 2 +- .../notes/fedora_coreos-e66b44d86dea380f.yaml | 12 + ...-fedora-atomic-os-upgrade-9f47182b21c6c028.yaml | 7 + .../notes/upgrade_api-1fecc206e5b0ef99.yaml | 12 + .../notes/use_podman-39532143be2296c2.yaml | 17 + setup.cfg | 1 + tox.ini | 2 +- 109 files changed, 7565 insertions(+), 945 deletions(-)

1 0

kolla 9.0.0.0rc1 (train)
by no-reply＠openstack.org 06 Nov '19

06 Nov '19

Hello everyone, A new release candidate for kolla for the end of the Train cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/null/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Train release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/train release branch at: https://opendev.org/openstack/kolla/src/branch/stable/train Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/null/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *train-rc-potential* to bring it to the kolla release crew's attention.

1 0

keystone 13.0.4 (queens)
by no-reply＠openstack.org 31 Oct '19

31 Oct '19

We are pumped to announce the release of: keystone 13.0.4: OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. Changes in keystone 13.0.3..13.0.4 ---------------------------------- e8b04cc42 Revert "Fix python3 compatibility on LDAP search DN from id" Diffstat (except docs and test files) ------------------------------------- keystone/identity/backends/ldap/common.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-)

1 0

keystonemiddleware 4.22.0 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are amped to announce the release of: keystonemiddleware 4.22.0: Middleware for OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 4.22.0 ^^^^^^ New Features ************ * [bug 1695038 (https://bugs.launchpad.net/keystonemiddleware/+bug/1695038) The use_oslo_messaging configuration option is added for services such as Swift, which need the audit middleware to use the local logger instead of the oslo.messaging notifier regardless of whether the oslo.messaging package is present or not. Leave this option set to its default True value to keep the previous behavior unchanged - the audit middleware will use the oslo.messaging notifier if the oslo.messaging package is present, and the local logger otherwise. Services that rely on the local logger for audit notifications must set this option to False. Bug Fixes ********* * [bug 1800017 (https://bugs.launchpad.net/keystonemiddleware/+bug/1800017) Fix audit middleware service catalog parsing for the scenario where a service does not contain any endpoints. In that case, we should just skip over that service. Changes in keystonemiddleware 4.21.0..4.22.0 -------------------------------------------- bc03de9 Skip the services with no endpoints when parsing service catalog d68942d Update stable/queens upper constraints file location 3487771 OpenDev Migration Patch 30ccceb import zuul job settings from project-config c21f7f4 Add arguments for MemcacheClientPool init 3fc10b2 Fix KeystoneMiddleware memcachepool abstraction 1b617cf Fix the doc CI failure b8f34e9 Add option to disable using oslo_message notifier 05f5744 Updated from global requirements 0e6b10a Update UPPER_CONSTRAINTS_FILE for stable/queens cbb8231 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.yaml | 11 ++++++++ keystonemiddleware/audit/__init__.py | 7 +++++ keystonemiddleware/audit/_api.py | 5 ++++ keystonemiddleware/audit/_notifier.py | 2 +- keystonemiddleware/auth_token/_cache.py | 16 +++++++++-- .../notes/bug-1695038-2cbedcabf8ecc057.yaml | 13 +++++++++ .../notes/bug-1800017-0e5a9b8f62b5ca60.yaml | 7 +++++ requirements.txt | 4 +-- test-requirements.txt | 4 +-- tools/tox_install.sh | 4 ++- tox.ini | 2 +- 16 files changed, 130 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6ab23e6..c37f8a8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ oslo.i18n>=3.15.3 # Apache-2.0 -oslo.log>=3.30.0 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 @@ -12 +12 @@ oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 -oslo.utils>=3.31.0 # Apache-2.0 +oslo.utils>=3.33.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index eae2aa1..5b2504b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ mock>=2.0.0 # BSD -oslotest>=1.10.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 @@ -24 +24 @@ WebTest>=2.0.27 # MIT -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<=1.5.1 # Apache-2.0

1 0

python-keystoneclient 3.15.1 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are satisfied to announce the release of: python-keystoneclient 3.15.1: Client Library for OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/python-keystoneclient Download the package from: https://pypi.org/project/python-keystoneclient Please report issues through: https://bugs.launchpad.net/python-keystoneclient/+bugs For more details, please see below. Changes in python-keystoneclient 3.15.0..3.15.1 ----------------------------------------------- cc13d5b OpenDev Migration Patch 6027596 import zuul job settings from project-config 0de3d28 Updated from global requirements 13d8361 Override find function in project 7f63cfa Update UPPER_CONSTRAINTS_FILE for stable/queens 9981cb9 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 15 +++++++++++++++ keystoneclient/v3/projects.py | 5 +++++ tox.ini | 2 +- 5 files changed, 24 insertions(+), 3 deletions(-)

1 0

ldappool 2.2.1 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are amped to announce the release of: ldappool 2.2.1: A simple connector pool for python-ldap. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/ldappool Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/ldappool/+bugs For more details, please see below. Changes in ldappool 2.2.0..2.2.1 -------------------------------- bf7190e OpenDev Migration Patch 7a071a7 PY3: switch to using unicode text values e8b7845 import zuul job settings from project-config 6b334f2 Updated from global requirements 60b38df Update UPPER_CONSTRAINTS_FILE for stable/queens 9ef497e Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 5 +++++ ldappool/__init__.py | 7 +++++-- test-requirements.txt | 2 +- tox.ini | 2 +- 5 files changed, 14 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0c615ee..1acddcb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ sphinx!=1.6.6,>=1.6.2 # BSD -openstackdocstheme>=1.17.0 # Apache-2.0 +openstackdocstheme>=1.18.1 # Apache-2.0

1 0

keystone 13.0.3 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We jubilantly announce the release of: keystone 13.0.3: OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 13.0.3 ^^^^^^ Bug Fixes * [bug 1780503 (https://bugs.launchpad.net/keystone/+bug/1780503) The notification wrapper now sets the initiator's id to the given user id. This fixes an issue where identity.authentication event would result in the initiator id being a random default UUID, rather than the user's id when said user would authenticate against keystone. * [bug 1782922 (https://bugs.launchpad.net/keystone/+bug/1782922) Fixed the problem where Keystone indiscriminately return the first RDN as the user ID, regardless whether it matches the configured 'user_id_attribute' or not. This will break deployments where 'group_members_are_ids' are set to False and 'user_id_attribute' is not in the DN. This patch will perform a lookup by DN if the first RND does not match the configured 'user_id_attribute'. * [bug 1801873 (https://bugs.launchpad.net/keystone/+bug/1801873) This fixes an issue where an LDAP-backed domain could not be deleted due to the existence of shadow users in the SQL database. * [bug 1840291 (https://bugs.launchpad.net/keystone/+bug/1840291) Adds retries for "delete_credential_for_user" method to avoid DBDeadlocks when deleting large number of credentials concurrently. * [*bug 1843609 <https://bugs.launchpad.net/keystone/+bug/1843609>*] Fixed an issue where system-scoped tokens couldn't be used to list users and groups (e.g., GET /v3/users or GET /v3/groups) if "keystone.conf [identity] domain_specific_drivers_enabled=True" and the API would return an "HTTP 401 Unauthorized". These APIs now recognize system-scoped tokens when using domain-specific drivers. Changes in keystone 13.0.2..13.0.3 ---------------------------------- 65cb669e7 Make system tokens work with domain-specific drivers d57733f4e Add test case for expanding implied roles in system tokens a6a438c9f Import LDAP job into project 686d52930 Add retry for DBDeadlock in credential delete 79ed42ee6 Fix python3 compatibility on LDAP search DN from id 9d9451e13 Fixing dn_to_id function for cases were id is not in the DN 71f45f12c Remove experimental openSUSE 42.3 job a3a2d75ea Cap bandit c2f619b14 Blacklist bandit 1.6.0 e4c01229e OpenDev Migration Patch 86428a6c6 Delete shadow users when domain is deleted bb1b98b65 Replace openstack.org git:// URLs with https:// 0161ffadd Set initiator id as user_id for auth events a6703dff0 Remove publish-loci post job 34185638d Update the RDO installation guide to use port 5000 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 35 +++++++------- keystone/common/controller.py | 2 + keystone/credential/backends/sql.py | 3 ++ keystone/identity/backends/ldap/common.py | 34 +++++++++++-- keystone/identity/backends/ldap/core.py | 7 ++- keystone/identity/core.py | 13 ++--- keystone/identity/shadow_backends/sql.py | 12 +++++ keystone/notifications.py | 9 ++-- .../keystone-dsvm-functional-v3-only/run.yaml | 8 ++-- playbooks/legacy/keystone-dsvm-functional/run.yaml | 6 +-- .../keystone-dsvm-grenade-multinode/run.yaml | 10 ++-- .../keystone-dsvm-py35-functional-v3-only/run.yaml | 8 ++-- .../notes/bug-1780503-70ca1ba3f428dd41.yaml | 8 ++++ .../notes/bug-1782922-db822fda486ac773.yaml | 10 ++++ .../notes/bug-1801873-0eb9a5ec3e801190.yaml | 6 +++ .../notes/bug-1840291-35af1ac7ba06e166.yaml | 6 +++ .../notes/bug-1843609-8498b132222596b7.yaml | 9 ++++ setup.cfg | 2 +- 26 files changed, 295 insertions(+), 61 deletions(-)

1 0

keystoneauth1 3.4.1 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are tickled pink to announce the release of: keystoneauth1 3.4.1: Authentication Library for OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 3.4.1 ^^^^^ Bug Fixes * [bug 1733052 (https://bugs.launchpad.net/keystoneauth/+bug/1733052) Now the version discovery mechanism only fetches the version info from server side if the versioned url has been overrode. So that the request url's path won't be changed completely. Changes in keystoneauth1 3.4.0..3.4.1 ------------------------------------- a760e57 OpenDev Migration Patch 1f7b7f5 import zuul job settings from project-config 476d36d Add nosec to instance of sha1 2cc2b03 Add netloc and version check for version discovery fe44f35 Updated from global requirements 65bebd1 Remove tox_install.sh and align with constraints consumption 7e9564b Update UPPER_CONSTRAINTS_FILE for stable/queens 9e1ab7c Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.yaml | 7 ++++- keystoneauth1/discover.py | 20 +++++++++++++- keystoneauth1/session.py | 2 +- .../notes/bug-1733052-1b4af3b3fe1b05bb.yaml | 7 +++++ test-requirements.txt | 5 +++- tools/tox_install.sh | 30 -------------------- tox.ini | 21 +++++++------- 11 files changed, 84 insertions(+), 47 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index bcc0348..091d151 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13 @@ oslo.config>=5.1.0 # Apache-2.0 -openstackdocstheme>=1.17.0 # Apache-2.0 +openstackdocstheme>=1.18.1 # Apache-2.0 @@ -24,0 +25,3 @@ PyYAML>=3.10 # MIT +requests-kerberos>=0.6 # ISC +lxml!=3.7.0,>=3.4.1 # BSD +oauthlib>=0.6.0 # BSD

1 0