We are satisfied to announce the release of: keystone 12.0.1: OpenStack Identity This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/keystone/ For more details, please see below. 12.0.1 ^^^^^^ Bug Fixes ********* * [bug 1718747 (https://bugs.launchpad.net/keystone/+bug/1718747)] Fixes a regression where deleting a domain with users in it caues a server error. This bugfix restores the previous behavior of deleting the users namespaced in the domain. This only applies when using the SQL identity backend. * [bug 1727726 (https://bugs.launchpad.net/keystone/+bug/1727726)] All users and groups are required to have a name. Prior to this fix, Keystone was allowing LDAP users and groups whose name has only empty white spaces. Keystone will now ignore users and groups that do have only white spaces as value for the LDAP attribute which Keystone has been configured to use for that entity's name. * [bug 1740951 (https://bugs.launchpad.net/keystone/+bug/1740951)] A new method was added that made it so oslo.policy sample generation scripts can be used with keystone. The "oslopolicy-policy-generator" script will now generate a policy file containing overrides and defaults registered in code. * [bug 1763824 (https://bugs.launchpad.net/keystone/+bug/1763824)] JSON Schema implementation "nullable" in keystone.common.validation now properly adds "None" to the enum if the enum exists. Other Notes *********** * [bug 1718747 (https://bugs.launchpad.net/keystone/+bug/1718747)] As part of solving a regression in the identity SQL backend that prevented domains containing users from being deleted, a notification callback was altered so that users would only be deleted if the identity backend is SQL. If you have a custom identity backend that is not read-only, deleting a domain in keystone will not delete the users in your backend unless your driver has an is_sql property that evaluates to true. Changes in keystone 12.0.0..12.0.1 ---------------------------------- ce46cc2 Reduce duplication in federated auth APIs 22af1d9 Fix json schema nullable to add None to ENUM fb81469 Delete SQL users before deleting domain 075b8ad Expose a get_enforcer method for oslo.policy scripts e851e00 Create doc/requirements.txt 543a71f Add New in Pike note to using db_sync check d0721d7 Filter users/groups in ldap with whitespaces d07677a Handle ldap size limit exeeded exception a84e0f8 Update the release name in install tutorial 5c9ccce Copy specific distro pages for install guide e520fb5 Remove admin_token_auth steps from install guide 317ade3 Update pike to ignore specific release notes 16d09c7 Remove deprecation of domain_config_upload 15dd5b7 Update UPPER_CONSTRAINTS_FILE for stable/pike 1e866de Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + keystone/cmd/cli.py | 6 -- keystone/common/policy.py | 11 ++ keystone/common/validation/__init__.py | 8 ++ keystone/exception.py | 6 ++ keystone/federation/controllers.py | 19 +--- keystone/identity/backends/ldap/common.py | 29 +++++- keystone/identity/core.py | 16 ++- keystone/notifications.py | 1 + keystone/resource/core.py | 3 + .../unit/identity/backends/test_ldap_common.py | 32 ++++++ .../notes/bug-1718747-50d39fa87bdbb12b.yaml | 17 +++ .../notes/bug-1727726-0b47608811a2cd16.yaml | 9 ++ .../notes/bug-1740951-82b7e4bd608742ab.yaml | 8 ++ .../notes/bug-1763824-3d2f5169af9d42f.yaml | 6 ++ releasenotes/source/unreleased.rst | 13 +++ setup.cfg | 3 + test-requirements.txt | 6 -- tox.ini | 4 +- 46 files changed, 659 insertions(+), 362 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a67eaf0..efd9055 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -25,2 +24,0 @@ oslotest>=1.10.0 # Apache-2.0 -# required to build documentation -sphinx>=1.6.2 # BSD @@ -35,4 +32,0 @@ testtools>=1.4.0 # MIT -# For documentation -openstackdocstheme>=1.16.0 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 -