We enthusiastically announce the release of: barbican 13.0.0: OpenStack Secure Key Management This release is part of the xena release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. 13.0.0 ^^^^^^ Bug Fixes * Fixed Story 2008335: Fixed a data encoding issue in the Hashicorp Vault backend that was causing errors when retrieving keys that were generated by the Vault Key Manager in Castellan. Changes in barbican 12.0.0..13.0.0 ---------------------------------- b9daa100 Fix Castellan Secret Store inconsistent encoding 200bff89 Return 403 instead of 500 when policy check fails aa7bf886 Replace oslo_utils.fnmatch with fnmatch 3a76ced8 Fix alembic migrations 1ae4badb Fix unit tests and migration to unblock gate 94a45c1e Add FIPS gate job b5d10b3c docs: Update Freenode to OFTC c59f2a6b Raise maximum allowed secret size 6d0df114 Imported Translations from Zanata 6662fc9e setup.cfg: Replace dashes with underscores 21661beb Fix Vault functional test ced3e5c0 Add secure-rbac gate 922c68ba Fix RBAC and ACL access for managing secret containers 57f334e0 Fix transport key policies 2e8d7dec Add Python3 xena unit tests a567702c Update master for stable/wallaby 672dc0b5 Add ACL default to allow project read 14e3ab97 Monkey patch original current_thread _active Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 - .zuul.yaml | 16 +++- README.rst | 2 +- barbican/api/__init__.py | 2 +- barbican/cmd/keystone_listener.py | 6 ++ barbican/cmd/retry_scheduler.py | 6 ++ barbican/cmd/worker.py | 6 ++ barbican/common/config.py | 4 +- barbican/locale/en_GB/LC_MESSAGES/barbican.po | 47 ++++++----- barbican/model/clean.py | 2 +- .../versions/0f8c192a061f_add_secret_consumers.py | 53 ++++++------ barbican/model/models.py | 4 +- barbican/plugin/castellan_secret_store.py | 93 +++++++++++++++++----- barbican/plugin/snakeoil_ca.py | 2 +- bindep.txt | 9 ++- playbooks/enable-fips.yaml | 4 + .../notes/fix-story-2008335-a253190d0fa799a0.yaml | 6 ++ .../increase-max-secret-size-da90164d8b328727.yaml | 5 ++ releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 59 +++++++++++--- releasenotes/source/wallaby.rst | 6 ++ setup.cfg | 8 +- tox.ini | 8 +- 31 files changed, 317 insertions(+), 126 deletions(-)