[keystone] keystone 11.0.3 (ocata)
We are psyched to announce the release of:
keystone 11.0.3: OpenStack Identity
This release is part of the ocata stable release series.
Download the package from:
https://tarballs.openstack.org/keystone/
For more details, please see below.
11.0.3 ^^^^^^
Security Issues ***************
* [bug 1703369 (https://bugs.launchpad.net/keystone/+bug/1703369)] There was a typo for the identity:get_identity_provider rule in the default "policy.json" file in previous releases. The default value for that rule was the same as the default value for the default rule (restricted to admin) so this typo was not readily apparent. Anyone customizing this rule should review their settings and confirm that they did not copy that typo. More context regarding the purpose of this backport can be found in the bug report.
Bug Fixes *********
* [bug 1689616 (https://bugs.launchpad.net/keystone/+bug/1649616)] Significant improvements have been made when performing a token flush on massive data sets.
* [bug 1687593 (https://bugs.launchpad.net/keystone/+bug/1687593)] Ensure that the URL used to make the request when creating OAUTH1 request tokens is also the URL that verifies the request token.
Changes in keystone 11.0.2..11.0.3 ----------------------------------
6c96675 fix identity:get_identity_providers typo b0414f4 Add a release note for bug 1687593 215788d Change url scheme passed to oauth signature verifier 59e4b49 Change url passed to oauth signature verifier to request url 64e28ec Stop reading local config dirs for domain-specific file config driver 83fccfa Fixing flushing tokens workflow 2fdf895 Handle group NotFound in effective assignment list 6074166 Make flushing tokens more robust
Diffstat (except docs and test files) -------------------------------------
etc/policy.json | 2 +- etc/policy.v3cloudsample.json | 2 +- keystone/assignment/core.py | 13 +++- keystone/identity/core.py | 3 +- keystone/oauth1/controllers.py | 16 +++-- keystone/token/persistence/backends/sql.py | 16 ++++- .../notes/bug-1649616-b835d1dac3401e8c.yaml | 6 ++ .../notes/bug-1687593-95e1568291ecd70b.yaml | 6 ++ .../notes/bug-1703369-9a901d627a1e0316.yaml | 11 ++++ 13 files changed, 191 insertions(+), 25 deletions(-)
participants (1)
-
no-reply@openstack.org