We are ecstatic to announce the release of: barbican 15.0.0: OpenStack Secure Key Management This release is part of the zed release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 14.0.0..15.0.0 ---------------------------------- b6cbbf90 Fix Story 2010258 (CVE-2022-3100) 1068bc7c Change the unique properties of secret consumers 74a14511 Update TOX_CONSTRAINTS_FILE for stable/zed f20b26ab Update .gitreview for stable/zed cfd2b900 Fix Barbican gate 950420f3 Fix remaining Secure RBAC policies 6e53363f Fix Secure RBAC policies for Containers API b6002aa3 Fix Secure RBAC policies for Consumers 328087af Fix Secure RBAC policies for secret_metadata 0c8efcd2 Fix Secure RBAC policies for Orders bbad16f7 Fix Secure RBAC policies for Secret ACLs 62964b61 Fix deprecation cycle for Secret policies cd9b0ba9 Fix Secure RBAC policies for Secrets 1ed258e9 zuul: fix the grenade job to actually test barbican b8b83a16 devstack: make create_barbican_accounts idempotent ff7fef62 Fix versions for new microversion 2ac710eb Imported Translations from Zanata aac3061f Revert "Temporarily disable voting for FIPS job" c86b11fb Allow users with "creator" role to edit ACLs 50c71376 Remove undercloud job 37edca24 Include options for Vault secret store 8dc2be3b Remove the invalid quotes 57fb686b Temporarily disable voting for FIPS job 40ef6c8b Imported Translations from Zanata 0f74877c Implement microversions, bring back secret consumers API 935c7158 Replace TripleO CentOS 8 jobs with CentOS 9 jobs 335a55aa Add missing oslo.service options to barbican.conf 83a80506 Include healthcheck middleware options a61bfdeb Add Python3 zed unit tests 271aeb94 Update master for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 32 +- barbican/api/controllers/__init__.py | 11 +- barbican/api/controllers/consumers.py | 4 +- barbican/api/controllers/secrets.py | 12 +- barbican/api/controllers/versions.py | 90 ++- barbican/api/middleware/microversion.py | 35 ++ barbican/common/policies/acls.py | 131 ++-- barbican/common/policies/base.py | 121 ++-- barbican/common/policies/consumers.py | 182 ++++-- barbican/common/policies/containers.py | 125 ++-- barbican/common/policies/orders.py | 65 +- barbican/common/policies/quotas.py | 50 +- barbican/common/policies/secretmeta.py | 100 ++-- barbican/common/policies/secrets.py | 118 ++-- barbican/common/policies/secretstores.py | 70 ++- barbican/common/policies/transportkeys.py | 50 +- barbican/locale/en_GB/LC_MESSAGES/barbican.po | 8 +- ...8c74e2d7f1ff_update_secret_consumers_unique_.py | 49 ++ barbican/model/models.py | 18 +- barbican/model/repositories.py | 7 +- devstack/lib/barbican | 194 +++--- etc/barbican/barbican-api-paste.ini | 13 +- etc/oslo-config-generator/barbican.conf | 3 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 85 ++- releasenotes/source/yoga.rst | 6 + requirements.txt | 1 + tox.ini | 8 +- 36 files changed, 1621 insertions(+), 815 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 61a1ed72..d640b06c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -33,0 +34 @@ castellan >= 1.2.1 # Apache-2.0 +microversion-parse>=0.2.1 # Apache-2.0