We are overjoyed to announce the release of: keystone 12.0.0: OpenStack Identity This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/keystone/ For more details, please see below. 12.0.0 ^^^^^^ Upgrade Notes ************* * [bug 1702211 (https://bugs.launchpad.net/keystone/+bug/1702211)] Password *created_at* field under some versions/deployments of MySQL would lose sub-second precision. This means that it was possible for passwords to be returned out-of-order when changed within one second (especially common in testing). This change stores password *created_at* and *expires_at* as an integer instead of as a DATETIME data-type. * The resource backend cannot be configured to anything but SQL if the SQL Identity backend is being used. The resource backend must now be SQL which allows for the use of Foreign Keys to domains/projects wherever desired. This makes managing project relationships and such much more straight forward. The inability to configure non-SQL resource backends has been in Keystone since at least Ocata. This is eliminating some complexity and preventing the need for some really ugly back-port SQL migrations in favor of a better model. Resource is highly relational and should be SQL based. Bug Fixes ********* * [bug 1701324 (https://bugs.launchpad.net/keystone/+bug/1701324)] Token bodies now contain only unique roles in the authentication response. Changes in keystone 12.0.0.0rc1..12.0.0 --------------------------------------- 10a9ef5 Remove duplicate roles from federated auth 66a1047 Add int storage of datetime for password created/expires 05c535c Resource backend is SQL only now Diffstat (except docs and test files) ------------------------------------- .../024_contract_create_created_at_int_columns.py | 61 +++++++++++++++++++ keystone/common/sql/core.py | 48 +++++++++++++++ .../024_migrate_create_created_at_int_columns.py | 22 +++++++ .../024_expand_create_created_at_int_columns.py | 33 +++++++++++ keystone/conf/resource.py | 8 +++ keystone/identity/backends/sql_model.py | 35 +++++++++-- keystone/resource/backends/sql.py | 2 + keystone/resource/core.py | 9 ++- keystone/token/providers/common.py | 24 ++++++-- .../notes/bug-1701324-739a31f38037f77b.yaml | 5 ++ .../notes/bug-1702211-abb59adda73fd78e.yaml | 9 +++ ...resource-backend-sql-only-03154d8712b36bd0.yaml | 12 ++++ requirements.txt | 1 + setup.cfg | 3 - test-requirements.txt | 1 + 20 files changed, 380 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fa2f24d..7fb3993 100644 --- a/requirements.txt +++ b/requirements.txt @@ -42,0 +43 @@ osprofiler>=1.4.0 # Apache-2.0 +pytz>=2013.6 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 88f0c44..a67eaf0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,0 +11 @@ freezegun>=0.3.6 # Apache-2.0 +pytz>=2013.6 # MIT