We are pumped to announce the release of: keystone 14.0.1: OpenStack Identity This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/keystone/ For more details, please see below. 14.0.1 ^^^^^^ Bug Fixes * ['bug 1753585 <https://bugs.launchpad.net/keystone/+bug/1753585>'_] LDAP attribute names are now matched case insensitively to comply with LDAP implementations. * [bug 1796887 (https://bugs.launchpad.net/keystone/+bug/1796887)] Add caching on trust role validation to improve performance. Services relying heavily on trusts are impacted as the trusts are validated against the database. This adds caching on those operations to improve performance Changes in keystone 14.0.0..14.0.1 ---------------------------------- 618e595 Add caching on trust role validation to improve performance b39b591 Invalidate app cred AFTER deletion 70cc7bf Update API version to 3.11 15a8ae9 LDAP attribute names non-case-sensitive 6bc81fe Mapped Groups don't exist breaks WebSSO f8c513c Update RDO install guide for v3 0c71cdd Ensure view args is in policy dict 97d9387 import zuul job settings from project-config 350bb21 Update UPPER_CONSTRAINTS_FILE for stable/rocky Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 93 ++++++++++++++++++++++ api-ref/source/v3/index.rst | 9 +++ keystone/api/discovery.py | 4 +- keystone/application_credential/core.py | 2 +- keystone/assignment/core.py | 20 +++++ keystone/common/rbac_enforcer/enforcer.py | 7 ++ keystone/federation/utils.py | 4 +- keystone/identity/backends/ldap/common.py | 29 ++++--- keystone/models/token_model.py | 20 ++--- keystone/version.py | 2 +- .../notes/bug-1753585-7e11213743754999.yaml | 6 ++ .../notes/bug-1796887-eaea84e3f9a8ff9f.yaml | 7 ++ tox.ini | 2 +- 19 files changed, 312 insertions(+), 38 deletions(-)