Open Stack

We are jazzed to announce the release of:

keystone 8.1.0: OpenStack Identity

This release is part of the liberty stable release series.

For more details, please see below.

8.1.0
^^^^^


New Features
************

* [bug 1490804 (https://bugs.launchpad.net/keystone/+bug/1490804)]
  Audit IDs are included in the token revocation list.


Security Issues
***************

* [bug 1490804 (https://bugs.launchpad.net/keystone/+bug/1490804)]
  [CVE-2015-7546 (http://cve.mitre.org/cgi-
  bin/cvename.cgi?name=CVE-2015-7546)] A bug is fixed where an
  attacker could avoid token revocation when the PKI or PKIZ token
  provider is used. The complete remediation for this vulnerability
  requires the corresponding fix in the keystonemiddleware project.

Changes in keystone 8.0.1..8.1.0
--------------------------------

c665080 Make WebSSO trusted_dashboard hostname case-insensitive
ad7e75c Imported Translations from Zanata
1f37f71 Escape DN in enabled query
690191d Test enabled emulation with special user_tree_dn
7724b91 Revert "Validate domain ownership for v2 tokens"
01b89c6 Fix schema validation to use JSONSchema for empty entity
40d2fc2 Refactors validation tests to better see the cases
985d937 Fix trust redelegation and associated test
c99fecc use self.skipTest instead of self.skip
4580078 Imported Translations from Zanata
016efe0 Fix users in group and groups for user exact filters
bff03b5 Add audit IDs to revocation events
be3160d Expose defect in users_in_group, groups_for_user exact filters
9262bb8 Ensure endpoints returned is filtered correctly
7ce8ce9 Fix 500 error when no fernet token is passed
2d7eec3 Updated from global requirements
16fb928 Updated from global requirements
99ecd7c Updated from global requirements
5f6e585 More useful message when using direct driver import
c17c3fc force releasenotes warnings to be treated as errors

Diffstat (except docs and test files)
-------------------------------------

keystone/auth/controllers.py                       |  17 +-
keystone/common/controller.py                      |  32 +---
keystone/common/ldap/core.py                       |   3 +-
keystone/common/manager.py                         |  19 ++-
keystone/common/sql/core.py                        |  27 ++--
keystone/common/utils.py                           |  11 ++
keystone/common/validation/__init__.py             |  13 +-
.../endpoint_filter/backends/catalog_sql.py        |  50 +++---
keystone/contrib/endpoint_filter/controllers.py    |  18 +--
keystone/contrib/endpoint_filter/core.py           |  62 +++++++
keystone/contrib/federation/controllers.py         |   7 +-
.../locale/de/LC_MESSAGES/keystone-log-critical.po |  14 +-
keystone/locale/de/LC_MESSAGES/keystone.po         |  17 +-
.../locale/el/LC_MESSAGES/keystone-log-critical.po |  14 +-
.../en_AU/LC_MESSAGES/keystone-log-critical.po     |  14 +-
.../locale/en_AU/LC_MESSAGES/keystone-log-error.po |  14 +-
keystone/locale/en_AU/LC_MESSAGES/keystone.po      |  19 +--
.../locale/es/LC_MESSAGES/keystone-log-critical.po |  14 +-
keystone/locale/es/LC_MESSAGES/keystone.po         |  17 +-
.../locale/fr/LC_MESSAGES/keystone-log-critical.po |  14 +-
.../locale/fr/LC_MESSAGES/keystone-log-error.po    |  14 +-
.../locale/fr/LC_MESSAGES/keystone-log-info.po     |  14 +-
.../locale/fr/LC_MESSAGES/keystone-log-warning.po  |  14 +-
keystone/locale/fr/LC_MESSAGES/keystone.po         |  18 ++-
.../locale/hu/LC_MESSAGES/keystone-log-critical.po |  14 +-
.../locale/it/LC_MESSAGES/keystone-log-critical.po |  14 +-
keystone/locale/it/LC_MESSAGES/keystone.po         |  17 +-
.../locale/ja/LC_MESSAGES/keystone-log-critical.po |  14 +-
keystone/locale/ja/LC_MESSAGES/keystone.po         |  17 +-
keystone/locale/keystone.pot                       | 179 +++++++++++----------
.../ko_KR/LC_MESSAGES/keystone-log-critical.po     |  14 +-
keystone/locale/ko_KR/LC_MESSAGES/keystone.po      |  20 +--
.../pl_PL/LC_MESSAGES/keystone-log-critical.po     |  14 +-
.../pt_BR/LC_MESSAGES/keystone-log-critical.po     |  14 +-
.../locale/pt_BR/LC_MESSAGES/keystone-log-error.po |  22 ++-
keystone/locale/pt_BR/LC_MESSAGES/keystone.po      | 115 +++++++++++--
.../locale/ru/LC_MESSAGES/keystone-log-critical.po |  14 +-
keystone/locale/ru/LC_MESSAGES/keystone.po         |  20 +--
.../tr_TR/LC_MESSAGES/keystone-log-critical.po     |  14 +-
.../locale/tr_TR/LC_MESSAGES/keystone-log-error.po |  14 +-
.../locale/tr_TR/LC_MESSAGES/keystone-log-info.po  |  14 +-
.../tr_TR/LC_MESSAGES/keystone-log-warning.po      |  14 +-
keystone/locale/tr_TR/LC_MESSAGES/keystone.po      |  23 ++-
.../zh_CN/LC_MESSAGES/keystone-log-critical.po     |  14 +-
.../locale/zh_CN/LC_MESSAGES/keystone-log-error.po |  14 +-
.../locale/zh_CN/LC_MESSAGES/keystone-log-info.po  |  14 +-
keystone/locale/zh_CN/LC_MESSAGES/keystone.po      |  21 +--
.../zh_TW/LC_MESSAGES/keystone-log-critical.po     |  14 +-
keystone/locale/zh_TW/LC_MESSAGES/keystone.po      |  19 +--
.../test_associate_project_endpoint_extension.py   |  14 ++
keystone/token/persistence/backends/kvs.py         |   9 ++
keystone/token/persistence/backends/sql.py         |  12 +-
keystone/token/persistence/core.py                 |   5 -
keystone/token/provider.py                         |   6 +
keystone/token/providers/common.py                 |  47 ++----
keystone/trust/controllers.py                      |  14 +-
keystone/trust/core.py                             |  11 +-
.../notes/bug-1490804-de58a9606edb31eb.yaml        |  13 ++
requirements.txt                                   |   4 +-
test-requirements.txt                              |   2 +-
tox.ini                                            |   2 +-
70 files changed, 1039 insertions(+), 704 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 8bc177b..084f251 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -24 +24 @@ oslo.context>=0.2.0 # Apache-2.0
-oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,>=1.16.0 # Apache-2.0
+oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,!=3.1.0,>=1.16.0 # Apache-2.0
@@ -28 +28 @@ oslo.log>=1.8.0 # Apache-2.0
-oslo.middleware>=2.8.0 # Apache-2.0
+oslo.middleware!=3.0.0,!=3.1.0,!=3.2.0,>=2.8.0 # Apache-2.0
diff --git a/test-requirements.txt b/test-requirements.txt
index f10b992..374f136 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -37 +37 @@ tempest-lib>=0.8.0
-requests!=2.8.0,>=2.5.2
+requests!=2.8.0,!=2.9.0,>=2.5.2