Open Stack

We are psyched to announce the release of:

keystone 11.0.3: OpenStack Identity

This release is part of the ocata stable release series.

Download the package from:

    https://tarballs.openstack.org/keystone/

For more details, please see below.

11.0.3
^^^^^^


Security Issues
***************

* [bug 1703369 (https://bugs.launchpad.net/keystone/+bug/1703369)]
  There was a typo for the identity:get_identity_provider rule in the
  default "policy.json" file in previous releases. The default value
  for that rule was the same as the default value for the default rule
  (restricted to admin) so this typo was not readily apparent. Anyone
  customizing this rule should review their settings and confirm that
  they did not copy that typo. More context regarding the purpose of
  this backport can be found in the bug report.


Bug Fixes
*********

* [bug 1689616 (https://bugs.launchpad.net/keystone/+bug/1649616)]
  Significant improvements have been made when performing a token
  flush on massive data sets.

* [bug 1687593 (https://bugs.launchpad.net/keystone/+bug/1687593)]
  Ensure that the URL used to make the request when creating OAUTH1
  request tokens is also the URL that verifies the request token.

Changes in keystone 11.0.2..11.0.3
----------------------------------

6c96675 fix identity:get_identity_providers typo
b0414f4 Add a release note for bug 1687593
215788d Change url scheme passed to oauth signature verifier
59e4b49 Change url passed to oauth signature verifier to request url
64e28ec Stop reading local config dirs for domain-specific file config driver
83fccfa Fixing flushing tokens workflow
2fdf895 Handle group NotFound in effective assignment list
6074166 Make flushing tokens more robust


Diffstat (except docs and test files)
-------------------------------------

etc/policy.json                                    |  2 +-
etc/policy.v3cloudsample.json                      |  2 +-
keystone/assignment/core.py                        | 13 +++-
keystone/identity/core.py                          |  3 +-
keystone/oauth1/controllers.py                     | 16 +++--
keystone/token/persistence/backends/sql.py         | 16 ++++-
.../notes/bug-1649616-b835d1dac3401e8c.yaml        |  6 ++
.../notes/bug-1687593-95e1568291ecd70b.yaml        |  6 ++
.../notes/bug-1703369-9a901d627a1e0316.yaml        | 11 ++++
13 files changed, 191 insertions(+), 25 deletions(-)