Open Stack

We are ecstatic to announce the release of:

barbican 15.0.0: OpenStack Secure Key Management

This release is part of the zed release series.

The source is available from:

    https://opendev.org/openstack/barbican

Download the package from:

    https://tarballs.openstack.org/barbican/

Please report issues through:

    https://bugs.launchpad.net/barbican/+bugs

For more details, please see below.

Changes in barbican 14.0.0..15.0.0
----------------------------------

b6cbbf90 Fix Story 2010258 (CVE-2022-3100)
1068bc7c Change the unique properties of secret consumers
74a14511 Update TOX_CONSTRAINTS_FILE for stable/zed
f20b26ab Update .gitreview for stable/zed
cfd2b900 Fix Barbican gate
950420f3 Fix remaining Secure RBAC policies
6e53363f Fix Secure RBAC policies for Containers API
b6002aa3 Fix Secure RBAC policies for Consumers
328087af Fix Secure RBAC policies for secret_metadata
0c8efcd2 Fix Secure RBAC policies for Orders
bbad16f7 Fix Secure RBAC policies for Secret ACLs
62964b61 Fix deprecation cycle for Secret policies
cd9b0ba9 Fix Secure RBAC policies for Secrets
1ed258e9 zuul: fix the grenade job to actually test barbican
b8b83a16 devstack: make create_barbican_accounts idempotent
ff7fef62 Fix versions for new microversion
2ac710eb Imported Translations from Zanata
aac3061f Revert "Temporarily disable voting for FIPS job"
c86b11fb Allow users with "creator" role to edit ACLs
50c71376 Remove undercloud job
37edca24 Include options for Vault secret store
8dc2be3b Remove the invalid quotes
57fb686b Temporarily disable voting for FIPS job
40ef6c8b Imported Translations from Zanata
0f74877c Implement microversions, bring back secret consumers API
935c7158 Replace TripleO CentOS 8 jobs with CentOS 9 jobs
335a55aa Add missing oslo.service options to barbican.conf
83a80506 Include healthcheck middleware options
a61bfdeb Add Python3 zed unit tests
271aeb94 Update master for stable/yoga


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   1 +
.zuul.yaml                                         |  32 +-
barbican/api/controllers/__init__.py               |  11 +-
barbican/api/controllers/consumers.py              |   4 +-
barbican/api/controllers/secrets.py                |  12 +-
barbican/api/controllers/versions.py               |  90 ++-
barbican/api/middleware/microversion.py            |  35 ++
barbican/common/policies/acls.py                   | 131 ++--
barbican/common/policies/base.py                   | 121 ++--
barbican/common/policies/consumers.py              | 182 ++++--
barbican/common/policies/containers.py             | 125 ++--
barbican/common/policies/orders.py                 |  65 +-
barbican/common/policies/quotas.py                 |  50 +-
barbican/common/policies/secretmeta.py             | 100 ++--
barbican/common/policies/secrets.py                | 118 ++--
barbican/common/policies/secretstores.py           |  70 ++-
barbican/common/policies/transportkeys.py          |  50 +-
barbican/locale/en_GB/LC_MESSAGES/barbican.po      |   8 +-
...8c74e2d7f1ff_update_secret_consumers_unique_.py |  49 ++
barbican/model/models.py                           |  18 +-
barbican/model/repositories.py                     |   7 +-
devstack/lib/barbican                              | 194 +++---
etc/barbican/barbican-api-paste.ini                |  13 +-
etc/oslo-config-generator/barbican.conf            |   3 +
releasenotes/source/index.rst                      |   1 +
.../locale/en_GB/LC_MESSAGES/releasenotes.po       |  85 ++-
releasenotes/source/yoga.rst                       |   6 +
requirements.txt                                   |   1 +
tox.ini                                            |   8 +-
36 files changed, 1621 insertions(+), 815 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 61a1ed72..d640b06c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -33,0 +34 @@ castellan >= 1.2.1 # Apache-2.0
+microversion-parse>=0.2.1 # Apache-2.0