)]}' { "log": [ { "commit": "658312ca2f54aaabd43f91d2fca73cbee0319735", "tree": "5b75cf4dbcd8246aaca657b9968b2ff3bedef3bd", "parents": [ "3c8973a90abc7601e46e2fcaf3d50343338e24d8" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Fri Nov 14 11:35:56 2014 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Fri Nov 14 11:36:45 2014 -0500" }, "message": "move keystonemiddleware to pypi libs\n\nMake keystonemiddleware install from pypi releases by default\n\nChange-Id: I3dc4b096b4184f4cf00fb0df66b76fcc8f19785b\n" }, { "commit": "e08ab104e62da041fcc6b2aafba4349326f4a969", "tree": "859fc4953f6b45b75b9f4810ba0bf33477799f31", "parents": [ "94f8bea9e4ff0434df1723cf269c4300a4373524" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Nov 13 17:09:28 2014 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Nov 13 17:17:38 2014 -0500" }, "message": "fix python-* lib from git installation\n\nWe\u0027re using all the magic variables based on python-fooclient, however\nall the inline code was using fooclient for variables. So we had a\nmismatch, which was kindly pointed out by some of the 3rd party ci\ntesters.\n\nChange-Id: I27a56222c7e8e610fba8bf97672d2a42f5cf14ca\n" }, { "commit": "5cb190697c1bce5dcd2ad843922813b0cc74bd24", "tree": "ba87095ef1603c957902abadcb692ccf653e6f59", "parents": [ "2d18b83600bf53df3a41aec619eee67328fe154f" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Sat Nov 01 01:37:45 2014 +0100" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Nov 04 10:18:58 2014 +0100" }, "message": "support installing clients at released versions\n\nexpand the devstack support for libraries from released versions to\nsupport python-* clients and tempest_lib.\n\nDepends-On: I81b0d228e7769758c61e5b0323ecfce8c8886d39\n\nChange-Id: I26fac0ccf8fd4818e24618d56bf04b32306f88f6\n" }, { "commit": "7fb5082c5c7abff95eb46dd9a92c5fd8fc63ddd2", "tree": "6c80b3ce5bd8ed5982765f89319ba9d7e75d36cf", "parents": [ "6fe32059de58964c8f089977539262f288df4601" ], "author": { "name": "wanghong", "email": "w.wanghong@huawei.com", "time": "Tue Oct 28 19:09:04 2014 +0800" }, "committer": { "name": "wanghong", "email": "w.wanghong@huawei.com", "time": "Tue Oct 28 19:20:54 2014 +0800" }, "message": "correct templated catalog driver class\n\nNow the templated catalog driver class \"TemplatedCatalog\" is removed\nin this patch https://review.openstack.org/#/c/125708/2 use\n\"keystone.catalog.backends.templated.Catalog\" instead.\n\nChange-Id: Ib9c8ea557e7171ff0c78a1e10d752ed564aff9e7\nCloses-Bug: #1386562\n" }, { "commit": "d844513156b3ec993c4ba8c173ac058f9d39784a", "tree": "381281f4e9ab1ae89fd17c6836a6fdc8bc5331de", "parents": [ "68e9f05f7c19b1bd9d4c7e8e7f88fbf93d18b9f9", "3fcd2baf95332e814e56a7cddc1b85dd15ae6391" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 29 06:04:26 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 29 06:04:26 2014 +0000" }, "message": "Merge \"Ensure that keystone uses global debug setting\"" }, { "commit": "3fcd2baf95332e814e56a7cddc1b85dd15ae6391", "tree": "2620976e0447617e6060ebe7210dd6314203c8ec", "parents": [ "47ccb7fa36ffe7a89a793902793921e0aa5fa8a8" ], "author": { "name": "Gary Kotton", "email": "gkotton@vmware.com", "time": "Mon Sep 22 00:55:02 2014 -0700" }, "committer": { "name": "Gary Kotton", "email": "gkotton@vmware.com", "time": "Sat Sep 27 23:15:54 2014 -0700" }, "message": "Ensure that keystone uses global debug setting\n\nWhen setting ENABLE_DEBUG_LOG_LEVEL the keystone screen would ignore\nthis setting and always use the debug mode.\n\nChange-Id: I934443c2976e936198fc93da4cca717e6cb84e6f\n" }, { "commit": "18d4778cf7bffa60eb2e996a13c129c64f83575f", "tree": "d6d934b05026d32d6942b34a5e3a359202b3996c", "parents": [ "d60c10d6dbe44445aaab9e3fcc0127e39e989f40" ], "author": { "name": "Rob Crittenden", "email": "rcritten@redhat.com", "time": "Wed Mar 19 17:47:42 2014 -0400" }, "committer": { "name": "Rob Crittenden", "email": "rcritten@redhat.com", "time": "Wed Sep 24 18:36:37 2014 -0400" }, "message": "Configure endpoints to use SSL natively or via proxy\n\nConfigure nova, cinder, glance, swift and neutron to use SSL\non the endpoints using either SSL natively or via a TLS proxy\nusing stud.\n\nTo enable SSL via proxy, in local.conf add\n\nENABLED_SERVICES+\u003d,tls-proxy\n\nThis will create a new test root CA, a subordinate CA and an SSL\nserver cert. It uses the value of hostname -f for the certificate\nsubject. The CA certicates are also added to the system CA bundle.\n\nTo enable SSL natively, in local.conf add:\n\nUSE_SSL\u003dTrue\n\nNative SSL by default will also use the devstack-generate root and\nsubordinate CA.\n\nYou can override this on a per-service basis by setting\n\n\u003cSERVICE\u003e_SSL_CERT\u003d/path/to/cert\n\u003cSERVICE\u003e_SSL_KEY\u003d/path/to/key\n\u003cSERVICE\u003e_SSL_PATH\u003d/path/to/ca\n\nYou should also set SERVICE_HOST to the FQDN of the host. This\nvalue defaults to the host IP address.\n\nChange-Id: I36fe56c063ca921131ad98439bd452cb135916ac\nCloses-Bug: 1328226\n" }, { "commit": "da4f28fb8494f90f704f22f111d4bfe53859c916", "tree": "42748d5e04dccf45f7c048f39998ea8cae0f984b", "parents": [ "14f6c50b187d0d35c0d344700de06fa478845237", "8732afe2f92545f2b9956c37bdfca4ee1bc07cae" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Sep 25 09:41:56 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Sep 25 09:41:56 2014 +0000" }, "message": "Merge \"Use correct WSGI dir on SUSE distros\"" }, { "commit": "14f6c50b187d0d35c0d344700de06fa478845237", "tree": "49c49eb702dc1505abb6ef6ef0cc2d4d2ee58085", "parents": [ "8fe3f70efd6c74479d2f17b789976fb3dfb8efd2", "b4495eb410e3ad348700f127dcf7c0562014c325" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Sep 25 03:43:29 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Sep 25 03:43:29 2014 +0000" }, "message": "Merge \"Use mod_version to clean-up apache version matching\"" }, { "commit": "8732afe2f92545f2b9956c37bdfca4ee1bc07cae", "tree": "66366087e6709d932fd9a2d7c97a9108fc8d39a6", "parents": [ "47ccb7fa36ffe7a89a793902793921e0aa5fa8a8" ], "author": { "name": "Thomas Bechtold", "email": "tbechtold@suse.com", "time": "Mon Sep 22 19:04:05 2014 +0200" }, "committer": { "name": "Thomas Bechtold", "email": "tbechtold@suse.com", "time": "Mon Sep 22 19:11:03 2014 +0200" }, "message": "Use correct WSGI dir on SUSE distros\n\nThe current default (/var/www) leads to:\n\nAH01797: client denied by server configuration:\n/var/www/keystone/admin\n\nFor /var/www the needed permissions on SUSE are not set.\nFor /srv/www/htdocs/ the permissions are correct on SUSE systems.\n\nChange-Id: I3f2df896daecdfe510d45ff121af2a8433a4d5be\n" }, { "commit": "3951a9449924f0e8ce962738bfe557f2b48085c7", "tree": "39d1f9a9b0f144e61a34a718e9958452b60baf86", "parents": [ "0595237e8adee0320dbcabe5647f7aa179378741" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Aug 24 18:54:51 2014 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Sep 21 13:55:39 2014 -0500" }, "message": "Configurable token hashing algorithm\n\nThe Keystone server and auth_token middleware were enhanced to\nsupport a configurable hash algorithm.\n\nWith this change, the user can set\n\n KEYSTONE_TOKEN_HASH_ALGORITHM\u003dsha256\n\nin their localrc to use the SHA256 algorithm rather than the\ndefault md5. Any hash algorithm supported by Python\u0027s hashlib can\nbe used. The MD5 algorithm doesn\u0027t provide enough protection from\nhash collisions and some security standards mandate a SHA2 hash\nalgorithm.\n\nChange-Id: I8b373291ceb760a03c4c14aebfeb53d8d0dfbcc1\nCloses-Bug: #1174499\n" }, { "commit": "0595237e8adee0320dbcabe5647f7aa179378741", "tree": "2bfac494b50c567e9816778b3f6cbf0b80d8012d", "parents": [ "d13eb8ec4066c2f52313351053021e456de60883" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Sep 19 17:22:22 2014 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Sep 21 11:18:01 2014 -0500" }, "message": "Function for auth_token middleware config\n\nEach project was configuring the auth_token middleware using several\nlines of inisets. Since all the projects should configure the\nauth_token middleware in the same way create a function and call it.\n\nChange-Id: I3b6727d5a3bdc0ca600d8faa23bc6db32bb32260\n" }, { "commit": "85a17ea1ded77204fa7f0d2510a637805d1724bb", "tree": "f1bbf2d2b6048fdb5d9ec128274d0523de5a2e22", "parents": [ "106b379741d684651ba5d9a50d352517326d45cc" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sat Sep 13 14:49:24 2014 -0500" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Fri Sep 19 23:27:53 2014 -0500" }, "message": "Configurable Keystone admin workers\n\nThe API_WORKERS option wasn\u0027t setting the number of admin workers\nfor the Keystone server when running in eventlet mode. This will\nallow for control of throughput and memory usage.\n\nChange-Id: Iecbce4a601f93784164e53d8b0c542d48f7b5650\n" }, { "commit": "c4b067134c735b62b3c41105d29f83814abe8f90", "tree": "0fe8b09b75a0d8ebf843520dd60c958eab21f14b", "parents": [ "a1c725694690b746725328243ce10cc65ce97a6d" ], "author": { "name": "Adam Gandelman", "email": "adamg@ubuntu.com", "time": "Wed Sep 03 11:44:31 2014 -0700" }, "committer": { "name": "Chmouel Boudjnah", "email": "chmouel@enovance.com", "time": "Tue Sep 16 04:36:25 2014 +0200" }, "message": "Split keystone mod wsgi config from start/stop\n\nWe currently cleanup keystone apache config during stop_keystone\nwhen mod wsgi is enabled, but only create it during initial keystone\nconfiguration. Grenade expects to be able to stop and start the\nservice without reconfiguring it, using only the respective functions.\nThis moves cleanup of config from stop_keystone to cleanup_keystone,\nand enables/disables the apache vhost during start/stop.\n\nCloses-bug: #1365105\n\nChange-Id: I9e57c9a763fbdb8c5737decfe797ba0e9894150b\n" }, { "commit": "2f27a0ed3c609bfcd6344a55c121e56d5569afc9", "tree": "abe0c02c1d2fd9d57f6b786ff8105896969d0e3c", "parents": [ "58deafcd63ae996e0973c864e249c4a3cb82a74f" ], "author": { "name": "Chris Dent", "email": "chdent@redhat.com", "time": "Tue Sep 09 13:46:02 2014 +0100" }, "committer": { "name": "Chris Dent", "email": "chdent@redhat.com", "time": "Thu Sep 11 18:59:39 2014 +0100" }, "message": "Replace screen_it() with run_process() throughout\n\nrun_process will use screen if USE_SCREEN\u003dTrue (the default),\notherwise it will simply start the requested service. Therefore\nwherever screen_it used, run_process can be instead.\n\nWhere stop_screen was found it has been replaced with stop_process.\n\nA tail_log function has been added which will tail a logfile in a\nscreen if USE_SCREEN is True.\n\nlib/template has been updated to reflect the use of the new\nfunctions.\n\nWhen using sg the quoting in run_process gets very complicated.\nTo get around this run_process and the functions it calls accepts\nan optional third argument. If set it is a group to be used with sg.\n\nChange-Id: Ia3843818014f7c6c7526ef3aa9676bbddb8a85ca\n" }, { "commit": "68fd37e029d9a531f7b9c491252469aa7ccf3955", "tree": "ce3a047737c5a33e927a7f2ca48dab06329dd4cd", "parents": [ "ba842f5374f28d1f17bc008349a2d01958dfe82d", "d3654058e555c48e498e03e85f2fbe93d0572a09" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Sep 09 00:42:50 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Sep 09 00:42:50 2014 +0000" }, "message": "Merge \"Fix another_role variable for swift\"" }, { "commit": "ba842f5374f28d1f17bc008349a2d01958dfe82d", "tree": "4b01fdbdd677be6d8672f1b32850c4499c034591", "parents": [ "8b3217e31083625667225e5cddadf99d430a6206", "966463c802c6c2f3a04da812cd689502aa8006cd" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 08 16:23:20 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 08 16:23:20 2014 +0000" }, "message": "Merge \"Keystone access log in key-access screen\"" }, { "commit": "d3654058e555c48e498e03e85f2fbe93d0572a09", "tree": "6873ef189cdd935f5f4372c30be592af123f84a1", "parents": [ "a672e02818869de184c7c04aeb2f3e471bec3153" ], "author": { "name": "Masayuki Igawa", "email": "igawa@mxs.nes.nec.co.jp", "time": "Mon Sep 01 17:30:05 2014 +0900" }, "committer": { "name": "Chmouel Boudjnah", "email": "chmouel@enovance.com", "time": "Mon Sep 08 16:41:41 2014 +0200" }, "message": "Fix another_role variable for swift\n\nAn error occurs because ANOTHER_ROLE variable in lib/swift is not set.\nThis patch gets and sets the value to another_role variable.\n\nChange-Id: I9d67ce243eb6bb42ed7e3522ef816295847d48fa\nCloses-Bug: #1363884\n" }, { "commit": "b4495eb410e3ad348700f127dcf7c0562014c325", "tree": "a2af0cc87edd09d37ab764ebc014264c60b79a00", "parents": [ "3d458eb703e52606d8aa8d58757285e61cb47b8b" ], "author": { "name": "Noboru Iwamatsu", "email": "n_iwamatsu@jp.fujitsu.com", "time": "Wed Jul 02 18:31:31 2014 +0900" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Mon Sep 08 15:59:29 2014 +1000" }, "message": "Use mod_version to clean-up apache version matching\n\nThis change uses mod_version (shipped by default on everything we care\nabout) to set-up version-specific config within apache rather than\nwithin devstack scripts.\n\nClean up the horizon and keystone config file generation to use the\ninternal apache matching.\n\nSince I6478db385fda2fa1c75ced12d3e886b2e1152852 the apache matching in\n\u0027functions\u0027 is actually duplicated. just leave get_apache_version in\nlib/apache as it is used for config-file name matching in there.\n\nChange-Id: I6478db385fda2fa1c75ced12d3e886b2e1152852\n" }, { "commit": "61a6e253f285fd9cfe0ac7612e85e7cf1fff5116", "tree": "21b4ce5b368393aec0d1bcc79669127e45460e4b", "parents": [ "62cae13d7e7e13102a02aa385ae63b8e2afb7c83", "947d7468c84423e5a9079ffda292924097a0b404" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Sep 04 23:40:48 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Sep 04 23:40:48 2014 +0000" }, "message": "Merge \"Use correct class path for token persistence backend\"" }, { "commit": "966463c802c6c2f3a04da812cd689502aa8006cd", "tree": "c0af3fb57d97c1448a5df2f4941df2d8c7bdd7d7", "parents": [ "2a6ce7197e5da9fddddaba2faff2a18c04ece957" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Aug 21 18:24:42 2014 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Sep 04 18:12:37 2014 -0500" }, "message": "Keystone access log in key-access screen\n\nWhen Keystone was run in Apache Httpd the access log wasn\u0027t in a\nscreen. A new screen called key-access is now started with\nKeystone\u0027s access log.\n\nChange-Id: Ie1f4d4b679e1b9c87f0cea37deb25f7b6636fe01\nCloses-Bug: #1359995\n" }, { "commit": "947d7468c84423e5a9079ffda292924097a0b404", "tree": "fbd84c501aab095232ee31c66ac7ec871a09e668", "parents": [ "434982c96d758a55a324d933df8f5e3949813fc8" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Fri Aug 29 13:26:31 2014 -0700" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Fri Aug 29 13:26:31 2014 -0700" }, "message": "Use correct class path for token persistence backend\n\nKeystone has moved over to using a new location for the token\npersistence backends (drivers). The old values will continue to\nwork, but this will limit the deprecation warnings for an out\nof the box devstack install.\n\nChange-Id: I7c437788c8aee0106fa7f3c37617fbd1220291ef\nbp: non-persistent-tokens\n" }, { "commit": "d074dc7f7e37c8ff1ce781f0bbc7f88196567f00", "tree": "60995ba98b831d71ccb931f357fd4d11573a0046", "parents": [ "a90898d90438834ac32224162500b7d54fe2e603" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Tue Jun 24 21:33:39 2014 -0700" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Thu Aug 28 08:39:50 2014 -0700" }, "message": "Use the apache 2.4 ErrorLogFormat directive\n\nUse the new ErrorLogFormat directive to make the Keystone logs\nunder Apache to look like the standard oslo log format.\n\nChange-Id: Ie823abf2fa06b8ce22027c21bef455808a4a768e\n" }, { "commit": "a8f0d966a159220af11fe0171ae6dca24bc51b97", "tree": "24d00a4a8db97cf79f1c2863c78ab2eca38c8eb5", "parents": [ "7d9596781cf102e0928091ce1734e766db0fe737", "cfc9465ee0ce212287f8426a883a94c1eee675a0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sun Aug 24 21:31:35 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sun Aug 24 21:31:35 2014 +0000" }, "message": "Merge \"Change httpd Keystone log to keystone.log\"" }, { "commit": "cfc9465ee0ce212287f8426a883a94c1eee675a0", "tree": "3cdcd733d089fe6ddd26251d4e7b3e64bb02905b", "parents": [ "219e9c227832371f10f718dc3d793b03904f5968" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Aug 21 18:25:29 2014 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Aug 22 16:49:02 2014 -0500" }, "message": "Change httpd Keystone log to keystone.log\n\nThe normal extension for log files is .log. Log rotation should\nwork because the extension is as expected.\n\nChange-Id: Ia5e42ea9d953e8395b86ab58cdef6c2d852efc94\nRelated-Bug: #1359995\n" }, { "commit": "c50c983c5687371a4b49222bb853684a919fb8ea", "tree": "e907045c46fc88aac9f8b428e2ff044c2fb1548f", "parents": [ "d3121f649d672fdaf757655b94ecd68c71b56b8e" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Fri Jul 25 13:40:25 2014 -0500" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Fri Jul 25 15:57:48 2014 -0500" }, "message": "Clean up local variable usage - Keystone\n\nChange-Id: I8e5506e9d29879459158ef796854ce7a67107d89\n" }, { "commit": "4f3b66f538937cf0c7f9fdc97e5472f4c77bbe69", "tree": "d1ba15f3adddcd38cd41ceb422f13b875fbb14e0", "parents": [ "f0bd8dbe37bd855669ad4cddff0a49bccfd9b64e" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Jul 23 16:45:12 2014 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Jul 23 16:45:12 2014 -0400" }, "message": "add is_keystone_enabled\n\nThis is missing, and makes logic much harder for the grenade use\ncase.\n\nChange-Id: Ib6670096d190e69273256b87e6a67e2b46945a0d\n" }, { "commit": "6dd8a8bee402a6be683075e0669a010a279950ae", "tree": "863dda081a4cf9cbf78f911ac66178b7ffc9f11e", "parents": [ "2bb05fdb84aa472299efc714b7c1114a25a3ada2" ], "author": { "name": "Gael Chamoulaud", "email": "gchamoul@redhat.com", "time": "Tue Jul 22 01:12:12 2014 +0200" }, "committer": { "name": "Gael Chamoulaud", "email": "gchamoul@redhat.com", "time": "Tue Jul 22 17:29:04 2014 +0200" }, "message": "Users in service group should not have email addresses\n\nChange-Id: Ieed9dffce5cf1e735e482dd3494ac1e103b50955\nCloses-Bug: 1185201\nSigned-off-by: Gael Chamoulaud \u003cgchamoul@redhat.com\u003e\n" }, { "commit": "d727754c921676b9fe66162ee39ca854f3bea691", "tree": "8da0f0d082244f08a79f0977723074e87743987e", "parents": [ "fdf1cffbd5d2a7b47d5bdadbc0755fcb2ff6d52f", "8464a4cba38a4e4b98305712fb577bbe60068775" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Jul 11 14:33:21 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jul 11 14:33:21 2014 +0000" }, "message": "Merge \"Configure rabbitmq credentials in keystone.conf\"" }, { "commit": "8464a4cba38a4e4b98305712fb577bbe60068775", "tree": "225c4de9f4dcf7d337a470158c8c9487d645cf8c", "parents": [ "2efb9781c492a05962ea287f1addb3f791911fbd" ], "author": { "name": "Sergey Skripnick", "email": "sskripnick@mirantis.com", "time": "Tue Jul 08 21:05:23 2014 +0300" }, "committer": { "name": "Boris Pavlovic", "email": "boris@pavlovic.me", "time": "Wed Jul 09 03:36:51 2014 +0400" }, "message": "Configure rabbitmq credentials in keystone.conf\n\nRabbitmq credentials in keystone.conf should be updated according\nto localrc\n\nThis is done mostly to enable keystone notifications.\n\nThere are 2 cases where we can use notifications from keystone:\nA) Collect audit notifications in ceilometer\nB) Collect profiling data\n\nChange-Id: I381d4d670755aa691743caa02df7dc55e05784c2\n" }, { "commit": "e6dd4e665d2a10e7cbbf2d0c35011700ddabf0ad", "tree": "e1a66f72009b6c3599df83f3af640db7a268d96d", "parents": [ "49d14407c5ea93c6c8c22e8c06f29de6b38ce976" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Wed Jun 25 17:25:25 2014 -0700" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Tue Jul 08 00:11:20 2014 +0000" }, "message": "Enable Keystone under Apache by default\n\nMake the default run mode of Keystone HTTPD + mod_wsgi. This will\nenable gating on Keystone under mod_wsgi.\n\nDepends On: https://review.openstack.org/#/c/100764/\n\nChange-Id: I4b664a1d6c9bbb1ff999158f3a8c8ab3bd8d891b\n" }, { "commit": "46455a34d56c4bd91ccab5a33f801d3c3e065121", "tree": "a4cb63e72647347f8da82de4f10670fca84f94f6", "parents": [ "9c0f077dd5e8cc01b30598e2306fce755f0c84e1" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Fri Jun 20 10:37:18 2014 -0700" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Mon Jul 07 08:46:28 2014 -0700" }, "message": "Update Apache + mod_wsgi deployment mechanisms\n\nAdded a global toggle for enabling HTTPD + mod_wsgi for services\nthat default deploy to running under Apache. When the variable\n``ENABLE_HTTPD_MOD_WSGI_SERVICES`` is set to ``True`` any service\nthat recommends deploying under HTTPD + mod_wsgi, will be run\nunder Apache.\n\nIf ``ENABLE_HTTPD_MOD_WSGI_SERVICES`` is set to ``False`` the\nany service that is defaulted to running under HTTPD + mod_wsgi\nwill (if capable) be run in an alternate deployment strategy (e.g.\neventlet).\n\nUpdated Swift and Keystone to have individual toggles for deploying\nunder HTTPD + mod_wsgi. This is done to allow for gate to run on\nthe services under mod_wsgi where appropriate. Toggles are\n``KEYSTONE_USE_MOD_WSGI`` and ``SWIFT_USE_MOD_WSGI`` and are both\ndefaulted to \"False\" (do not deploy under HTTPD + mod_wsgi).\n\nChange-Id: Id3b121b8f1cde369d184b586e0d875bdbda34813\n" }, { "commit": "cfcd8cf2f81bc8e4a5984981b399b48bed170945", "tree": "c0f93c8c24bea65f920f7224eb8cf6d97f3ed1d3", "parents": [ "4ede37aa8664dd034f33f28731b95f0d32159b11", "0abde393c5e2d15e840c0321b736e22291b59780" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Jul 04 16:53:01 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jul 04 16:53:01 2014 +0000" }, "message": "Merge \"Adds support for multi-region\"" }, { "commit": "8a88f2728c9aaddf607325c4307652df86928aa9", "tree": "8933d8319b66f1b170b0e7885ded45c5877d9aa8", "parents": [ "c06c9e1f904a81e0fef646273b07510e90995364", "58936fdbcda70b28e14dfe9a5fe344fc1f22c40e" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Jul 01 19:46:16 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jul 01 19:46:16 2014 +0000" }, "message": "Merge \"Add keystone middleware to devstack\"" }, { "commit": "0abde393c5e2d15e840c0321b736e22291b59780", "tree": "a78ecff37749175c95a5cbc7eae78cfecd02d1c8", "parents": [ "c06c9e1f904a81e0fef646273b07510e90995364" ], "author": { "name": "Bartosz Górski", "email": "bartosz.gorski@ntti3.com", "time": "Fri Feb 28 14:15:19 2014 +0100" }, "committer": { "name": "Bartosz Górski", "email": "bartosz.gorski@ntti3.com", "time": "Tue Jul 01 14:58:35 2014 +0000" }, "message": "Adds support for multi-region\n\nChange-Id: Ib85fe7cb375692b04aca4c46f61ba7e1fbfa501b\nImplements: blueprint multi-region\n" }, { "commit": "58936fdbcda70b28e14dfe9a5fe344fc1f22c40e", "tree": "4cfebe6147984e15bde6f064fd7225937ece49dd", "parents": [ "c6dc3deb2571f08b224c9a11eac975da2ef59f5a" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Tue Jun 24 12:26:07 2014 -0700" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Mon Jun 30 09:29:45 2014 -0700" }, "message": "Add keystone middleware to devstack\n\nAdd the keystonemiddleware repository to devstack to support testing\nwith tempest and stable branches.\n\nChange-Id: Ib635465e6568d9cd51d6e432ec8b8633a27d19ce\n" }, { "commit": "945ccecb68900cf09048db615bf2ad3fb3b1cd9a", "tree": "0134b77cdfd1f558f94abb48098fe5c990fd055e", "parents": [ "4fabfe73b3c954c371f2892fd49f768b39425461", "be4c953e5a46dc20401e217a23b206483f24d01b" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Jun 25 21:14:35 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jun 25 21:14:35 2014 +0000" }, "message": "Merge \"Always check keystone using http\"" }, { "commit": "be4c953e5a46dc20401e217a23b206483f24d01b", "tree": "ad768199d155b4fe379c0435cedb10bc44a692c2", "parents": [ "4fcda870e65db81fc643fee799730cadd69441bb" ], "author": { "name": "Stanislaw Pitucha", "email": "stanislaw.pitucha@hp.com", "time": "Wed Jun 11 17:52:49 2014 +0100" }, "committer": { "name": "Stanislaw Pitucha", "email": "stanislaw.pitucha@hp.com", "time": "Wed Jun 25 16:17:17 2014 +0000" }, "message": "Always check keystone using http\n\nThe check to $service_port must be done using http. It\u0027s\n$KEYSTONE_SERVICE_PORT that may use either the http or https protocol.\n\npartial blueprint devstack-https\nChange-Id: I8ae081e9710c54396b765210336a7de331947086\n" }, { "commit": "00da58a0da77e168b8fe01e8909e5f2f8815172e", "tree": "ee1df48d86a1eedf6bd04dcfe85eb7d62ee69403", "parents": [ "4fcda870e65db81fc643fee799730cadd69441bb" ], "author": { "name": "Julien Vey", "email": "julien.vey@numergy.com", "time": "Tue May 27 15:51:49 2014 +0200" }, "committer": { "name": "Julien Vey", "email": "vey.julien@gmail.com", "time": "Tue Jun 24 10:09:08 2014 +0200" }, "message": "Add an environment variable to enable extensions in keystone\n\nFollowing https://review.openstack.org/#/c/44401/3\n\nChange-Id: I8e0391cd68e29e6d57c0f35517bf4155110861c7\nCloses-Bug: #1218733\nCo-Authored-By: Yong Sheng Gong \u003cgongysh@unitedstack.com\u003e\n" }, { "commit": "399a2640bcad06a561a95385204fcd2976b13dd8", "tree": "0f3d8504348657eab4281cf84ee0a03835b3196e", "parents": [ "d4f3ab9c1f1328e359ae4c3dc85b1cd47a230857", "1e1fce856dfafe60c477a8ba956eaa9fa160c6c4" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Jun 23 13:43:30 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jun 23 13:43:30 2014 +0000" }, "message": "Merge \"Use Keystone\u0027s default token format if not set\"" }, { "commit": "056b7c11938bccfd9033b6d88680e83493ae063d", "tree": "d81bea1ac24f133999ef0ae18481e62c6991f3f9", "parents": [ "711a4d2ff7ecddb8a07308dae9a42114df77c123", "0b0cbd1378e82015f683bbb2f35824dad424bb42" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Jun 19 23:00:13 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Jun 19 23:00:13 2014 +0000" }, "message": "Merge \"PKIZ is the default token provider\"" }, { "commit": "1e1fce856dfafe60c477a8ba956eaa9fa160c6c4", "tree": "09f6dc7a12697102a2ee5a8f18c62edf69ba0aa8", "parents": [ "0b0cbd1378e82015f683bbb2f35824dad424bb42" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Jun 19 16:55:45 2014 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Jun 19 16:59:09 2014 -0500" }, "message": "Use Keystone\u0027s default token format if not set\n\nDevstack was setting its own default for Keystone\u0027s token format, so\nwhen Keystone\u0027s default token format changed then devstack needed to\nbe updated. With this change, devstack will only override Keystone\u0027s\ntoken format if KEYSTONE_TOKEN_FORMAT is set explicitly. PKI setup\nis assumed to be needed unless the KEYSTONE_TOKEN_FORMAT is set to\nUUID.\n\nChange-Id: Idfa78e93abd80273dadcf37007a024bb6a783a48\n" }, { "commit": "da2fe19e24602ec6c0b14b8c4f288d4f2e1ee0ef", "tree": "3c1ceddb0f5ba03b4d296ff85de9aa12169588a2", "parents": [ "b15413c2527ecb8ee8fd295a27e3c7ac71766adc", "3561d7f9edc6dd0d00be097a78b83f38aa8cbf5f" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Jun 17 16:06:48 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jun 17 16:06:48 2014 +0000" }, "message": "Merge \"Use identity_uri instead of auth fragments\"" }, { "commit": "f04abfe865c39ee3fceef4fdebef36a3fd5040e9", "tree": "c980c74e2c1d252c0c6bebdace9f5e5f0adc41dd", "parents": [ "4fbb8137af8c3e0e5805db7337651048f11b6bb2", "754c4408b3e1af671dd9cf4cadd2ec8c8a41482e" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Jun 17 06:14:29 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jun 17 06:14:29 2014 +0000" }, "message": "Merge \"Support option for Keystone PKIZ token provider\"" }, { "commit": "3561d7f9edc6dd0d00be097a78b83f38aa8cbf5f", "tree": "8025c7ada1e73ed26ada7e9bea9c000b112d0283", "parents": [ "7006105997a7d9264dde69b55d109f52cd4c015e" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@redhat.com", "time": "Wed May 21 17:18:43 2014 +1000" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@redhat.com", "time": "Mon Jun 16 15:16:48 2014 +1000" }, "message": "Use identity_uri instead of auth fragments\n\nauth_token middleware now accepts a standard URL string as the parameter\nidentity_uri instead of specifying protocol etc individually. Change the\nservices over to use this.\n\nAlso changes over some other places in which the auth fragments are used\nindividually to the new variables and fixes up some misconfigurations of\nauth_token.\n\nidentity_uri option was release in keystoneclient 0.8.0\n\nChange-Id: Iac13bc3d08c524a6a0f39cdfbc1009e2f5c45c2a\n" }, { "commit": "970ee9083e95fda7359ed1e25abc8bec0d4cde05", "tree": "1a6d5ebaf11d990e0f3fc0e12592dce27cc98958", "parents": [ "c1699c27d11b48b29eaba41ae4c74c5464414c79" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Mon Jun 09 12:07:29 2014 -0700" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Mon Jun 09 12:09:33 2014 -0700" }, "message": "Use apache2ctl after apache is installed.\n\nEnsure that apache2ctl is only called if apache2 is being used when\nsetting up Keystone. This patch corrects a case where apache2ctl\nis being called at the time lib/keystone is being sourced. This\nerror breaks attempts to deploy Keystone under apache unless\napache is already installed at the time stack.sh is run.\n\nChange-Id: I02d426438fa1246effd68c6bb3c3358910ed4c05\n" }, { "commit": "0b0cbd1378e82015f683bbb2f35824dad424bb42", "tree": "02f7957f3dd43a8317ddc6158d6a51cd5d9f8d30", "parents": [ "754c4408b3e1af671dd9cf4cadd2ec8c8a41482e" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Jun 06 10:55:42 2014 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Jun 06 10:55:42 2014 -0500" }, "message": "PKIZ is the default token provider\n\nKeystone changed the default token provider to PKIZ from PKI.\n\nChange-Id: I56b975383ded450308a8fe01908b6e5549e7cd74\n" }, { "commit": "754c4408b3e1af671dd9cf4cadd2ec8c8a41482e", "tree": "206487a1279ca23391e80324894340baaae3c53b", "parents": [ "ea937baee62378b118c09f42c16a44cc5e6a5fdd" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Jun 04 09:06:01 2014 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Jun 04 09:07:32 2014 -0500" }, "message": "Support option for Keystone PKIZ token provider\n\nKeystone added support for a compressed token provider, PKIZ. This\nchange adds support to devstack. Set the KEYSTONE_TOKEN_FORMAT\noption to \"PKIZ\" to configure Keystone to use it.\n\nChange-Id: I123eef661c85cc805e950f1179b48e885078d40f\n" }, { "commit": "a688bc65104e7d8998ffdb321d67a9f33df6997e", "tree": "37bbb8cb4ee95e617a04461e9fe311ab0536d72f", "parents": [ "ced4ba63cdbc727207d18104c123b3511b35cb68" ], "author": { "name": "Gabriel Assis Bezerra", "email": "gabrielb@lsd.ufcg.edu.br", "time": "Tue May 27 20:58:22 2014 +0000" }, "committer": { "name": "Gabriel Assis Bezerra", "email": "gabrielb@lsd.ufcg.edu.br", "time": "Fri May 30 12:07:24 2014 +0000" }, "message": "Fix the way Apache site configuration files are used, to improve OS portability\n\nOn Ubuntu 14.04, the site configuration file must have a .conf suffix for a2ensite and a2dissite to\nrecognise it. a2ensite and a2dissite ignore the .conf suffix used as parameter. The default sites\u0027\nfiles are 000-default.conf and default-ssl.conf.\n\nOn Ubuntu 12.04, the site configuration file may have any format, as long as it is in\n/etc/apache2/sites-available/. a2ensite and a2dissite need the entire file name to work. The default\nsites\u0027 files are default and default-ssl.\n\nOn Fedora, any file in /etc/httpd/conf.d/ whose name ends with .conf is enabled.\n\nOn RHEL and CentOS, things should hopefully work as in Fedora.\n\nThis change puts all distribution-related site configuration file name differences in lib/apache and\nthe other services gets the file name for its sites using the new exported function\napache_site_config_for \u003csitename\u003e.\n\nIt also makes Fedora disabled sites use the .conf.disabled suffix instead of removing the .conf from\nthe file name.\n\nThe table below summarizes what should happen on each distribution:\n+----------------------+--------------------+--------------------------+--------------------------+\n| Distribution | File name | Site enabling command | Site disabling command |\n+----------------------+--------------------+--------------------------+--------------------------+\n| Ubuntu 12.04 | site | a2ensite site | a2dissite site |\n| Ubuntu 14.04 | site.conf | a2ensite site | a2dissite site |\n| Fedora, RHEL, CentOS | site.conf.disabled | mv site.conf{.disabled,} | mv site.conf{,.disabled} |\n+----------------------+--------------------+--------------------------+--------------------------+\n\nChange-Id: Ia2ba3cb7caccb6e9b65380f9d51d9d21180b894e\nCloses-bug: #1313765\n" }, { "commit": "1bb05a96316e3bd4069d30e91a3588340aa71edf", "tree": "fed9a63cb9543122ce69e49a64ab828eea59c516", "parents": [ "9d229e499ed34a736e281f299211ea984aaed814", "2c2b1cccc93771dfaa5a520c9d9634e5af47a55e" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue May 06 11:36:02 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue May 06 11:36:02 2014 +0000" }, "message": "Merge \"Fix logging for keystone under mod_wsgi\"" }, { "commit": "c11d6e0b09af41a9de62c274b45c8481ba6035a1", "tree": "42f49d0bc83d6427e068c4b057404c27b184feba", "parents": [ "020d8611d504684c84bd76f9dbbd214f45d1e515" ], "author": { "name": "Morgan Fainberg", "email": "m@metacloud.com", "time": "Thu May 01 22:57:06 2014 -0700" }, "committer": { "name": "Morgan Fainberg", "email": "m@metacloud.com", "time": "Thu May 01 22:57:06 2014 -0700" }, "message": "Cleanup WSGI config for keystone on stop\n\nEnsure that the VHOST and the scripts used to enable keystone under\nmod_wsgi are properly cleaned up.\n\nChange-Id: I76a748b0fd5f1a5182d10e425202857c5621e25a\n" }, { "commit": "2c2b1cccc93771dfaa5a520c9d9634e5af47a55e", "tree": "2e0f62c37b82a75b1a83c13e15ad12167d064f3c", "parents": [ "020d8611d504684c84bd76f9dbbd214f45d1e515" ], "author": { "name": "Morgan Fainberg", "email": "m@metacloud.com", "time": "Thu May 01 22:05:41 2014 -0700" }, "committer": { "name": "Morgan Fainberg", "email": "m@metacloud.com", "time": "Fri May 02 05:12:21 2014 +0000" }, "message": "Fix logging for keystone under mod_wsgi\n\nWhen Keystone is configured under mod_wsgi, Keystone configuration \nrequires debugging to be enabled as the debug flag cannot be passed\nvia cli arguments.\n\nBecause Apache 2.2 (default for a number of distributions) does not \nsupport passing an explicit format to the ErrorLog, Keystone under \nmod_wsgi ends up with duplicated timestamps in the Keystone log. \nThis patchset eliminates the %(asctime) and %(msecs) substitution \ntargets from the log format options when Keystone is configured \nunder mod_wsgi.\n\nChange-Id: I0bf32db6e53cb653921162cb1957eb988b819815\n" }, { "commit": "42a59c2bfae69eca5520748d6b45803a387fdb88", "tree": "5dcf4b9b5db925fb9f354a987917b23901a020f2", "parents": [ "c880fb41b05d94d7c9b5d3acca5ded9a13f14c66" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Mon Mar 03 14:31:29 2014 -0600" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Mon Mar 10 15:17:30 2014 -0500" }, "message": "Complete moving Keystone setup out of keystone_data.sh\n\n* Move remaining role creation to create_keystone_accounts()\n* Move glance creation to create_glance_accounts()\n* Move nova/ec2/s3 creation to create_nova_accounts()\n* Move ceilometer creation to create_ceilometer_accounts()\n* Move tempest creation to create_tempest_accounts()\n* Convert moved code to use OpenStackClient for setup\n* files/keystone_data.sh is removed\n\nNote that the SERVICE_TENANT and ADMIN_ROLE lookups in the other service\nimplementations are not necessary with OSC, all operations can be done\nusing names rather than requiring IDs.\n\nChange-Id: I4283ca0036ae39fd44ed2eed834b69d78e4f8257\n" }, { "commit": "dad6e4114d07978ade5ab5594d4b5b19e998bdb5", "tree": "9c867402960f933ca6384a2b87d75ec954f9eba8", "parents": [ "4b76faa32b21964dc72a055f65172199618edeee", "aee18c749b0e3a1a3a6907a33db76ae83b8d41d9" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Feb 28 06:32:20 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Feb 28 06:32:20 2014 +0000" }, "message": "Merge \"Enforce function declaration format in bash8\"" }, { "commit": "3ac259c6856b0f8f7fb24b987f83868c86517396", "tree": "585ca33037822a8ff503143a2a02c44ba733b58b", "parents": [ "c7adccb548dd9e0be523f0071c9a8c3738367994", "041fa712472d887550a540dd50ade546f847c6b4" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Feb 27 23:41:11 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Feb 27 23:41:11 2014 +0000" }, "message": "Merge \"Make admin_bind_host configurable\"" }, { "commit": "aee18c749b0e3a1a3a6907a33db76ae83b8d41d9", "tree": "01a8ab5abb9867986f3e848918abd9e749b691cd", "parents": [ "0ed4af02da0bd4a0f757dd8c2156913e6c7a724c" ], "author": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Fri Feb 21 15:35:08 2014 +1100" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Fri Feb 28 07:59:03 2014 +1100" }, "message": "Enforce function declaration format in bash8\n\nCheck that function calls look like ^function foo {$ in bash8, and fix\nall existing failures of that check. Add a note to HACKING.rst\n\nChange-Id: Ic19eecb39e0b20273d1bcd551a42fe400d54e938\n" }, { "commit": "06ba5193bebe27b2d7ead2d31ed9171885c6a5d8", "tree": "fdcc879f9674664c772454800d73672876045a28", "parents": [ "339ec177310509378365f0ed53b0521a6ff6e943" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@redhat.com", "time": "Wed Feb 26 13:46:56 2014 +1000" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@redhat.com", "time": "Wed Feb 26 13:46:56 2014 +1000" }, "message": "Insecure check if keystone is up\n\nIf we start keystone with an SSL endpoint then the curl check to see if\nit is running will fail because it cannot create a secure connection.\nThis check can be done insecurely as all we care about is that the\nservice has started.\n\nChange-Id: I826753d4d46e9956f443110029346bc70282951a\n" }, { "commit": "041fa712472d887550a540dd50ade546f847c6b4", "tree": "a990106adfe217f99fd94f60af0cbf1067fcff6a", "parents": [ "92558b8f5ec1cb9d25e5aa7a7cb65e06e6bcb67d" ], "author": { "name": "David Kranz", "email": "dkranz@redhat.com", "time": "Mon Feb 24 13:30:59 2014 -0500" }, "committer": { "name": "David Kranz", "email": "dkranz@redhat.com", "time": "Mon Feb 24 13:43:23 2014 -0500" }, "message": "Make admin_bind_host configurable\n\nThe use case is running devstack inside an OpenStack vm and running tempest\nfrom some other machine. To make the catalog export urls that can be accessed\nfrom off the devstack machine, you need to set KEYSTONE_SERVICE_HOST to an\nexternal IP. But devstack uses that address in its setup of keystone in\naddition to exporting in the catalog. Because OpenStack has an issue where\na vm cannot access itself through its own floating ip, devstack fails. There\nis no way to have this use case by providing an ip address. The workaround\nis to use the hostname of the devstack machine. That worked until recently\nwhen a change was made to set admin_bind_host to the value of\nKEYSTONE_SERVICE_HOST. The result is that port 35357 is only opened locally.\nThis change allows the devstack user to restore the original behavior\nallowing this use case.\n\nChange-Id: I97b938b305b7dd878397e7e64462650064e59cd2\nCloses-Bug: #1283803\n" }, { "commit": "d85e1ea66902c020b2e5761ae7e43738185f501f", "tree": "6f6ec0df0a35b7c8500238407eacaf694be82d7f", "parents": [ "5a6581f6cf006f5840115b6cd48dbf69632742e9", "16d3ad057dc0b982c801fcfa9d5497c1daeb34cd" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Feb 17 01:52:49 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Feb 17 01:52:49 2014 +0000" }, "message": "Merge \"Use database connection for keystone\"" }, { "commit": "19685428e3d3e51ff88aa5254f7c27d476053798", "tree": "dac1d9632b47c4e9fbc176a9ea92d92e4db27e10", "parents": [ "824fac2cc740fa83086ac65ff8a5657eafbc1166" ], "author": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Fri Jan 24 13:02:26 2014 -0600" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Fri Feb 14 21:30:57 2014 -0600" }, "message": "Change most keystoneclient commands to openstacklient in libs\n\nmigrated most keystoneclient commands from the following libs:\n ceilometer\n cinder\n ironic\n keystone\n marconi\n neutron\n nova\n savanna\n swift\n trove\n\nAlso need to set and unset openstackclient specific environment\nvariables from stack.sh\n\nChange-Id: I725f30bc08e1df5a4c5770576c19ad1ddaeb843a\n" }, { "commit": "16d3ad057dc0b982c801fcfa9d5497c1daeb34cd", "tree": "f26c77468b195fb3e968d0fdaddabdc3bd813450", "parents": [ "305bad78875b76e17eec68ce247b2366a07c2fc2" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Feb 13 18:59:50 2014 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Feb 13 18:59:50 2014 -0600" }, "message": "Use database connection for keystone\n\nThe keystone configuration used the \u0027connection\u0027 option in the\n\u0027sql\u0027 section of the keystone.conf file. This option is deprecated\nin favor of \u0027connection\u0027 in the \u0027database\u0027 section.\n\nThe keystone setup code is changed to use the option in the new\nsection rather than the deprecated one.\n\nChange-Id: I62fd2f50ded3b8848e9e5225e88c80ed8fed3bff\n" }, { "commit": "6c57fbab26e40af5c5b19b46fb3da39341f34dab", "tree": "4bf9b6b2bd3afcfc40857ffd712592975a42a273", "parents": [ "4b9833bca5252b50b98477c240f4be97ede71f6c" ], "author": { "name": "Clark Boylan", "email": "clark.boylan@gmail.com", "time": "Wed Nov 20 17:00:21 2013 -0800" }, "committer": { "name": "Joe Gordon", "email": "joe.gordon0@gmail.com", "time": "Wed Jan 29 17:48:28 2014 -0800" }, "message": "Set keystone admin_bind_host to KEYSTONE_SERVICE_HOST\n\nOn Linux ports 32768-61000 can be used by just about\nanything needing a socket. Keystone\u0027s IANA assigned port is 35357.\nOccasionally something else will be using port 35357 first because Linux\nallows this. Workaround is to bind to port 127.0.0.1 instead of 0.0.0.0.\n$KEYSTONE_SERVICE_HOST gets its value from $SERVICE_HOST which is set to\n127.0.0.1 in the gate.\n\n\"Ephemeral (client) ports will *never* be sourced from 0.0.0.0, and are\nuniquely identified by the full connection five-tuple (proto, src IP,\nsrc port, dst IP, dst port) anyway, allowing them to overlap src IP/src\nport as long as proto/dst IP/dst port are different. Thus it is up to\nkeystone/devstack to bind more appropriately and not use wildcard bind\naddresses unless explicitly necessary for some reason. For example, in\nthe log output, the URLs are configured with dst IPs of 127.0.0.1\nanyway, so binding explicitly to localhost would change nothing, while\nskirting this particular edge case nicely.\" ~Evan Callicoat\n\nThis doesn\u0027t fix bug 1253482 it works around it while a better solution\nis prepared (running keystone behind apache in devstack).\n\nCo-Authored-By: Joe Gordon \u003cjoe.gordon0@gmail.com\u003e\nChange-Id: I112309661dadf8b753c3311182f82464d9d3595e\nRelated-bug: #1253482\n" }, { "commit": "00eb27bb5a991e5c03f9e2f8f818f63e5437c2ac", "tree": "7ecaa733def32359250debb13f71f04c3a542caa", "parents": [ "d1b5e5a6fd5077c5d1a06c332b1d3675bfa6e697", "4968d1ad5d8d6b0537c68548eb5f8c08bc33f63a" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Jan 25 18:40:53 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jan 25 18:40:53 2014 +0000" }, "message": "Merge \"Keystone use common logging setup\"" }, { "commit": "4968d1ad5d8d6b0537c68548eb5f8c08bc33f63a", "tree": "c35faa596553f29b406f4d31dcc66ced446d1771", "parents": [ "6d323f43b499482765438a964ac11874d4af3aec" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Jan 22 19:06:44 2014 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Jan 22 19:06:44 2014 -0600" }, "message": "Keystone use common logging setup\n\nThe Keystone setup was using logging.conf to configure logging,\nunlike other projects. This may have been left over from before\nKeystone switched to oslo logging.\n\nSwitching to common logging configuration allows:\n- Common format for logs for easier parsing\n- Pretty colorized logs\n- Keystone can control the default logging levels for libraries\n that are used by setting the defaults in keystone.\n- Potentially using a function to setup logging for all components\n using oslo-logging (e.g., share with lib/nova).\n\nChange-Id: I4e9b1e6cffce30f16a1e039224312852b8abda07\nCloses-Bug: #1271775\nCloses-Bug: #1269987\n" }, { "commit": "0049c0c434b4672963b6622486c6c638259bdfda", "tree": "f53f60fac16cdd4f385dfb95d6dc91bfa8233a81", "parents": [ "5eec5b6b80401842ad1f7275d9c7a6949cc6f848" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Jan 16 18:16:48 2014 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Jan 16 18:16:48 2014 -0600" }, "message": "Make unstack.sh more like stack.sh\n\nunstack.sh and stack.sh both have to \"configure projects\", but the\ncode was different. This change makes it so the 2 sections of the\nfiles are the same.\n\nChange-Id: Ia06f8bbfbe2a6e87fb406e34e13a39bd7fa9e5af\n" }, { "commit": "5eec5b6b80401842ad1f7275d9c7a6949cc6f848", "tree": "9c83a780d05d34be9af866dff6de27fd73c93cef", "parents": [ "b200b1d4dda4e60bacd921f98e4e47d5b4f046d9" ], "author": { "name": "Gordon Chung", "email": "chungg@ca.ibm.com", "time": "Tue Jan 14 11:05:31 2014 -0500" }, "committer": { "name": "Gordon Chung", "email": "chungg@ca.ibm.com", "time": "Tue Jan 14 11:23:39 2014 -0500" }, "message": "command not found errors on unstack\n\n- add lib/ceilometer and lib/heat to source list for when stop_heat\nand stop_ceilometer functions are called.\n- add lib/tls source to lib/keystone for when is_ssl_enabled_service\nfunction called.\n\nChange-Id: Ief05766e9cfda71fb6392c8a757d04751283414e\nCloses-Bug: #1269047\n" }, { "commit": "3e98388d0716d6eb5da446e5ea5e7f60b50f17a7", "tree": "4d121eebb1381900a4ec89b266ea26003861bf19", "parents": [ "babcfa9ad2d6659214e730f2c7a2569046698f7e", "9fc8792b0ac7525b4c353b0a55b8b80eabf76e2a" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Jan 13 14:09:44 2014 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Jan 13 14:09:44 2014 +0000" }, "message": "Merge \"Robustify service shutdown\"" }, { "commit": "9fc8792b0ac7525b4c353b0a55b8b80eabf76e2a", "tree": "63db600410e41a8d2e617a735727a31f7254d083", "parents": [ "c8c0ead4cacc512e78be66c11ce98fa22fb77a64" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Wed May 22 17:19:06 2013 -0500" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Sat Jan 11 11:46:19 2014 -0600" }, "message": "Robustify service shutdown\n\n* Save PID when using screen in screen_it()\n* Add screen_stop()\n* Call out service stop_*() in unstack.sh functions so screen_stop()\n can do its thing\n\nCloses-bug: 1183449\nChange-Id: Iac84231cfda960c4197de5b6e8ba6eb19225169a\n" }, { "commit": "21fe4e76d5453a252e802c5d5f487f88b896decf", "tree": "428f12097d21f93d6a40a3b4b0e387b098768fa0", "parents": [ "0150d7eb2a160635a47a626f7c9968a8e0dc0254" ], "author": { "name": "Vincent Hou", "email": "sbhou@cn.ibm.com", "time": "Thu Nov 21 03:10:27 2013 -0500" }, "committer": { "name": "Vincent Hou", "email": "sbhou@cn.ibm.com", "time": "Mon Jan 06 01:22:57 2014 -0500" }, "message": "Add a flexible API version choice for Cinder, Glance and Heat\n\nThe version of the authentication url is set to v1.0 for some\nprojects by default. We can make it configurable via the parameter\n\"$IDENTITY_API_VERSION\".\n\nCloses-Bug: #1253539\nChange-Id: I6640e345d1317b1308403c95b13f8a998320241b\n" }, { "commit": "055cdee2bf4582e39fa91b96de745783850f082d", "tree": "862406e08bea9a8287cdc3575f5cd967c28d1088", "parents": [ "7f285840dda144088908b3d274d431d9a3a42bae" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Dec 13 13:51:25 2013 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Dec 13 14:01:46 2013 -0600" }, "message": "Remove duplicate debug option from keystone-all\n\nThe keystone server was started with the options like\n\n keystone-all ... -d --debug ...\n\nThe -d and --debug options are the same so one of them is\nredundant.\n\nThis will make it less confusing if someone removes --debug and\nthinks that debug is off, but debug is still on because they\ndidn\u0027t notice there was an extra -d.\n\nChange-Id: I1ac977e6b12f1cc44f02b636c1bfb5c115b5b3e4\n" }, { "commit": "271f38b313d031ca905b1d55459471820af70a71", "tree": "15fe9ffd54e7e1e1a12b3f8bf07eac1f5d20c79c", "parents": [ "3422668612f667ef3b8b04999562e0206dd07424", "b9e25135c51ee29edbdf48d41e1cb637188cc358" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Dec 06 13:24:17 2013 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Dec 06 13:24:17 2013 +0000" }, "message": "Merge \"freshen the LDAP support\"" }, { "commit": "bddaf0afb6651d6245bae589532aa1d364321bb7", "tree": "78a7c46cabdc7a62c9c60a569c66d3a5d7cb7777", "parents": [ "8097838ab1221358da274c1d8d6f1c238e71a037", "bd24a8d0f884d27f47834c917c047b54271c1179" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Dec 04 05:36:40 2013 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Dec 04 05:36:40 2013 +0000" }, "message": "Merge \"Allow deploying keystone with SSL certificates\"" }, { "commit": "b9e25135c51ee29edbdf48d41e1cb637188cc358", "tree": "6883f821badebe73d3c9521ad9b7ea1dea50fa8b", "parents": [ "298f7d48432b6590da118551308359da56bd5cf7" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Tue Oct 01 14:45:04 2013 -0500" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Tue Nov 26 11:28:54 2013 -0600" }, "message": "freshen the LDAP support\n\n* Build the base DN from a given domain name\n* Remove all hard-coded names to allow configuration of base DN\n* Fix manager DN (cn\u003dManager,dc\u003d...)\n* Add ldap init_ldap()\n* Add support for clean.sh\n\nChange-Id: Ieb69be9740653645b8e000574ad3fe59a0f97540\n" }, { "commit": "298f7d48432b6590da118551308359da56bd5cf7", "tree": "001fa5018f7b9159e361c6d87ad43ea422cb6f1f", "parents": [ "5221163125f343e6934e5fdca9c64dede4e14fdd", "61ae7c166c59f6dae28e9f9437cfe4468c600808" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Nov 26 14:46:17 2013 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Nov 26 14:46:17 2013 +0000" }, "message": "Merge \"support memcache for keystone token backend\"" }, { "commit": "bd24a8d0f884d27f47834c917c047b54271c1179", "tree": "a2fc27d5b90c224c65283dc6bb87cb563d8c4eca", "parents": [ "99da4af55ef0c451983bcc5d7f97e1e22da168ea" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@redhat.com", "time": "Fri Sep 20 16:26:42 2013 +1000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Nov 25 22:27:51 2013 +0000" }, "message": "Allow deploying keystone with SSL certificates\n\nAllow providing certificates through environment variables to be used\nfor keystone, and provide the basis for doing this for other services.\nIt cannot be used in conjunction with tls-proxy as the service provides\nit\u0027s own encrypted endpoint.\n\nImpletmenting: blueprint devstack-https\nChange-Id: I8cf4c9c8c8a6911ae56ebcd14600a9d24cca99a0\n" }, { "commit": "f653419b15d244fa7e01a101de93174d282185ed", "tree": "4f3e9eccc3addc4a3a5fd1139cf3258cb1225750", "parents": [ "c85ac787ba43115a3f47416470ef16e21ad20caf" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Nov 17 13:03:52 2013 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Nov 17 13:03:52 2013 -0600" }, "message": "Keystone don\u0027t use deprecated token_format option\n\ndevstack was setting the token_format option in the keystone\nconfiguration file. This option is deprecated so should not be\nused.\n\nChange-Id: I047de155f0d9d2a1c009533c2f97f505cc80c6de\n" }, { "commit": "61ae7c166c59f6dae28e9f9437cfe4468c600808", "tree": "43348226bf7dcae381926d1752eb162dea6d94e2", "parents": [ "0a57ae989970db602858337675f8d4e14f16db9a" ], "author": { "name": "Peter Feiner", "email": "peter@gridcentric.ca", "time": "Fri Nov 15 10:42:30 2013 -0500" }, "committer": { "name": "Peter Feiner", "email": "peter@gridcentric.ca", "time": "Fri Nov 15 14:39:30 2013 -0500" }, "message": "support memcache for keystone token backend\n\nChange-Id: I0c85a64932c39264b73cff4f9d952d0dbdf49e5b\n" }, { "commit": "d561b70930f7184ade05953faa11a47dc250a16c", "tree": "8871b77a1684bc0f4b441769526cff36510dcf8c", "parents": [ "7751354b44bc3ce286142d588d18ec919a5e4eff" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Tue Oct 22 17:46:00 2013 -0500" }, "committer": { "name": "Sean Dague", "email": "sdague@linux.vnet.ibm.com", "time": "Fri Nov 01 13:49:39 2013 -0400" }, "message": "Set keystone.conf to mode 0600\n\nSet keystone.conf readable only by owner\nFixes CVE-2013-1977\n\nFixed bug: 1168252\n\nChange-Id: Idd13b7a58e257565052c54f72c65d8dceb23f27a\n" }, { "commit": "6a5aa7c6a20435bbd276a0f1823396b52a8f0daf", "tree": "d5137f132a359469f1225d61850466feb4658297", "parents": [ "cb961597cc30f9d8ece17529f09a8291454827e3" ], "author": { "name": "Adam Spiers", "email": "aspiers@suse.com", "time": "Thu Oct 24 11:27:02 2013 +0100" }, "committer": { "name": "Adam Spiers", "email": "aspiers@suse.com", "time": "Thu Oct 24 17:38:19 2013 +0100" }, "message": "Fix some Markdown formatting issues\n\nAddress miscellaneous issues with Markdown formatting in comments which\nare consumed by shocco when generating the online documentation.\n\nChange-Id: I953075cdbddbf1f119c6c7e35f039e2e54b79078\n" }, { "commit": "101b4248428b4c3d7757e15ff4e19d3b4f85a51f", "tree": "9ca8a80539cfdda81b2ded7b651a9228ad09a664", "parents": [ "3bdb922c4054a55f03b3db94721997e52415e76d" ], "author": { "name": "Sean Dague", "email": "sdague@linux.vnet.ibm.com", "time": "Tue Oct 22 08:47:11 2013 -0400" }, "committer": { "name": "Sean Dague", "email": "sdague@linux.vnet.ibm.com", "time": "Tue Oct 22 13:02:23 2013 -0400" }, "message": "fix whitespace in the rest of lib/*\n\nthis brings this in line with bash8 checker\n\nChange-Id: Ib34a2292dd5bc259069457461041ec9cd4fd2957\n" }, { "commit": "0aa8534ada621becb3a6bd14e4e6b5faabde9dd6", "tree": "71cea861042be2f5d2e415889ff782b1b68da513", "parents": [ "b48e00816984cee78b3e9be5cce000eba5b42ab0" ], "author": { "name": "JUN JIE NAN", "email": "nanjj@cn.ibm.com", "time": "Fri Sep 13 15:47:09 2013 +0800" }, "committer": { "name": "JUN JIE NAN", "email": "nanjj@cn.ibm.com", "time": "Mon Sep 30 16:03:00 2013 +0800" }, "message": "Using no proxy option to skip wget and curl proxy settings in config\n\nWhen end users specify proxy settings in config file for wget /etc/wgetrc:\nhttp_proxy \u003d http://...\nor for curl ${HOME}/.curlrc:\nproxy \u003d http://...\n\nUsing `http_proxy\u003d\"\" wget\u0027 can not skip the proxy setting in the\nconfig files, also it can skip proxy settings in env viriables.\n\nIn order to skip proxy setting in both env and config file, we pass\n--no-proxy option for wget, and --noproxy \u0027*\u0027 for curl.\n\nFixes bug #1224836\n\nChange-Id: I2b25aeca9edf2ce4525fb1db325e5e24c18b4d55\n" }, { "commit": "b48e00816984cee78b3e9be5cce000eba5b42ab0", "tree": "9cb00beb4cd1503ec0386f3dea05b54226b13f60", "parents": [ "6d6b1984b8faed2bf3edac45af6aaa4fd22a22a4", "2dc11fb5c843ccf057fac9e01cf6beca7d877421" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sun Sep 29 16:59:38 2013 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sun Sep 29 16:59:38 2013 +0000" }, "message": "Merge \"Update user_attribute_ignore for LDAP Identity config\"" }, { "commit": "2dc11fb5c843ccf057fac9e01cf6beca7d877421", "tree": "36f650755322a079df06955b9b13ea38585bb2dc", "parents": [ "23033e0399887a394f27c40482c2e011f37a3cdf" ], "author": { "name": "Morgan Fainberg", "email": "m@metacloud.com", "time": "Tue Sep 24 23:43:08 2013 -0700" }, "committer": { "name": "Morgan Fainberg", "email": "m@metacloud.com", "time": "Tue Sep 24 23:49:21 2013 -0700" }, "message": "Update user_attribute_ignore for LDAP Identity config\n\nWith a recent patch to keystone, the use of tenantId, tenant_id, and\ndefault_project_id was normalized to reference default_project_id for\nall cases internally and translate to the expected results at the\ncontroller (v2.0 returns tenantId, v3 returns default_project_id).\n\nDevstack must now properly ignore the expected mapped LDAP attribute\nof \u0027default_project_id\u0027 instead of the old \u0027tenantId\u0027. Without this\nfix devstack will fail when using the LDAP identity backend because\nthe \u0027default_project_id\u0027 has been made a special case that requires\nthe operator of a Openstack cloud to explicitly choose an attribute\nto map \u0027default_project_id\u0027 to if storing that value is desired.\nWithout explicitly mapping that attribute and not having it in the\n\u0027user_attribute_ignore\u0027 config option, the user_creates can fail.\n\nrelated-bug: 1219739\nChange-Id: I1dd3719de50f6d0948b3a9743e32a03d0ac56b3c\n" }, { "commit": "a00e5f8810b6ca3b0b5d63cc228125e19bc91955", "tree": "fb91d81e881a549a02877141ccccabf67ea4fef4", "parents": [ "5470701e10ee68c80860d4cf7e0fa5d8a913c288" ], "author": { "name": "Jamie Lennox", "email": "jlennox@redhat.com", "time": "Tue Sep 17 12:47:03 2013 +1000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Sep 24 01:14:28 2013 +0000" }, "message": "Allow keystone to run from apache\n\nProvide a template for running keystone as a mod_wsgi process and enable\nit from configuration.\n\nBased on: https://review.openstack.org/#/c/36474/\nAlso-by: zhang-hare \u003czhuadl@cn.ibm.com\u003e\nImplements: blueprint devstack-setup-apache-keystone\n\nChange-Id: Icc9d7ddfa4a488c08816ff4ae0b53c0134a1016b\n" }, { "commit": "cd77058ee0e974bd9bd7acaf8426ef24ea9a7a52", "tree": "20cd316772a32358295ae009767d5708a84523da", "parents": [ "ac369d68d83e3d567d4cfb19efeef34ba3d99430" ], "author": { "name": "Alex Rudenko", "email": "alexei.rudenko@gmail.com", "time": "Sun Sep 01 16:26:03 2013 +0200" }, "committer": { "name": "Alex Rudenko", "email": "alexei.rudenko@gmail.com", "time": "Wed Sep 11 19:39:57 2013 +0200" }, "message": "blueprint devstack-support-for-keystone-mixbackend\n\nAdded KEYSTONE_ASSIGNMENT_BACKEND to support mixed backend\n\nModified code for KEYSTONE_IDENTITY_BACKEND according to comments.\nImplemented the check for variables instead of case statements.\nUPD: Removed arrays.\nUPD2: fixed spacing issues\nChange-Id: Ie92eed1fb5be5f875ef6633ede9c9e08daf6bf4f\nImplements: devstack-support-for-keystone-mixbackend\n" }, { "commit": "f39ee96f1dc7fae9aaad194669467a7f9fcc3d31", "tree": "4e5bfb820a1c1d932fb533b10617fa82a5ae671d", "parents": [ "e45a6af7e8e86e6d95110a65083659ed924012c3" ], "author": { "name": "Jorge Valderrama Romero", "email": "jorge.valderrama@stackops.com", "time": "Mon Sep 02 17:18:40 2013 +0200" }, "committer": { "name": "Jorge Valderrama Romero", "email": "jorge.valderrama@stackops.com", "time": "Mon Sep 02 17:54:27 2013 +0200" }, "message": "Fix deprecated params user_id, role_id, tenant_id\n\nUpdate keystone cli by changing parameter options (user_id, role_id and tenant_id)\nto use \u0027-\u0027 rather than \u0027_\u0027 in the method user_role_add and consequently the method\nuser_role_remove without maintain backward compatibility because these are deprecated.\n\npython-keystoneclient - Bug #1150434\nChange-Id: Ia5113718eb050cf7dba443b8d0caf3bdaa1730f0\n" }, { "commit": "fac533e38db871631cee33d0e3c94884035851b8", "tree": "bce0599a9323304978240d11f45cab4a4576a522", "parents": [ "68044c0245e0d39cecbc8602a8059bd7c33b7693" ], "author": { "name": "Attila Fazekas", "email": "afazekas@redhat.com", "time": "Wed Aug 14 16:04:01 2013 +0200" }, "committer": { "name": "Attila Fazekas", "email": "afazekas@redhat.com", "time": "Thu Aug 22 05:54:29 2013 +0200" }, "message": "Configure bash completion\n\nAdd bash completion rules to the /etc/bash_completion.d from the\n cinder, neutron, keystone, nova and nova-manage.\n\nThis is very fast operation and makes the cli usage easier.\n\nChange-Id: Icdcdaf55d58efaaa1afe25fd55f088bf7dc8b3f1\n" }, { "commit": "3763141cf7763390bf35b86b2d143b156c25a915", "tree": "ff364e8361e43aa4a3614e63efd7864d20ce2ffc", "parents": [ "7e3efc6a338fa70ac8162f3eddf35eac05fd3a43" ], "author": { "name": "Sudarshan Acharya", "email": "info@sacharya.com", "time": "Tue Jul 16 00:47:54 2013 +0000" }, "committer": { "name": "Sudarshan Acharya", "email": "sudarshan.acharya@rackspace.com", "time": "Tue Jul 16 01:05:16 2013 +0000" }, "message": "UUID Token provider in keystone.conf\n\nToken provider needs to be set to uuid.Provider when the token format is\nUUID. PKI is the default.\n\nChange-Id: I967289524a50f650cdf2476d5067d263dbf55b03\nFixes: bug #1201639\n" }, { "commit": "53dde9efbba17f23ab7421440223085355496718", "tree": "55e62280278c8bbb669cf21cae0aecda350dd6d6", "parents": [ "ace58146d582b805e353952b3b48077500cbcc33", "245a431374183639962f1245002b4d19ccc54ec0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Jul 09 02:40:08 2013 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jul 09 02:40:08 2013 +0000" }, "message": "Merge \"Set the correct URLs in the version return data\"" }, { "commit": "ace58146d582b805e353952b3b48077500cbcc33", "tree": "c93358dacb78840ea23dd35923f9ec145293d7f4", "parents": [ "4ef0c719149291063e26faf5948451f7f73b8d71", "3005e17853416db571936e527c1288c4e27c3499" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Jul 09 02:38:33 2013 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Jul 09 02:38:33 2013 +0000" }, "message": "Merge \"Enable configuration of Identity API v3\"" }, { "commit": "b05c876994183b6a1d53dfbdcea2ca4a7743035f", "tree": "e5361481fe1ea3f96da5c9139034530bb35706a7", "parents": [ "0a03806e281d1f197e54d48318e4a7bba3eab77c" ], "author": { "name": "Mark McClain", "email": "mark.mcclain@dreamhost.com", "time": "Sat Jul 06 23:29:39 2013 -0400" }, "committer": { "name": "Mark McClain", "email": "mark.mcclain@dreamhost.com", "time": "Sun Jul 07 00:15:11 2013 -0400" }, "message": "update for name change to Neutron\n\nNote: Nova and Horizon are not updated until those projects have\nmigrated.\n\nChange-Id: I256ef20e7caadd9c96e6dd908c5d8b69ca5c4aeb\n" }, { "commit": "245a431374183639962f1245002b4d19ccc54ec0", "tree": "3cbc0161b8eb9c01f3121765361d091d2fa9a3a8", "parents": [ "53a683b91635158fcb17c6f2f37ebc8e66539010" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Fri Jun 28 09:16:08 2013 -0500" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Fri Jun 28 09:29:36 2013 -0500" }, "message": "Set the correct URLs in the version return data\n\nThe URLs advertised in the data returned by keystone\u0027s \u0027/\u0027 route default\nto localhost and is not usable from off-host. Not that anything in\nDevStack uses it (yet).\n\nChange-Id: I049789f568eff48c1abb0678c3ac0ae8a8960c64\n" }, { "commit": "3005e17853416db571936e527c1288c4e27c3499", "tree": "df4ea45d8d1fdf41295aaab4a5f5ffdd41600a18", "parents": [ "53a683b91635158fcb17c6f2f37ebc8e66539010" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Thu Jan 24 14:14:28 2013 -0600" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Fri Jun 28 09:02:20 2013 -0500" }, "message": "Enable configuration of Identity API v3\n\n* Default IDENTITY_API_VERSION to \u00272.0\u0027 in stackrc\n\nNote: the value of these *_API_VERSION variables will NOT include\nthe leading \u0027v\u0027 as the CLI tools do not allow it.\n\nChange-Id: Ic6473833be35625282e7442f3c88fc1c4d0cc134\n" }, { "commit": "1a6d4492e25365ec2947e93d5d69507088281415", "tree": "cb8e404347518a44d340ce65d413d1d454bf2b31", "parents": [ "f606adb4a85c29a85a0f8c1b6d4410a41163e166" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Mon Jun 03 16:47:36 2013 -0500" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Tue Jun 11 14:39:27 2013 -0500" }, "message": "Periodic formatting cleanup\n\nThis is the semi-irregular comment and docs cleanup.\n\nNo functional changes should be here although some code is moved in a\nsmall attempt to sort functions and get things where they need to be.\n\nChange-Id: Ib4a3e2590c6fbd016c391acc7aef6421e91c0dca\n" }, { "commit": "cc6b4435458b5db6aed17631e4789c43d21ee8e5", "tree": "a8460f062f571849a7a9a547c85771d625828b34", "parents": [ "2e75ff1a41e741ee77926a1262e1e9410701b4e1" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Mon Apr 08 15:38:03 2013 -0500" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Tue Apr 09 14:05:32 2013 -0500" }, "message": "Formatting cleanups, doc updates and whatnot\n\nChange-Id: Ica8298353be22f947c8e8a03d8dc29ded9cb26dd\n" }, { "commit": "1b4b4be78c5f1254bebfb58624d1ef8c2a09531f", "tree": "a43666c82de65d60b7c5b471f0733b9985429af6", "parents": [ "4bf9d7a74a076ddb11f76b948aae8718d8ec7448" ], "author": { "name": "Sean Dague", "email": "sdague@linux.vnet.ibm.com", "time": "Mon Apr 01 16:44:31 2013 -0400" }, "committer": { "name": "Sean Dague", "email": "sdague@linux.vnet.ibm.com", "time": "Mon Apr 01 16:44:31 2013 -0400" }, "message": "change configure/install split\n\nmake it so setup_develop happens in install instead of configure\nto ensure that we can handle config file generation by itself.\n\nChange-Id: I4801d7a0bc6642de2db5b78df1750666895f0aa3\n" }, { "commit": "584d90ec56e18cbb9c0f15fe6af35504c02ea4bd", "tree": "6d2027aed2ab0e2e44be06ce906c7083493aab3d", "parents": [ "a173376ea1b838d420384c2946b7e66859b6335b" ], "author": { "name": "Sean Dague", "email": "sdague@linux.vnet.ibm.com", "time": "Fri Mar 29 14:34:53 2013 -0400" }, "committer": { "name": "Sean Dague", "email": "sdague@linux.vnet.ibm.com", "time": "Fri Mar 29 14:36:49 2013 -0400" }, "message": "add emacs shell-script tagging\n\nfor files that don\u0027t start with a #! or end in .sh, the added tags\nare nice for emacs users to automatically switch to the right mode.\n\nChange-Id: If4b93e106191bc744ccad8420cef20e751cdf902\n" }, { "commit": "b7490da972c673960c800e3803c2a568bb7a43b6", "tree": "2b74409ecd10fa0dae982aea300ddb537ecf80af", "parents": [ "71404ed5a45fe8fa2b3882c9d633da1bdb94f7b2" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Mon Mar 18 16:07:56 2013 -0500" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Wed Mar 20 17:04:23 2013 -0500" }, "message": "Clean up stack.sh config\n\n* Clean up interactive configuration\n* Complete moving initialization of service-specific varialbes into the\n service lib/* files.\n* Cosmetic cleanups\n\nChange-Id: Iea14359bd224dd5533201d4c7cb1437d5382c4d1\n" }, { "commit": "08fd641a19e44d8a58f20a0a309eea0eb5ac1cab", "tree": "3f0797803596b4e8d26f347e1a49879b8a4e2e80", "parents": [ "4f620187a684b40c385a60f5b4470152e49efcae", "0c3a5584c6631c3e67682d76bd5a9d3b4628c7f5" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Mar 15 14:41:54 2013 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Mar 15 14:41:54 2013 +0000" }, "message": "Merge \"Enable swift by default.\"" }, { "commit": "e7f0c7be6dae72970610a25f714dbb77e781ef2c", "tree": "860a2022d50d274c2fc6ea660958acb9e7c2ebe2", "parents": [ "ee00b9298790ff5bf2fc59610b59568c09c93264", "e0bb447244cebb86adde5617d67c8ba828f661fb" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Mar 14 23:08:06 2013 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Mar 14 23:08:06 2013 +0000" }, "message": "Merge \"Support for separate Keystone paste.deploy configuration\"" } ], "next": "820467f20f19c9254afa0425fd77c646b9c732e9" }