)]}' { "log": [ { "commit": "fe628b9fb2e9511e78a7dc6883fa1d4766413a54", "tree": "f5be936239991249aeda4e5b908146498bea8ad3", "parents": [ "f99d1771ba1882dfbb69186212a197edae3ef02c" ], "author": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Tue Apr 17 17:01:46 2018 +0000" }, "committer": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Fri Apr 20 02:13:14 2018 +0000" }, "message": "Remove the sample configuration file for keystone\n\nThis commit just makes sure that the configuration file for keystone\nexists on the system. We use iniset to actually populate the values\nwe want before we run keystone anyway.\n\nThis results in a cleaner configuration file that isn\u0027t bloated with\ncomments and help text.\n\nChange-Id: I7a1f879e9e242a11e2c4663ec116e33da28db7f5\n" }, { "commit": "1f82f43016f5e3c51560c8b7c0b9c07350731f6c", "tree": "e45f2a765f82e271586c2ae2578436310092ea80", "parents": [ "888033483807de036cc97840315b7ce9a04ca169" ], "author": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Wed Oct 04 09:51:02 2017 +1100" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Wed Oct 04 09:54:43 2017 +1100" }, "message": "Revert \"Remove cache dirs from the services\"\n\nThis reverts commit ef5ebed6c9ca3d9d47fd2a732a1542555a0f65ba.\n\nThe problem here is a backwards-incompatible change to\nconfigure_auth_token_middleware. Plugins are still passing a\n\"signing_dir\" which is interpreted now as the \"section\" argument\n... this leads to an interesting red-herring issue; because \"v\" is a\ngnu sed command for checking the version, a signing_dir of \"/var/...\"\n(as done in most plugins) gives the weird error:\n\n sed: -e expression #1, char 32: expected newer version of sed\n\nI think we\u0027ll either need a new function, or dummy arguments to get\nthis back in.\n\nChange-Id: I2098d4eb2747282622cf486fa7dbf216f932f58b\n" }, { "commit": "ef5ebed6c9ca3d9d47fd2a732a1542555a0f65ba", "tree": "8aabc7d2def8f3a71f6efddf37183ef282b47a19", "parents": [ "e8190c414e21b7d7f93eb9a3eeea3463f553a300" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Mon Sep 25 09:38:38 2017 +1000" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Sep 26 10:10:11 2017 +1000" }, "message": "Remove cache dirs from the services\n\nPKI tokens have been actively deprecated from keystone and there are\ndeprecations being emitted from keystonemiddleware. Because of this we\nno longer need an auth cache directory in the services where the PKI\ncertifcates used to be stored.\n\nRemove the creation and use of all these AUTH_CACHE directories.\n\nChange-Id: I5680376e70e74882e9fdb87ee1b95d5f40570ad7\n" }, { "commit": "2ede133ed766e2b51de04e421183e5e5254537fb", "tree": "3f3b24d785958c7d7958917f71e27b1477358c24", "parents": [ "5f348dace5001980426e158b99280041e46f3acb", "b2330c89196c65662fcf98a2295b7e41b1652b28" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 25 13:37:24 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 25 13:37:24 2017 +0000" }, "message": "Merge \"Fix memcached_servers setting\"" }, { "commit": "b2330c89196c65662fcf98a2295b7e41b1652b28", "tree": "1a6e1c18c3022fb756a1e623e0253e206c870482", "parents": [ "6c87f363a1255270a3711b3fe7a065cc693164b9" ], "author": { "name": "Jens Harbott", "email": "j.harbott@x-ion.de", "time": "Tue Sep 19 09:10:21 2017 +0000" }, "committer": { "name": "Jens Harbott", "email": "j.harbott@x-ion.de", "time": "Tue Sep 19 17:45:29 2017 +0000" }, "message": "Fix memcached_servers setting\n\nBy default memcached is bound to 127.0.0.1 and we have no code in place\nto change that. So instead of using the $SERVICE_HOST variable, we\nhardcode it to localhost, just as we do for the cache settings, see [1].\n\nThis also avoids a bug that occurs when $SERVICE_HOST contains an IPv6\naddress, as in that case it would have to be prefixed by \"inet6:\" [2].\n\n[1] I95d798d122e2a95e27eb1d2c4e786c3cd844440b\n[2] https://bugs.launchpad.net/swift/+bug/1610064\n\nChange-Id: I46bed8a048f4b0d669dfc65b28ddeb36963553e0\nPartial-Bug: 1656329\n" }, { "commit": "86bdfffbe0ac887ccf5a027caedf02837262a081", "tree": "1bd850a154873f65ad416aa53019b9313911def3", "parents": [ "fe91455e7d671a515920a973b5e77f56ffdab6ef", "0eebeb415ada3437b598d0ceb6952dc7ad9134d9" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Sep 19 13:23:02 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Sep 19 13:23:02 2017 +0000" }, "message": "Merge \"clean up screen and tail_log references\"" }, { "commit": "a6280e551b1a1d277411e8fa75e6ddd41dc76b79", "tree": "bd02e3d4030c5ff3332f4d430ee80889eecea02b", "parents": [ "f524ef79bed81c7f0c5bf0e6020e53db1c77b8f0", "63962fbbe41fe966df96fe2e1bb30943e7ae4047" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sun Sep 10 18:31:06 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sun Sep 10 18:31:06 2017 +0000" }, "message": "Merge \"Remove keystone configs for ldap read/write\"" }, { "commit": "b9e368b9f60778bef0c6ddea122ca020a1f760b1", "tree": "97dda8e91c5677ec95bed8c0dea32a2e4b81ab43", "parents": [ "bd054c58de81cfcf87df2ab35a55711582c915dc", "aceb27e858b594ae80bf07bb0278a715e5a4cd3b" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Sep 06 01:26:55 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Sep 06 01:26:55 2017 +0000" }, "message": "Merge \"Add procname for uwsgi based services\"" }, { "commit": "0eebeb415ada3437b598d0ceb6952dc7ad9134d9", "tree": "c14ecf238bd797caca6535240a5e13b34a818c1f", "parents": [ "cdba1b371628aa0e8bc5b687351c5ee9b39e9bc6" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Aug 30 14:16:58 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Fri Sep 01 15:08:17 2017 -0400" }, "message": "clean up screen and tail_log references\n\nChange-Id: I6bcfa09931ed1f70e071ccb16688c15c7ef2898f\n" }, { "commit": "aa33c878d8da59369aed737cb636b628a1f444bb", "tree": "22f3fa7bddd92b3543c9ad6a9d15d0882a63885b", "parents": [ "644a6b9f106507ebc6fd49c51f0c5f6abfaa97fb" ], "author": { "name": "Davanum Srinivas", "email": "davanum@gmail.com", "time": "Wed Aug 16 22:51:07 2017 -0400" }, "committer": { "name": "Davanum Srinivas", "email": "davanum@gmail.com", "time": "Thu Aug 17 10:40:38 2017 -0400" }, "message": "Fix Cleanups for keystone/placement/nova\n\n* Check KEYSTONE_DEPLOY flag and cleanup appropriately\n* When we stop process, we should not wipe uwsgi config we should\n remove files only on cleanup\n* We should not call cleanup *BEFORE* configure, we are just wiping\n out the uwsgi ini files\n* cleanup_placement should be called from clean.sh\n\nChange-Id: I066f5f87ff22d7da2e3814f8c2de75f2af625d2b\n" }, { "commit": "aceb27e858b594ae80bf07bb0278a715e5a4cd3b", "tree": "46481a63b2e7fdf2b196e897892fb45c3b0ddc65", "parents": [ "644a6b9f106507ebc6fd49c51f0c5f6abfaa97fb" ], "author": { "name": "Davanum Srinivas", "email": "davanum@gmail.com", "time": "Thu Aug 17 08:59:59 2017 -0400" }, "committer": { "name": "Davanum Srinivas", "email": "davanum@gmail.com", "time": "Thu Aug 17 10:33:14 2017 -0400" }, "message": "Add procname for uwsgi based services\n\nCode in grenade and elsewhere rely on the process/service name\nwhen one runs \"ps auxw\" and they grep for example \"grep -e glance-api\"\nto check if the service is running. with uwsgi, let us make sure\nwe use process name prefix so it is easier to spot the services\nand be compatible with code elsewhere that relies on this.\n\nChange-Id: I4d1cd223ed9904fcb19b26fc9362b676e0b4f9b3\n" }, { "commit": "63962fbbe41fe966df96fe2e1bb30943e7ae4047", "tree": "fa7604ea1d4b9ef201eb30c3da8c345031bec9d8", "parents": [ "98ab7d9646730f02983380648831aa2682abcc0c" ], "author": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Fri Aug 11 19:37:07 2017 +0000" }, "committer": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Fri Aug 11 19:42:51 2017 +0000" }, "message": "Remove keystone configs for ldap read/write\n\nConfiguration options that toggle support for LDAP read/write\nwere deprecated and removed as of the Ocata release:\n\n I13eada3d5c3a166223c3e3ce70b7054eaed1003a\n\nThis means we no longer need to clutter the domain-specific\nconfiguration with these values since they are no longer used.\n\nChange-Id: I23b5b994862f066c3d48ce524c396faecabf60f8\n" }, { "commit": "32608da2c4ecc523fb331212c441fc86aabb6355", "tree": "f36e02b456fe19a2271c544f86d0c6ac0882e394", "parents": [ "dea3083d984569eac9647f1a28f10ae98afc42f7" ], "author": { "name": "zhangbailin", "email": "zhangbailin@inspur.com", "time": "Wed Aug 09 01:43:00 2017 -0700" }, "committer": { "name": "zhangbailin", "email": "zhangbailin@inspur.com", "time": "Thu Aug 10 03:03:47 2017 -0700" }, "message": "Modify some spelling mistakes\n\nThere are some comment errors, it\u0027s modify \u0027Captial\u0027 to \u0027Capital\u0027 in\nkeystone file, and modify \u0027possition\u0027 to \u0027position\u0027 in openrc file, and\nmodify \u0027comming\u0027 to \u0027coming\u0027 in stack file, and\nmodify \u0027prefered\u0027 to \u0027preferred\u0027 in stackrc file.\n\nChange-Id: I0fdd539cbfff842a4ba7fca9100b881443300f9a\n" }, { "commit": "cc36397134716116d802ba82b9ea9a0bc4830a42", "tree": "0456458899b3d62fb9aef2b74f30c0ad068076cf", "parents": [ "b79531a9f96736225a8991052a0be5767c217377" ], "author": { "name": "Leticia Wanderley", "email": "leticiafwanderley@gmail.com", "time": "Mon Jun 26 23:52:52 2017 -0300" }, "committer": { "name": "Leticia Wanderley", "email": "leticiafwanderley@gmail.com", "time": "Mon Jul 10 17:06:16 2017 -0300" }, "message": "Fixes devstack ldap plugin\n\nWhen the ldap service is enable on local.conf devstack ldap\nplugin starts slapd service using its default config on Ubuntu\nand installs ldap-utils package.\nEnables domain specific drivers on Keystone and creates LDAP\ndomain \u0027Users\u0027 with a demo user.\n\nChange-Id: I8d7aa260b01f675e4ed201ef93bfd66474f4b228\n" }, { "commit": "b24bfac43dbec9c40a7274a6c51b602fc61226cd", "tree": "a8bcd3dc7e07df808eeeed5f2131a406d326e1ee", "parents": [ "a4c21ff9b216b2d3f840b5c059a335bb992d59f0", "633dbc3d8e7d3f06e13d532748c71ffba6cd21ea" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Jun 15 19:36:25 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Jun 15 19:36:25 2017 +0000" }, "message": "Merge \"Track db sync command time useage\"" }, { "commit": "633dbc3d8e7d3f06e13d532748c71ffba6cd21ea", "tree": "6625fc9b7f5e1a64d91e097d6a6bb712e8e38b06", "parents": [ "f4b4a79979c22e116964579ef44f8e9bb3713ad2" ], "author": { "name": "Clark Boylan", "email": "clark.boylan@gmail.com", "time": "Wed Jun 14 12:09:21 2017 -0700" }, "committer": { "name": "Clark Boylan", "email": "clark.boylan@gmail.com", "time": "Wed Jun 14 12:09:21 2017 -0700" }, "message": "Track db sync command time useage\n\nWe are trying to keep better track of what pieces of devstack consume\nthe most time. Add the db sync commands to the time tracking as they run\nthe database migrations which can take more time than expected.\n\nChange-Id: Ib92f2b8304ccf703712d45fd7207444de3599e2d\n" }, { "commit": "7b3968b38242824cd55a5b6dc50baa413ccd8e50", "tree": "cd7e530213dc8ea61618bc9cc6aba18f406d3d7b", "parents": [ "2b76a75ff4616d333ff44c6a777083baa9eee88c", "dcd4b64c990660f9b11b999a3b70e17c36323c4c" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Jun 14 16:10:35 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jun 14 16:10:35 2017 +0000" }, "message": "Merge \"Increase KEYSTONE_LOCKOUT_DURATION to 10\"" }, { "commit": "2b6e9ac47127453fdf907f3d9b56c71260ed0ba2", "tree": "dddf5e0e7c45a57dde2096b4d72aac9c87ebb129", "parents": [ "9234316794403e6ec422c3c9a766edbb1bae180f" ], "author": { "name": "Boris Pavlovic", "email": "boris@pavlovic.me", "time": "Mon Jun 12 17:08:33 2017 -0700" }, "committer": { "name": "Boris Pavlovic", "email": "boris@pavlovic.me", "time": "Tue Jun 13 18:33:28 2017 +0000" }, "message": "Improve OpenStack performance by redcuing bcrypt hasing rounds number\n\nReduce bcrypt hashing rounds from 12 to 4 (minimal possilbe).\n\nThis is going to imporve a lot of perforamcne of OpenStack.\n\nBcrypt is hashing algorithm that is designed to use a lot of resources and\nin that way stops brutforce attacks. It\u0027s exponential algorithm that depends\non amount of rounds. By default they use 12 rounds which is quite high value,\ngood enough for real secure production enviorments.\n\nIn case of DevStack it\u0027s going to slow down all authentication by many times.\nRally shows about 5 times slownest (adding 2-5 seconds to every authenticate)\nDevStack is meant for developemnt \u0026 CI so performance is way more important than\nsecurity.\n\nChange-Id: Id8c763d63cb91f37a774f9400f35c309f37d6f12\n" }, { "commit": "dcd4b64c990660f9b11b999a3b70e17c36323c4c", "tree": "e0e4c9c1f7b539b93a39c84c6235de66031efb20", "parents": [ "9234316794403e6ec422c3c9a766edbb1bae180f" ], "author": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Mon Jun 12 14:41:42 2017 +0000" }, "committer": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Mon Jun 12 14:41:42 2017 +0000" }, "message": "Increase KEYSTONE_LOCKOUT_DURATION to 10\n\nTransient failures were being reported because the current lockout\nperiod for users was too short. While this does increase the\nrun time IdentityV3UsersTest.test_user_account_lockout, it\nallows for more flexibility if there is network latency or some\nother factor that cause the lockout to expired before the\nnext authentication.\n\nChange-Id: I61bc39bbc35ac414b4a72929a90845956c99eb1a\nCloses-Bug: 1693917\n" }, { "commit": "902158bb8fb8452d747225e5986fb789828e4e67", "tree": "7644dd92270a6913593ffd693a72b5ff004232cd", "parents": [ "3742b1462241f2e9070dfb6e18f17cc3f493c13a" ], "author": { "name": "Clark Boylan", "email": "clark.boylan@gmail.com", "time": "Tue May 30 14:11:09 2017 -0700" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Jun 07 17:23:38 2017 +0000" }, "message": "Don\u0027t treat service as enabled if in disabled list\n\nThe old implementation for is_$service_enabled simply checked if any of\nthe subservices were enabled and if so the service was considered to be\nenabled. This makes disabling services complicated as it means you have\nto list every single subservice which can and do change over time.\n\nInstead also check if the generic service name is in the disabled\nservices list and if so don\u0027t treat the service as enabled.\n\nChange-Id: I7fe4dfca2cd9c15069d50a04161a29c5638291cb\n" }, { "commit": "27f66e9830727addd3d84b7a23eee907210540bb", "tree": "ef891a1ffcc1321235153d6f3675d3a3d12996d1", "parents": [ "8b8441f3becbae2e704932569bff384dcc5c6713" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue May 02 09:08:17 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue May 02 09:24:45 2017 -0400" }, "message": "Fix logging when under systemd\n\nBoth keystone and neutron didn\u0027t yet have systemd awareness for\nsetting up logging (i.e. drop the extra date / time stamps)\n\nChange-Id: Ib442c603c9afb679676976c37c2c6122201ae846\n" }, { "commit": "803acffcf9254e328426ad67380a99f4f5b164ec", "tree": "446e385dd3423422407506a7b3d40bc709816ef8", "parents": [ "7fe9e784c6128ad686ad47909c38e990b57c253c" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon May 01 10:52:38 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue May 02 06:20:22 2017 -0400" }, "message": "Make ./clean.sh work in more situations\n\nWhen transitioning between different wsgi modes, or service modes, we\nshould really safely stop and cleanup things that are started in any\nservice mode, which makes it easier to ensure that we don\u0027t leave\nthings around from past runs.\n\nChange-Id: I33acbee39e1a2da2bfd79a5dd54b84a12a778be1\n" }, { "commit": "bb4431126b80be4805f1072442676797e6019576", "tree": "df0cfee5b58ba9c5e36e523e743ae2ae394addb6", "parents": [ "38d4782c9f6b8558fea2c5268b9bf5de5070a0fe" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Apr 19 16:22:42 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon May 01 09:12:18 2017 -0400" }, "message": "Try to remove /identity_admin\n\nWe should be able to operate without the identity admin endpoint,\ngiven that in v3 it\u0027s all the same. This floats that out there to see\nif we can or not.\n\nChange-Id: Ic233f6b43dd1e3cfdadff0f18aba4ea78825a996\n" }, { "commit": "38d4782c9f6b8558fea2c5268b9bf5de5070a0fe", "tree": "2b5221b6d4fbded1a8031834903078f80aefc4d1", "parents": [ "fa898f5174e3aff9c65366024c170ce3cdda306d" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Apr 19 16:12:00 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon May 01 09:09:35 2017 -0400" }, "message": "remove auth_uri from keystonemiddleware config\n\nauth_uri is not a keystonemiddleware option, and it\u0027s use in config\nfiles is confusing at best. Remove it for clarity.\n\nChange-Id: Ie3a9ab30d81809363444d5f3b41588b3889dc185\n" }, { "commit": "6ed53156b6198e69d59d1cf3a3497e96f5b7a870", "tree": "07c09ef525734b2b3c3fa7fc1e3b8e5bd0c6869a", "parents": [ "64ffff9b7d79b9e75616cf43f9f7b31c89026f30" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Apr 13 13:33:16 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Apr 17 16:27:35 2017 -0400" }, "message": "Convert keystone to use uwsgi with the proxy\n\nThis makes keystone use the proxy uwsgi module when running in uwsgi\nmode. It also introduces a new stackrc variable which is WSGI_MODE\nthat we can use to control the conditionals in services that current\nwork with mod_wsgi.\n\nAlso update retry timeouts on proxy pass so that workers don\u0027t disable\ntheir connections during polling for initial activity.\n\nChange-Id: I46294fb24e3c23fa19fcfd7d6c9ee8a932354702\n" }, { "commit": "f3b2f4c85307b14f115a020f5eaf6c92026b55b4", "tree": "1f9180b6b7271a9b232bf08145ad37308fbee219", "parents": [ "2f8c88e0532b6b712cc386a9c15d833d3629b19a" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Apr 13 10:11:48 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Apr 17 07:27:32 2017 -0400" }, "message": "Remove USE_SSL support\n\ntls-proxy is the way we\u0027re now doing a standard install using https\nbetween services. There is a lot more work to make services directly\nhandle https, and having python daemons do that directly is a bit of\nan anti pattern. Nothing currently tests this in project-config from\nmy recent grepping, so in the interest of long term maintenance,\ndelete it all.\n\nChange-Id: I910df4ceab6f24f3d9c484e0433c93b06f17d6e1\n" }, { "commit": "2f8c88e0532b6b712cc386a9c15d833d3629b19a", "tree": "157ac93c5e2b9f35f1adcd6f145467032f60c4bd", "parents": [ "2b85cf0f06b099f9a771e9fbdbdef173c9d04784" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Apr 13 09:08:39 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Fri Apr 14 15:41:02 2017 -0400" }, "message": "Factor out code to write uwsgi config files\n\nInstead of this code all existing in keystone inline, factor out into\na dedicated set of functions, and make keystone use this. This drops\nuwsgi supporting https directly, but that\u0027s not going to be a\nsupported model going forward once we get to proxy only anyway.\n\nChange-Id: I1d89be1f1b36f26eaf543b99bde6fdc5701474fe\n" }, { "commit": "9c5ffd8d132866bd6120696e138e5b7b42dc3f23", "tree": "7cb1207cdf582a8ecb265a708335120c93405c82", "parents": [ "def07b21f86ee70cae223785f0195c91de1f2b64" ], "author": { "name": "Matthew Treinish", "email": "mtreinish@kortar.org", "time": "Wed Mar 29 16:47:57 2017 -0400" }, "committer": { "name": "Matthew Treinish", "email": "mtreinish@kortar.org", "time": "Mon Apr 03 12:38:29 2017 -0400" }, "message": "Handle uwsgi on systemd properly\n\nuwsgi is a different service type under systemd and shouldn\u0027t be run as\na standard oneshot type. The uwsgi docs outline a good pattern for\nwriting systemd unit files:\n\nhttp://uwsgi-docs.readthedocs.io/en/latest/Systemd.html\n\nThis commit takes those suggestions and creates a separate path for\nwriting uwsgi unit files.\n\nChange-Id: I9b541b86781afdded311dba058cedd783e1a0dfa\n" }, { "commit": "370c525061df5cdcdc714fe1064967230604b46e", "tree": "fac088d804d9cf002778320c7db98ffafcc313fa", "parents": [ "6fbd969c85adb53b82457a3fcf879c2b268103bf", "213c9a151f907988b283e4223404d0a09a5d4aa3" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Mar 29 17:45:08 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Mar 29 17:45:08 2017 +0000" }, "message": "Merge \"Remove installation of keystone policy file\"" }, { "commit": "213c9a151f907988b283e4223404d0a09a5d4aa3", "tree": "9a21ab7e214a8141e3d945639498ee56be1a2c07", "parents": [ "4a857e85f4e5f5fed732924ec20b31512759c7fd" ], "author": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Tue Mar 28 14:32:28 2017 +0000" }, "committer": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Tue Mar 28 14:35:09 2017 +0000" }, "message": "Remove installation of keystone policy file\n\nAs of Id6e3c0ac54b21d85e68625a5b52fe2559fb70f24 keystone\u0027s policy\nfile is empty and it is no longer required at runtime. This commit\nupdates devstack to not deploy a policy file for keystone because\ndevstack doesn\u0027t specify any policy overrides. Instead, we can remove\nthe sample policy file and rely on the defaults that have been\nregistered in code. This is the same approach nova took with policy\nin I85a251376dfe38caa4b100861bf764014a98bc37.\n\nChange-Id: Ib1d9a51a78e2a84a3d7294dc8782605a681fa9e8\n" }, { "commit": "5edae54855b6b9af4283cef07e0b0d1a0f90cd3e", "tree": "38a1c4516ffc6f472f455363fac5bd24c5b65425", "parents": [ "fb73a8fc6fa8cdc826b10c47490bc47cd0e6776a" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Mar 21 20:50:24 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Mar 28 07:19:15 2017 -0400" }, "message": "initial work to enable systemd service running\n\nDuring the PTG there was a discussion that the screen developer\nworkflow wasn\u0027t nearly as useful as it once was. There were now too\nmany services to see them all on one screen, and one of the most\ncommon service restart scenarios was not restarting one service, but a\nbunch to get code to take effect.\n\nThis implements a 3rd way of running services instead of direct\nforking via bash, or running under screen, which is running as systemd\nunits.\n\nLogging is adjusted because it\u0027s redundant to log datetime in oslo.log\nwhen journald has that.\n\nSwift needed to have services launched by absolute path to work.\n\nThis is disabled by default, but with instructions on using it. The\nlong term intent is to make this the way to run devstack, which would\nbe the same between both the gate and local use.\n\nSome changes were also needed to run_process to pass the run User\nin. A hack around the keystone uwsgi launcher was done at the same\ntime to remove a run_process feature that only keystone uwsgi uses.\n\nChange-Id: I836bf27c4cfdc449628aa7641fb96a5489d5d4e7\n" }, { "commit": "7a30c7fcabac1cf28fd9baa39d05436680616aef", "tree": "c29c72bd0f8a1290dd2c232b4f71919de33dec36", "parents": [ "42a914cadfb3ea63dc87d3b5f9a17cf6265728cb", "ee37d20f80d3a4871edd17a16c12e8ea5f0afadf" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Feb 21 23:04:49 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Feb 21 23:04:49 2017 +0000" }, "message": "Merge \"pass role by name not id\"" }, { "commit": "bfff93e1568a236be26a8e6c67e758b877f55a2a", "tree": "9dd7009ba232c97db7c140a674ea0bb32974d5dd", "parents": [ "11eb2017ef70a758c54cc984e90e445205886e7e" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Feb 13 16:18:08 2017 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Feb 13 16:18:08 2017 -0500" }, "message": "remove keystone internal uri\n\nThere is really no reason to have an internal uri referenced for\nkeystone in devstack.\n\nChange-Id: If0588a0ab512d94451992e7131dd3c8a33c5797c\n" }, { "commit": "ee37d20f80d3a4871edd17a16c12e8ea5f0afadf", "tree": "cd8d091500bdb1c53164f67a5104f05b4f969726", "parents": [ "7eef546f8a471a3709ff099955787d444e43eadf" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Feb 08 11:24:31 2017 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Feb 13 14:06:03 2017 +0000" }, "message": "pass role by name not id\n\nChange-Id: Ie67758bed3563c9a46a5180eaa9c8d47721fffd8\n" }, { "commit": "b6753cea8cd0e07d982048d2f856c6168fc74a92", "tree": "75df66abe710f6267911628fd1e380169ac84fd1", "parents": [ "df09c433867a9ce204d1b14807cb5510c0bd0385" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Apr 05 11:52:44 2016 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Fri Jan 20 10:48:20 2017 -0500" }, "message": "simplify colorized logging setup\n\nThis makes setup_colorized_logging be a thing which takes a single\nparameter and doesn\u0027t let projects do things differently. It also\nchanges the order of values from user / project to project / user to\nrepresent the hierachy more clearly.\n\nChange-Id: I8c0ba7da54be588e3e068734feb4f78ed7c5a14a\n" }, { "commit": "b51a8862b1f80a947815094148bc229ba3d58ae1", "tree": "f4bd64a0f5a1b8ce82b44124953deb0a73dca32d", "parents": [ "281c5c22ce7f4e7d367f689488e15ad77695a183" ], "author": { "name": "Rodrigo Duarte", "email": "rduartes@redhat.com", "time": "Mon Sep 26 15:22:35 2016 -0300" }, "committer": { "name": "Rodrigo Duarte Sousa", "email": "rduartes@redhat.com", "time": "Thu Jan 05 16:06:39 2017 -0300" }, "message": "Adds keystone security compliance settings\n\nThe PCI-DSS feature has been introduced during the Newton\nrelease and its settings are disabled by default. This\npatch adds the possibility to enable some of them during\nDevStack setup.\n\nChange-Id: If6b5eb3e3cbc43eb241c94d18af80ad50be08772\nDepends-On: Id97ca26f93b742cc3d8d49e98afc581f22360504\n" }, { "commit": "29890549929b4f2ab9dd5c96d0a857708c683997", "tree": "1bdcc8dcd94a15c7d819c5eecaa946a03836237d", "parents": [ "be7fae041fa99df137694cc195b2ad24a3c90f76", "ea3e87d4e5a7a23870e86bbe133064a99e9519cf" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Dec 22 19:25:40 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Dec 22 19:25:40 2016 +0000" }, "message": "Merge \"Add new parameter RECREATE_KEYSTONE_DB\"" }, { "commit": "ea3e87d4e5a7a23870e86bbe133064a99e9519cf", "tree": "efce98e842882f83bfa3cebcd3fe3fe63d1c3423", "parents": [ "c95ca63ae3acdc3ebc36ab4efdfd874993ce72cc" ], "author": { "name": "Julia Varlamova", "email": "jvarlamova@mirantis.com", "time": "Fri Dec 16 14:39:31 2016 +0400" }, "committer": { "name": "Julia Varlamova", "email": "jvarlamova@mirantis.com", "time": "Fri Dec 16 14:41:55 2016 +0400" }, "message": "Add new parameter RECREATE_KEYSTONE_DB\n\nIf \u0027RECREATE_KEYSTONE_DB\u003dFalse\u0027 database won\u0027t be recreated.\nIt would be useful for multinode Grenade tests for Keystone. This parameter\nwill help us to deploy multiple services on different machines talking to\nthe same DB.\n\nDevstack recreates Keystone DB each time during Keystone service installation.\nIf our controller node is already deployed, Keystone DB already contains\nimportant information about OpenStack services and their endpoints. When\nthe second Keystone node is being deployed, we don\u0027t want to delete\nrecords about controllers\u0027 services endpoints.\n\nPartially-Implements: bp rolling-upgrade-testing\n\nChange-Id: Ia8d07b4295ca165be01e44466c95d5275f596e83\n" }, { "commit": "7f68548538a5855cff8fe1debf4e65ff74074e09", "tree": "d9a45370651ba74fd4b213d4de4a0831d349534f", "parents": [ "c95ca63ae3acdc3ebc36ab4efdfd874993ce72cc" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Dec 13 15:47:11 2016 +1100" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Dec 13 15:47:11 2016 +1100" }, "message": "Always add the service role to service users\n\nWhen creating a service user we allow the user to be created with a\ndifferent role. Currently in auth_token middleware we want to check that\nthe service token is specified with the service role so we should always\nadd the service role and optionally add additional roles.\n\nChange-Id: Ie954a679674b4795079b539ebc8d4d2dcbd7dacc\n" }, { "commit": "ee548bc2bf409cffd4d131e5d6cf481704e50d89", "tree": "8b7d937e0d1a0878f092f138e1b6ce6094dfe643", "parents": [ "c18b804b161647452283a243b9c55eb14a416d26", "a1e1f5128a22a7d0cdc8136063d27d64c270021d" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Dec 02 15:27:47 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Dec 02 15:27:47 2016 +0000" }, "message": "Merge \"Add keystone VirtualHost for port 443 when USE_SSL is True\"" }, { "commit": "a3bb131c138859367f4529720121fd3eb8e239fd", "tree": "f71f4d7e8bc3f4290862af0ef966a2e4fbb22465", "parents": [ "9513f8ea39b811105fefc2177f05b3bc37642e96", "fb73d85afe7df7b93b9a460372a8ad6558e887e0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Nov 23 02:16:07 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Nov 23 02:16:07 2016 +0000" }, "message": "Merge \"Remove unused KEYSTONE_CATALOG_BACKEND\"" }, { "commit": "7976f31fb956dcb1cbeea92906f5609f0b43acc4", "tree": "c289d737eea71f9e86a339433471c2e3b551b86a", "parents": [ "29d13df1a284f8f1a5973ccc826a475156820d23", "4440da85637aa8239f24bd4f23a9a8e1ac2d0b8d" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Nov 16 00:04:44 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Nov 16 00:04:44 2016 +0000" }, "message": "Merge \"Unset admin_project config options for Keystone\"" }, { "commit": "dc486bc12fb63ecb5939f8d29dd9cf7a659847cd", "tree": "ac8fae3feb3e8796c271aacbb4d783ea0cac3793", "parents": [ "1f84d457577162421bfd2de63bd83d80c123a32f" ], "author": { "name": "Steve Martinelli", "email": "s.martinelli@gmail.com", "time": "Thu Sep 08 02:29:25 2016 +0000" }, "committer": { "name": "Steve Martinelli", "email": "s.martinelli@gmail.com", "time": "Mon Oct 31 14:57:11 2016 +0000" }, "message": "Switch fernet to be the default token provider\n\nthis is the first patch in a series to actually make fernet the default\ntoken provider in keystone. the patches for grenade, release notes, and\nactually switching the value in keystone all depend on this patch first.\n\nreasons for switching over:\n\n- fernet tokens are the recommended token provider\n- the install guide for newton recommends deployers use fernet tokens [0]\n- we previously attempted this switch but ran into timing issues [1],\n the timing issues have been resolved [2]\n\n[0] http://docs.openstack.org/newton/install-guide-ubuntu/keystone-install.html\n[1] 153db269705f37d4144ad3fcf26dc67269755d7d\n[2] https://review.openstack.org/#/q/topic:make-fernet-default\n\nChange-Id: I3b819ae8d2924f3bece03902e05d1a8c5e5923f1\n" }, { "commit": "fb73d85afe7df7b93b9a460372a8ad6558e887e0", "tree": "e586014b546db1081d1d823ca34cf93a0e0a3de1", "parents": [ "e0fdcd5ff2c238a4e47c409e19922350fa27dc33" ], "author": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Fri Oct 28 02:03:37 2016 -0700" }, "committer": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Fri Oct 28 02:03:37 2016 -0700" }, "message": "Remove unused KEYSTONE_CATALOG_BACKEND\n\nThis patch simply removes a var noted to be removed back in Newton.\n\nChange-Id: I7c66e1d8d65f562596543ed8ca402dba8c8ea271\n" }, { "commit": "7b07ccf5e4b7f724eceedb069a51c29284b357aa", "tree": "6eb5588e1438f6d4d46015ff30b0cfc16ba5fb16", "parents": [ "e0fdcd5ff2c238a4e47c409e19922350fa27dc33" ], "author": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Thu Oct 27 06:14:00 2016 -0700" }, "committer": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Thu Oct 27 16:24:16 2016 +0000" }, "message": "Remove deprecated/obsolete ldap options\n\nThe devstack ldap configuration for keystone is still using some\nold options that are no longer valid. The write support is\nbeing removed this release. And in previous releases, the ldap\nassignment driver support was removed and was not removed here.\n\nChange-Id: I538626b681eaee6a7ac10dfbc29605b73fbe13bf\n" }, { "commit": "4440da85637aa8239f24bd4f23a9a8e1ac2d0b8d", "tree": "b8312c2aa45e11a93c22d618d9957993002524d8", "parents": [ "e0fdcd5ff2c238a4e47c409e19922350fa27dc33" ], "author": { "name": "Adam Young", "email": "ayoung@redhat.com", "time": "Wed Oct 26 11:40:08 2016 +0200" }, "committer": { "name": "Adam Young", "email": "ayoung@redhat.com", "time": "Wed Oct 26 11:40:08 2016 +0200" }, "message": "Unset admin_project config options for Keystone\n\nUntil the policy changes land for Nova, Glance, etc, this\nvalue is not used. Additionally, by having it set, it actually\nmakes it hard/impossible for the required changes to land in\nthe other services. Disable/comment out the changes in the\nKeystone specific lib file for now, and we will re-enable once\nthe Services can make use of them.\n\nChange-Id: Ia1de9083c21107dac2f0abb56bda166bdb37a69d\n" }, { "commit": "ec498cd0619805c409b28f81c6a7bcd3a01136ed", "tree": "382b7e923491ae169dc3b004ed5d0cb39a766736", "parents": [ "7480276f5e83e1d29371c402f8500098ce1871c2" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Oct 06 15:00:44 2016 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Oct 06 15:00:44 2016 -0400" }, "message": "remove sites-enabled/keystone.conf link on clean\n\ndoing a clean.sh / stack.sh cycle with USE_SSL\u003dTrue was failing\nbecause we were no longer cleaning up the keystone site fully, so some\nof the early mod_ssl queries hit an invalid apache configuration.\n\nChange-Id: Ic6f3f601e532ec50c0234d928c25b378d9e95e32\n" }, { "commit": "792a7ab31f0553435c02bb230b2c60833eb58c8e", "tree": "cdc1947f07a386958a85632984f0d85236f6bdf6", "parents": [ "65fc49e283cfd3d2a130fe85bd6ceafed1ba040f", "04e69de6c513e1cddaaa74eb2ff428a5db4d223b" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 26 20:39:11 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 26 20:39:11 2016 +0000" }, "message": "Merge \"Mount identity admin script at /identity_admin\"" }, { "commit": "e18d6fae7256ab33c734fdf763fae261c3b7c979", "tree": "c472107383adc1b8730365fcd79200d361953a37", "parents": [ "590e21f9a48cac3887bc3eb33eb76a8603dff253", "0a318ab8a6ede38a330b5bff10479772ab4776f0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 26 16:54:00 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 26 16:54:00 2016 +0000" }, "message": "Merge \"Switch keystone to dogpile.cache.memcached backend\"" }, { "commit": "590e21f9a48cac3887bc3eb33eb76a8603dff253", "tree": "c39c5e647ae7605a8992655f48e1cdbfad6f50c2", "parents": [ "fdd6dfa5190b801a5208cad5e99c9dff75f6800e", "542abbab3bc58c40a499531165943df4bf2e4ab0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 26 16:53:52 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 26 16:53:52 2016 +0000" }, "message": "Merge \"Keystone uwsgi set lazy-apps\u003dtrue\"" }, { "commit": "04e69de6c513e1cddaaa74eb2ff428a5db4d223b", "tree": "0584e3049c750a2f72876ffed8dbf3dae1f03fdc", "parents": [ "7957489003137280aaa20415f5dc601a8276181e" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Wed Jul 27 08:05:05 2016 +1000" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Sep 26 14:44:40 2016 +0000" }, "message": "Mount identity admin script at /identity_admin\n\nThe /identity_admin endpoint is the port 80/443 equivalent of the\nservice that typically runs on port 35357. In v2 some operations must be\nperformed on the admin endpoint whereas on v3 the services on 5000 and\n35357 are exactly the same. This would be why the service was mounted at\n/identity_v2_admin however that is misleading because both the v2 and v3\nservices are present on that endpoint.\n\nThis is particularly confusing because we set this as the OS_AUTH_URL\nendpoint and it makes it seem like we are doing v2 authentication when\nwe are not.\n\nChange-Id: If73735026079fb19ca5bd44b3a4dc1f507b5c99d\n" }, { "commit": "a2d18484195e700f28e0b7cca1a29e20d9d369b0", "tree": "d14dadbfb1bad781fffe1f8047d7d03831e5d0ca", "parents": [ "81d89cf3584a5edadbaa2514305cf5721b29cdff", "4b49e409f853104dae021dfca1a9342ec9ac4709" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Sep 21 18:19:40 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Sep 21 18:19:40 2016 +0000" }, "message": "Merge \"Use apache for tls-proxy ssl termination\"" }, { "commit": "4b49e409f853104dae021dfca1a9342ec9ac4709", "tree": "dc27f7ff83839baa55b459ca4aa2230c4ed19439", "parents": [ "fb1e1cc7e3de4483de48661b03a4417e2d24957a" ], "author": { "name": "Gregory Haynes", "email": "greg@greghaynes.net", "time": "Wed Aug 31 18:19:51 2016 -0700" }, "committer": { "name": "Clark Boylan", "email": "clark.boylan@gmail.com", "time": "Tue Sep 20 08:14:11 2016 -0700" }, "message": "Use apache for tls-proxy ssl termination\n\nStud is now abandonware (see https://github.com/bumptech/stud) and is\nnot packaged in xenial. Lets use Apache for SSL termination since its\nthere already.\n\nChange-Id: Ifcba410f5969521e8b3d30f02795541c1661f83a\n" }, { "commit": "b74fc6886ff7b373644f886238118dd0c34046f2", "tree": "f19f62eb1f6379f38a260ff909a922db081fc443", "parents": [ "fac8adbe1b2bdd2bae105228eb7acf2dd3f30da7", "eb77eef8a57f8a4d012d8bee316e56b1764919de" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Sep 08 00:59:33 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Sep 08 00:59:33 2016 +0000" }, "message": "Merge \"Keystone re-enable catalog caching\"" }, { "commit": "eb77eef8a57f8a4d012d8bee316e56b1764919de", "tree": "696eb03d77b4b3d83f0b126754ab3aeafe73c74b", "parents": [ "fb1e1cc7e3de4483de48661b03a4417e2d24957a" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 16:26:17 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 16:26:30 2016 -0500" }, "message": "Keystone re-enable catalog caching\n\nCatalog caching was disabled due to bug 1537617, but this has been\nfixed for some time. Re-enabling to get some performance back.\n\nChange-Id: Ic0edf5c70a5040edf3393dbd1e110ab5fb56c110\nRelated-Bug: 1537617\n" }, { "commit": "542abbab3bc58c40a499531165943df4bf2e4ab0", "tree": "73be70c316843a6b25813cf99b27446d24dcb5e5", "parents": [ "a270f5e242f2532389395abfe49eb6780b50a0db" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 15:47:56 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 15:47:56 2016 -0500" }, "message": "Keystone uwsgi set lazy-apps\u003dtrue\n\nKeystone had a problem where there was a memcached socket\nopened very early on startup which then got shared between\nworker processes when running under uwsgi. This can be\nprevented by setting lazy-apps so this is the recommended\nsetting.\n\nSee http://uwsgi-docs.readthedocs.io/en/latest/ThingsToKnow.html\n\n\"\"\"uWSGI tries to (ab)use the Copy On Write semantics of the\nfork() call whenever possible. By default it will fork after\nhaving loaded your applications to share as much of their\nmemory as possible. If this behavior is undesirable for some\nreason, use the lazy-apps option. This will instruct uWSGI to\nload the applications after each worker’s fork(). Beware as\nthere is an older options named lazy that is way more invasive\nand highly discouraged (it is still here only for backward\ncompatibility) \"\"\"\n\nChange-Id: I6f271dc906528f0c86060452deaf15df81b267d2\nRelated-Bug: 1600394\n" }, { "commit": "69d4a71dfe86e8111101dcd1bcf5a4138a7956a4", "tree": "6d5725177c1eaf19398aae838baccc7941a91238", "parents": [ "61be14d2993f84364c47956036bd95a97d2c7725" ], "author": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Sat Aug 27 01:01:37 2016 +0000" }, "committer": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Mon Aug 29 21:18:47 2016 +0000" }, "message": "Allow setup of credential encryption using fernet\n\nWith the addition of encrypted credential in keystone, we need to be able to\nadd setup steps in devstack to configure the credential repository with\nencryption keys.\n\nDepends-On: I97e7701bc5b8765d207cc721793643bcefa2d4e2\nDepends-On: Id3e8922adc154cfec5f7a36613e22eb0b49eeffe\nChange-Id: I433da9a257daa21ec3b5996b2bca571211f1fbba\n" }, { "commit": "0a318ab8a6ede38a330b5bff10479772ab4776f0", "tree": "51af38c0b78adf9717bdb98f61c50cff480052bb", "parents": [ "ecfc8a77c203c7832b8b7542342cbb8e258a7765" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Aug 18 13:50:18 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Aug 18 13:50:18 2016 -0500" }, "message": "Switch keystone to dogpile.cache.memcached backend\n\nmemcache_pool is there to keep a limited number of thread-associated\nconnections open rather than a connection for every thread. If you\ndon\u0027t have a huge number of threads it doesn\u0027t offer anything.\nKeystone is an example of a service where memcache_pool doesn\u0027t\nimprove things -- eventlet isn\u0027t supported anymore and more threads\nis not useful due to GIL.\n\nAs such, keystone cache backend is changed to dogpile.cache.memcached.\n\nSee https://review.openstack.org/357407 for the oslo.cache help text\nchange.\n\nChange-Id: I4452a8c4968073cdea4c0f384453a5a28519fa08\n" }, { "commit": "a1e1f5128a22a7d0cdc8136063d27d64c270021d", "tree": "ba77b5a196c66099d0437dd2d3b85dc621e0d9fe", "parents": [ "61b319787bbd0af7f3cc1feb71cef0bef6dab373" ], "author": { "name": "Rob Crittenden", "email": "rcritten@redhat.com", "time": "Wed Jul 20 18:12:09 2016 -0400" }, "committer": { "name": "Rob Crittenden", "email": "rcritten@redhat.com", "time": "Wed Jul 20 18:15:00 2016 -0400" }, "message": "Add keystone VirtualHost for port 443 when USE_SSL is True\n\nAdd a VirtualHost that defines the necessary options for\nenabling SSL. The existing keystone Apache configuration already\ndoes all the location handling.\n\nChange-Id: I836a471a7258f14f051d3dd8bdb428286b5a11aa\n" }, { "commit": "e88c51cc1b0aa59abbae353f3fd3c2ef58e1602a", "tree": "9229f13105c9b5c61dee83297f2f49b288f29e13", "parents": [ "45360ed32ef82adcc1685d13ef290c4867eb4fd1", "b97a60e90c46c101b6c2c9a5dbf42140bd8bb8d1" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Jun 15 01:11:46 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jun 15 01:11:46 2016 +0000" }, "message": "Merge \"Keystone uwsgi performance tuning\"" }, { "commit": "75ace7a5edbb6496633b97dc1d6b60e000ff3e5f", "tree": "f3a9b573ce864b9a019af8dbdd6403d986157156", "parents": [ "026cad84a34ff914707538470ec3ae6e2015e54b" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Tue Jun 07 17:44:06 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Tue Jun 07 17:44:06 2016 -0500" }, "message": "Correct keystone memcached host setting\n\nkeystone was configured to connect to memcached on the host IP\naddress. Unfortunately, memcached is only listening on localhost,\nso this setting actually hurts performance as keystone fails to\nconnect to the memcached server. There\u0027s no indication of this in\nthe keystone logs since this is just how memcache client works\n(ignoring errors).\n\nYou can verify this by\n1) in /etc/memcached.conf, set -vv\n2) restart memcached: service memcached restart\n3) watch /var/log/memcached.log\n4) There will be no output\n\nwith this change, there will be output in /var/log/memcached.log\n\nAlso the performance should be a lot better.\n\nChange-Id: I95d798d122e2a95e27eb1d2c4e786c3cd844440b\n" }, { "commit": "b97a60e90c46c101b6c2c9a5dbf42140bd8bb8d1", "tree": "43430eeee33b8ecd5cb49a6909651fd9748b7c74", "parents": [ "18ce57e55c736542a0f328c6cdf0f521faf5e48a" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Jun 03 15:59:11 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Jun 05 18:48:03 2016 -0500" }, "message": "Keystone uwsgi performance tuning\n\nI ran some tests locally that showed that when using the uwsgi\ndeploy the keystone server wasn\u0027t using all the processes\navailable. When I switched from \"threads\" to \"processes\" the\nconcurrent performance improved considerably. So I\u0027m proposing\nthat devstack switch to processes to improve performance.\n\nChange-Id: I8cfe9272e098e636441b7cfb51bff08d62c3336e\n" }, { "commit": "f5998b0253be5a73a068169591d9f773662d39aa", "tree": "afe9f14037e28da669c47f0519cda7f586073d6c", "parents": [ "730703a83335d9d9704023ba17a241d3d506f1a4", "841fdafa0bc542b595b267428c5d929bf0726205" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue May 24 20:13:19 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue May 24 20:13:19 2016 +0000" }, "message": "Merge \"Use path-mounted keystone when running in httpd\"" }, { "commit": "ade7898e52cd89d271cbe264e0a9fc5e4d1df785", "tree": "b1b920e3c91cc2ff50d748dfb86ffef4a553bc7f", "parents": [ "b671d83850eea7228542e14869bf13498c285545", "153db269705f37d4144ad3fcf26dc67269755d7d" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed May 18 15:35:32 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed May 18 15:35:32 2016 +0000" }, "message": "Merge \"Revert \"Switch fernet to be the default token provider\"\"" }, { "commit": "153db269705f37d4144ad3fcf26dc67269755d7d", "tree": "515c2a469c2e70f3e9da37a7c6a5f7b6edc1e748", "parents": [ "181588b9ba50fefea12617a9a5e774daddfed20c" ], "author": { "name": "Matt Riedemann", "email": "mriedem@us.ibm.com", "time": "Wed May 18 14:05:14 2016 +0000" }, "committer": { "name": "Matt Riedemann", "email": "mriedem@us.ibm.com", "time": "Wed May 18 14:05:14 2016 +0000" }, "message": "Revert \"Switch fernet to be the default token provider\"\n\nThis reverts commit 181588b9ba50fefea12617a9a5e774daddfed20c.\n\nSince this change landed on 4/29 it\u0027s been the cause of the\ntop two gate failures (besides known latent infra issues) and\nhasn\u0027t had good progress on landing a fix, so until it\u0027s a\npriority for the keystone team we need to revert this change\nto get the integrated gate jobs moving again.\n\nChange-Id: I588a84c5179eab072d21bc1394aea2df00929650\nRelated-Bug: #1577558\nRelated-Bug: #1578866\n" }, { "commit": "b671d83850eea7228542e14869bf13498c285545", "tree": "a3abcf5d39387789d58ba71fb92e8beeb08b8fee", "parents": [ "f5db32dfdb57a4e9fb289047113e059dd4a35ef1", "d1c9198bbe0e90717a9e70c662b806841bc82564" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed May 18 13:42:43 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed May 18 13:42:43 2016 +0000" }, "message": "Merge \"Change the domain name in keystone.conf\"" }, { "commit": "a8980996340d79bc6fc5a1d5545f3ff6c5709eab", "tree": "eedd1924ef381354ce355eab97f6a593ac9d8462", "parents": [ "3a2e534047afa8116fb261438aea50ce61ac3553", "4f55c2d5c384f576e45f4310595e262039fd8175" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue May 17 10:42:50 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue May 17 10:42:50 2016 +0000" }, "message": "Merge \"Set config file to db sync and other manage operation\"" }, { "commit": "0afe207cb346fe7468d073e2358abd2ad9b9d9e8", "tree": "dca739fb114dceea3ed5627a949ac1cbf3602f86", "parents": [ "4bb4728e6fd52c68faa126a36f630f3c6e9d5f6b" ], "author": { "name": "Jens Rosenboom", "email": "j.rosenboom@x-ion.de", "time": "Thu May 12 14:09:03 2016 +0200" }, "committer": { "name": "Jens Rosenboom", "email": "j.rosenboom@x-ion.de", "time": "Thu May 12 14:09:03 2016 +0200" }, "message": "Create service project in service domain\n\nWhen creating service users, the assumption is that the service\nproject lies within the service domain, so create it there.\n\nChange-Id: I4880e789f5eaf340634ceb792397eef12a5a6b51\nCloses-Bug: 1580998\n" }, { "commit": "4f55c2d5c384f576e45f4310595e262039fd8175", "tree": "06be5c649225dbd2a07d1d2673de114918f45937", "parents": [ "a5c1a930962282f105b5057c327b48a4b30a4d12" ], "author": { "name": "Einst Crazy", "email": "yu.changcai@99cloud.net", "time": "Wed May 04 08:14:01 2016 +0000" }, "committer": { "name": "Einst Crazy", "email": "yu.changcai@99cloud.net", "time": "Mon May 09 01:43:32 2016 +0000" }, "message": "Set config file to db sync and other manage operation\n\nCurrently, the db sync operation does not specify the config dir or\nconfig file.\nIf there is a config file in the home path, it will use this one,\nbut not the right one devstack write.\n\nSet config file to these operations.\n\nChange-Id: Id1fbc3d85280c19596f5ebd301c46bcf018fa2f6\nCloses-Bug: #1578098\n" }, { "commit": "d1c9198bbe0e90717a9e70c662b806841bc82564", "tree": "bf9ad3f083e3f2ee64e626186ce673ed0a7cb348", "parents": [ "a5c1a930962282f105b5057c327b48a4b30a4d12" ], "author": { "name": "Rabi Mishra", "email": "ramishra@redhat.com", "time": "Wed May 04 16:09:47 2016 +0530" }, "committer": { "name": "Rabi Mishra", "email": "ramishra@redhat.com", "time": "Wed May 04 16:11:09 2016 +0530" }, "message": "Change the domain name in keystone.conf\n\nAs we are creating a domain with id \u0027default\u0027 and name\n\u0027Default\u0027, we should iniset the correct name.\n\nChange-Id: If67338fbbd255b8aa1b91e18e4cf8213baebab95\n" }, { "commit": "841fdafa0bc542b595b267428c5d929bf0726205", "tree": "17524776a82b40151458eabc939a4803bf3156a4", "parents": [ "13b3be10a754c0e0f9fb31ce824d5f2d9cc905de" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Jun 21 10:08:22 2015 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon May 02 19:10:18 2016 -0500" }, "message": "Use path-mounted keystone when running in httpd\n\nWhen running in httpd, keystone accepts requests on /identity and\n/identity_v2_admin.\n\nThe path endpoints should be preferred over the ports so keystone\nis configured to point applications to the path endpoints by\nsetting admin_endpoint and public_endpoint.\n\nChange-Id: I34569b9e03c3f36748c92d803349e22a7ee1a633\n" }, { "commit": "5b83e986de80cffb26ac717121458545c78d6245", "tree": "5c0f36767ab08fd91ad9e3fbf5148b7e5ee1087b", "parents": [ "96ffde28b6e2f55f95997464aec47ae2c6cf91d3", "181588b9ba50fefea12617a9a5e774daddfed20c" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Apr 29 17:27:14 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Apr 29 17:27:15 2016 +0000" }, "message": "Merge \"Switch fernet to be the default token provider\"" }, { "commit": "039fc1a54205f2ba37d1d94f2b4f358901c2aa48", "tree": "e0d3197d6643b729059861c9f6dea6fd3058dffb", "parents": [ "290b6f204b2df67c4ab27e766ac70e399edbc94c", "cbcbd8f33c87904b2293e68ec9868be0b6e4393e" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Apr 20 21:49:01 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Apr 20 21:49:02 2016 +0000" }, "message": "Merge \"Allow putting service users in a seperate domain\"" }, { "commit": "181588b9ba50fefea12617a9a5e774daddfed20c", "tree": "0a7207ffdeb8ddd32aeb9c1e234d0ccf2c4d9f77", "parents": [ "6109a6b7a960bfca0afaa915a27c8d99f140ed10" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Jun 25 17:58:51 2015 -0500" }, "committer": { "name": "ayoung", "email": "ayoung@redhat.com", "time": "Tue Apr 19 19:04:37 2016 +0000" }, "message": "Switch fernet to be the default token provider\n\nUse the fernet token provider as the default for keystone.\n\n The Keystone token provider of choice is changing from UUID to Fernet.\n However, due the the need for multi-site keystone deploys to have keys\n kept in sync, we cannot change the default in upstream Keystone\n without breaking existing deployments. Fernet requires a deliberate\n setup step like what is done in devstack. Making the change in\n devstack documents the expected setup.\n\nChange-Id: I8c0db244634b0861b0eb3c48fe6ede153f7f04f2\n" }, { "commit": "cbcbd8f33c87904b2293e68ec9868be0b6e4393e", "tree": "1db9c7c8e519fd2c5991730a2ac47858b49be9b3", "parents": [ "3d0981398a898b7ed5d4cbac4121b22963ffb32f" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Thu Jan 21 16:08:14 2016 -0600" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Mon Apr 18 09:59:52 2016 +1000" }, "message": "Allow putting service users in a seperate domain\n\nMake it possible to construct the service users in their own seperate\ndomain. Changing this away from Default will not work for everyone yet,\nthough it does work for basic service interaction however enabling it\nwill allow us to start testing and hopefully gating that services aren\u0027t\nrelying on v2 only concepts.\n\nChange-Id: I7e73df5dd1caabf355783da2bc0f3007ade92fba\n" }, { "commit": "982b9911fb66d8c098442f0785972b3a3fcb1414", "tree": "a7b3d2584481717e3ec2b0e9e668d73aa0d6f364", "parents": [ "a344608ca9c5a61bad60a478fe1bbb60ecc60681" ], "author": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Thu Apr 14 07:48:24 2016 +1000" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Thu Apr 14 13:41:34 2016 +1000" }, "message": "Deprecate SERVICE_TENANT\n\nThis is a follow-on to I6f392d3c16726f6dd734184dcf3014fb4f388207 to\nnote the variable is kept for backwards compatibility.\n\nChange-Id: I1008b2d4e2baf82e1aa531d9eaf96a084beb69aa\n" }, { "commit": "2e23e641511b37d041ea2bbb2e5c969842e05aa4", "tree": "6856cdcd27a12c201fd8f87f0d4d3ce0f7b2f19b", "parents": [ "a061138535a2479fef9dcb70cd4dc261d264d623", "0b1465b6f699a974e3900fff2a810aec6a6bf43c" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Apr 13 23:35:52 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Apr 13 23:35:52 2016 +0000" }, "message": "Merge \"change tenant to project in keystone bootstrapping\"" }, { "commit": "846254620e8230d7633f6163957bc61f5473ad1e", "tree": "a4db7abff1334a0fa451f9141f87a0ed24b8c858", "parents": [ "e9820732f16386facc526d14a5150ba68da68161", "8dda061a1fc3b06675cc873681d3bdaaad98f734" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Apr 08 15:47:24 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Apr 08 15:47:24 2016 +0000" }, "message": "Merge \"Revert \"Revert \"Use unversioned keystone endpoints\"\"\"" }, { "commit": "8dda061a1fc3b06675cc873681d3bdaaad98f734", "tree": "9920c0b1264991b377ef682d3b49f69efc0d42dd", "parents": [ "da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780" ], "author": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Thu Apr 07 00:12:51 2016 +0000" }, "committer": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Thu Apr 07 17:00:37 2016 +0000" }, "message": "Revert \"Revert \"Use unversioned keystone endpoints\"\"\n\nThis reverts commit da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780.\n\nDepends-on: Id2c7e09611c1f8b06e6d272589b4ea3435b8de86\nChange-Id: I1b2a65179b5863d8bcbc5dd02b615f4e6e564213\n" }, { "commit": "2bf60959256f3da0729ba8624cb8926f4831ed89", "tree": "282ee43fd59a519dbba8adff1b4da2457191a6f4", "parents": [ "449ab1098929cfc0a3081a1f57a3404a7306a747", "da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Apr 07 00:10:16 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Apr 07 00:10:16 2016 +0000" }, "message": "Merge \"Revert \"Use unversioned keystone endpoints\"\"" }, { "commit": "da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780", "tree": "34fd88b4b52d1d3ca0edc3b9929bfddd6c45b9ea", "parents": [ "4921d4dbb937b8a9ca26379a33252f0bebcfb53f" ], "author": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Wed Apr 06 21:57:28 2016 +0000" }, "committer": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Wed Apr 06 21:57:28 2016 +0000" }, "message": "Revert \"Use unversioned keystone endpoints\"\n\nThis reverts commit 4921d4dbb937b8a9ca26379a33252f0bebcfb53f.\n\nChange-Id: Ic8888fca5d25ca6caa3f29f712db319f1d3869ba\n" }, { "commit": "4bb3e20655c0af871a50b05364175eff839863fb", "tree": "106be608ef2a76bae369484c16615858ff27648c", "parents": [ "cb1b506d9980b6a4edc2f2fdea5f6530165cf26e", "4921d4dbb937b8a9ca26379a33252f0bebcfb53f" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Apr 06 18:31:01 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Apr 06 18:31:02 2016 +0000" }, "message": "Merge \"Use unversioned keystone endpoints\"" }, { "commit": "0b1465b6f699a974e3900fff2a810aec6a6bf43c", "tree": "dff1d4bbc631cf0d9051fc671c14ba2b4992478e", "parents": [ "19dfa2af3286a6fbd8ea74dbc41a6affd2123e3f" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Apr 04 10:15:47 2016 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Apr 05 11:40:25 2016 -0400" }, "message": "change tenant to project in keystone bootstrapping\n\nChange-Id: I6f392d3c16726f6dd734184dcf3014fb4f388207\n" }, { "commit": "556eeb0d358746ed4587440093c2739fb0a57c2b", "tree": "141a76769cec2009e34083701b2317f41ff2f553", "parents": [ "74d82d9343431a53bcffd6554b6188278e61e0d9" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Mar 24 14:01:57 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Mar 24 14:01:57 2016 -0500" }, "message": "Drop keystone eventlet support\n\nKeystone has dropped support for running under eventlet (using\nkeystone-all).\n\nChange-Id: Ib38c0b1a54633a6b6dfa3a0a605cd2b02ca48989\n" }, { "commit": "9ea497539bb1e20fc2d247719f98401d5f7cd67c", "tree": "ead23f1ad29ecb90a1ecf47c2b2b95d454de7613", "parents": [ "0a2a7ae8471575d887a19b9bf8b7375ea1fd7f45" ], "author": { "name": "Attila Fazekas", "email": "afazekas@redhat.com", "time": "Tue Mar 22 15:22:03 2016 +0100" }, "committer": { "name": "afazekas", "email": "afazekas@redhat.com", "time": "Wed Mar 23 19:03:14 2016 +0100" }, "message": "Configure the admin as admin\n\nMake our usual admin user to be a real admin,\nand open the way for improving the per project\npolicy.json files.\n\nChange-Id: I133a5953d209bc1edbd03ecfae750f77e3eaa64d\nRelated-Change: https://review.openstack.org/#/c/242232\n" }, { "commit": "0a2a7ae8471575d887a19b9bf8b7375ea1fd7f45", "tree": "977032b3a1b9f2c880fb3f1febf78e18bdb4318b", "parents": [ "467dbf7703076803f14bca2e67a7125df83122ec", "8ff298a8715d39d8ac260afba1593b6ecf95b0ce" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Mar 18 20:24:03 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Mar 18 20:24:03 2016 +0000" }, "message": "Merge \"Updated deprecated keystone_authtoken option\"" }, { "commit": "198887e8903696ea9fcbec0f8a91c2f6ca5a34c7", "tree": "6b51935d0e1545f197184153c21fe084b5c154dd", "parents": [ "aeb1e4d4bb5f77aac23cd041e0b37e5e17a85e23" ], "author": { "name": "Ihar Hrachyshka", "email": "ihrachys@redhat.com", "time": "Fri Apr 10 18:45:35 2015 +0200" }, "committer": { "name": "Ihar Hrachyshka", "email": "ihrachys@redhat.com", "time": "Thu Mar 17 13:09:56 2016 +0100" }, "message": "logging: don\u0027t set logging format strings for keystone\n\nDon\u0027t override those format strings since the overridden\nvalues are identical to those used by oslo.log by default [1].\n\nlogging_exception_prefix is still set since it changes the logging\nformat to use TRACE label for exceptions instead of default ERROR.\n\n[1]: https://git.openstack.org/cgit/openstack/oslo.log/tree/oslo_log/_options.py?id\u003dc47a91dbbb586c27d8521b1016bf7901c47b1c90#n110\n\nCloses-Bug: #1433687\nChange-Id: Ibd11cd6b0defb6dc709dbd3e718a49fd71cce6b6\n" }, { "commit": "4921d4dbb937b8a9ca26379a33252f0bebcfb53f", "tree": "9920c0b1264991b377ef682d3b49f69efc0d42dd", "parents": [ "f0f371951f0df7b797556fd6c5f3ceb0fcc9d76c" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Feb 23 22:51:04 2016 -0600" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Thu Mar 17 12:39:49 2016 +1100" }, "message": "Use unversioned keystone endpoints\n\nInsert the unversioned keystone URLs into the service catalog. Services\nshould be able to determine the correct URL for their work from this.\n\nDepends-On: I931f0c558aafc8dfaa5519744c6e4e7fcffc3205\nChange-Id: I6171f782a1dd397720a9b2a3393b30ae5aca0cc2\n" }, { "commit": "428f86e84f4f1d5f7038e61f3cb967ee3a975aa9", "tree": "6f490fd1510910907cf9696536a7257ae8f4b265", "parents": [ "c47340efb71f44ba0967ce8f8b64fec96bc617ff", "4abcfaa86e7bb8827bc1b8b0e48352a0b748446f" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Mar 15 01:01:16 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Mar 15 01:01:16 2016 +0000" }, "message": "Merge \"uwsgi keystone under master process\"" }, { "commit": "c47340efb71f44ba0967ce8f8b64fec96bc617ff", "tree": "a61a710f96d4f317228d93f9c3d35439360ddd3e", "parents": [ "44177fabc3b92b409c70a1cdf1e759679eb1edae", "0d38e2d5d87e98552692f4c177df3a216bfac9dd" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Mar 15 01:01:08 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Mar 15 01:01:08 2016 +0000" }, "message": "Merge \"Cleanup duplication in keystone uwsgi options\"" }, { "commit": "4b56bc3507ac9c6f953ec3d94a103ac2bfa89915", "tree": "5bd06957144b4ecab6493ce92d04a0f31c6ae73b", "parents": [ "082399ef18106bc3820848b6fc352604f0fcf97a", "32bf2c4f6f36dbe6e0b68143810b0f4e5b5ae3b8" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Mar 14 21:03:08 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Mar 14 21:03:08 2016 +0000" }, "message": "Merge \"Use extended keystone-manage bootstrap parameters\"" }, { "commit": "4abcfaa86e7bb8827bc1b8b0e48352a0b748446f", "tree": "047ff560599d721d56514409f134119091ec19e6", "parents": [ "0d38e2d5d87e98552692f4c177df3a216bfac9dd" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Mar 11 08:30:05 2016 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Mar 14 14:38:55 2016 -0500" }, "message": "uwsgi keystone under master process\n\nNormally a standalone uwsgi server would run in \"master\" mode -- it\nhandles signals to reload the processes. I tried this originally\nwith keystone but found that the server didn\u0027t shut down when\nunstacking. The reason it didn\u0027t shut down is because (by default)\nuwsgi does a reload on SIGTERM \u0026 SIGHUP rather than shutting down by\ndefault, see [1].\n\nSetting \"die-on-term \u003d true\" \u0026 \"exit-on-reload \u003d true\" changes the\nuwsgi server to shut down when unstacking.\n\n[1] http://uwsgi-docs.readthedocs.org/en/latest/Management.html#reloading-the-server\n\nChange-Id: I145fef185d4a31078295941779e175b7452a5760\n" }, { "commit": "0d38e2d5d87e98552692f4c177df3a216bfac9dd", "tree": "ee7cde4ffe8f3f945ba1dcc7b949bd7f63b9b4c3", "parents": [ "082399ef18106bc3820848b6fc352604f0fcf97a" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Mar 14 13:57:01 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Mar 14 14:38:55 2016 -0500" }, "message": "Cleanup duplication in keystone uwsgi options\n\nThere was a lot of duplication in the uwsgi options between the\nadmin and public config files. The options common to both are\nmoved into their own section.\n\nChange-Id: I5519c7d4d8b8446a7a5fdb8033852655d8a2c67b\n" }, { "commit": "84f6c0fa6838ffa06aafb17c460a3990c10f4443", "tree": "6c55fe27a052417f8e07f6309ff6ea5e2fbcccdd", "parents": [ "3ccb79ecea221a91393d41d43186b425ff0a0c4d" ], "author": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Fri Mar 11 22:37:27 2016 -0500" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Fri Mar 11 22:39:12 2016 -0500" }, "message": "remove the keystone bash completion install step\n\nkeytone has removed it\u0027s CLI and will release a new version\nwhen Newton begins. As part of the removal process we also\nneed to remove the bash completion script, which is currently\nfailing devstack gates.\n\nChange-Id: I132b862bde5b4173bf34beae12a7a882f5a96314\n" }, { "commit": "8ff298a8715d39d8ac260afba1593b6ecf95b0ce", "tree": "8b3172261521414c18386953eeed566ede209f6f", "parents": [ "03cf3ce902daa5b53151cd2b8663f4e5533e3177" ], "author": { "name": "Ronald Bradford", "email": "ronald.bradford@gmail.com", "time": "Tue Mar 08 15:19:48 2016 +0000" }, "committer": { "name": "Ronald Bradford", "email": "ronald.bradford@gmail.com", "time": "Tue Mar 08 18:59:44 2016 +0000" }, "message": "Updated deprecated keystone_authtoken option\n\n* memcache_servers is a deprecated name for memcached_servers.\n See: keystonemiddleware/auth_token/__init__.py#n287\n\nNOTE: memcache_serves in the cache section is valid option for\n oslo.cache. See oslo_cache/_opts.py#n65\n\nDepends-on: Id65f1bff8e38c777fa406d88ac6a2355d6033d94\nChange-Id: I3e1230b139e710a0433e71ce118ca246d7c6a0e6\n" }, { "commit": "32bf2c4f6f36dbe6e0b68143810b0f4e5b5ae3b8", "tree": "7167080e22f197dd5e1babbddc0a046e2b6416f0", "parents": [ "03cf3ce902daa5b53151cd2b8663f4e5533e3177" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Mar 08 12:24:52 2016 +1100" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Mon Mar 07 20:49:13 2016 -0600" }, "message": "Use extended keystone-manage bootstrap parameters\n\nUse the additional keystone-manage parameters to setup the identity\nendpoint in the service catalog rather than manually fetching a token\nfor this.\n\nChange-Id: I6f5be1df205dee8f3251b4eb413e00ae64f00f07\n" }, { "commit": "b01a3c3bafba743a80cc9288fff807dd7f15ed4e", "tree": "206786e2709275ec264f1eb1fe97c0c17c7adcf4", "parents": [ "c6b5fe3c727ab94a090c963bf501141efea21d34", "50f75a9f64efc00e17028c780b6df261fc2c27ec" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Feb 25 00:55:54 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Feb 25 00:55:54 2016 +0000" }, "message": "Merge \"Followup comment fix from alt_demo user creation\"" }, { "commit": "6bb429359d4f1c8d2fe814c7cc90cc469cc1f5bd", "tree": "a10f25bd2809882a198c65ebf1fe91db86f69624", "parents": [ "0515ff0912d5047d24afcc86d49a8e9be71ace6d", "d8589fa01a57feccc2d20a72307098b7e3eeb1d3" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Feb 24 19:35:53 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Feb 24 19:35:53 2016 +0000" }, "message": "Merge \"Fix uwsgi keystone\"" }, { "commit": "13fe6f59d1b6d209bf770b0959d408ee1a8fb659", "tree": "69dae50b08d9c049e157a5574c9f0c21f141875f", "parents": [ "ecc7d273db14e8d8c364305dcb566f18a4b3f16a" ], "author": { "name": "Mehdi Abaakouk", "email": "sileht@redhat.com", "time": "Tue Feb 23 12:57:02 2016 +0100" }, "committer": { "name": "Mehdi Abaakouk", "email": "sileht@redhat.com", "time": "Tue Feb 23 13:04:12 2016 +0100" }, "message": "Fix telemetry integration gate jobs\n\nSince https://review.openstack.org/#/c/281779/2 have been\nmerged the telemetry integration job is broken.\n\nUnfortunatly, it can\u0027t be fixed on our side, because we have to\nrename SERVICE_TENANT_NAME in many devstack plugin, we can\u0027t merge thing\nuntil all plugins have been fixed.\n\nSo this change restores SERVICE_TENANT_NAME, to be able to switch to SERVICE_PROJECT_NAME.\n\nRelated-bug: #1548634\nChange-Id: I14ebf23aa63f0f153b934ad213a6209d22e73e9d\n" }, { "commit": "d8589fa01a57feccc2d20a72307098b7e3eeb1d3", "tree": "b8d895079e6bf3def98528c2fb5e8012de9e1cfc", "parents": [ "2688eedc51fc7b4ef0a5332c1aafce8a557928da" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 22 13:49:52 2016 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 22 13:59:34 2016 -0600" }, "message": "Fix uwsgi keystone\n\nThe uwsgi keystone jobs are failing with an error like\n\n + devstack/functions-common:_run_process:L1391: setsid uwsgi /etc/keystone/keystone-uwsgi-admin.ini\n + devstack/functions-common:_run_process:L1395: exit 0\n execvp: No such file or directory\n\nI think this is because uwsgi isn\u0027t installed on the images. The fix\nis to pip install it.\n\nAlso, use the full path to the uwsgi executable (even though execvp\nis used) because eventlet (calling keystone-all) does.\n\nAlso, the uwsgi process wasn\u0027t shutting down on ./unstack.sh. This\nis worked around by not running master process.\n\nChange-Id: Id02e16c5149ba3dfa13051e87cfccd8e505b7362\n" } ], "next": "7580a0c3e37932a8fc03750d35ccd4e13e18f8c4" }