)]}' { "log": [ { "commit": "27f66e9830727addd3d84b7a23eee907210540bb", "tree": "ef891a1ffcc1321235153d6f3675d3a3d12996d1", "parents": [ "8b8441f3becbae2e704932569bff384dcc5c6713" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue May 02 09:08:17 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue May 02 09:24:45 2017 -0400" }, "message": "Fix logging when under systemd\n\nBoth keystone and neutron didn\u0027t yet have systemd awareness for\nsetting up logging (i.e. drop the extra date / time stamps)\n\nChange-Id: Ib442c603c9afb679676976c37c2c6122201ae846\n" }, { "commit": "803acffcf9254e328426ad67380a99f4f5b164ec", "tree": "446e385dd3423422407506a7b3d40bc709816ef8", "parents": [ "7fe9e784c6128ad686ad47909c38e990b57c253c" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon May 01 10:52:38 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue May 02 06:20:22 2017 -0400" }, "message": "Make ./clean.sh work in more situations\n\nWhen transitioning between different wsgi modes, or service modes, we\nshould really safely stop and cleanup things that are started in any\nservice mode, which makes it easier to ensure that we don\u0027t leave\nthings around from past runs.\n\nChange-Id: I33acbee39e1a2da2bfd79a5dd54b84a12a778be1\n" }, { "commit": "bb4431126b80be4805f1072442676797e6019576", "tree": "df0cfee5b58ba9c5e36e523e743ae2ae394addb6", "parents": [ "38d4782c9f6b8558fea2c5268b9bf5de5070a0fe" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Apr 19 16:22:42 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon May 01 09:12:18 2017 -0400" }, "message": "Try to remove /identity_admin\n\nWe should be able to operate without the identity admin endpoint,\ngiven that in v3 it\u0027s all the same. This floats that out there to see\nif we can or not.\n\nChange-Id: Ic233f6b43dd1e3cfdadff0f18aba4ea78825a996\n" }, { "commit": "38d4782c9f6b8558fea2c5268b9bf5de5070a0fe", "tree": "2b5221b6d4fbded1a8031834903078f80aefc4d1", "parents": [ "fa898f5174e3aff9c65366024c170ce3cdda306d" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Apr 19 16:12:00 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon May 01 09:09:35 2017 -0400" }, "message": "remove auth_uri from keystonemiddleware config\n\nauth_uri is not a keystonemiddleware option, and it\u0027s use in config\nfiles is confusing at best. Remove it for clarity.\n\nChange-Id: Ie3a9ab30d81809363444d5f3b41588b3889dc185\n" }, { "commit": "6ed53156b6198e69d59d1cf3a3497e96f5b7a870", "tree": "07c09ef525734b2b3c3fa7fc1e3b8e5bd0c6869a", "parents": [ "64ffff9b7d79b9e75616cf43f9f7b31c89026f30" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Apr 13 13:33:16 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Apr 17 16:27:35 2017 -0400" }, "message": "Convert keystone to use uwsgi with the proxy\n\nThis makes keystone use the proxy uwsgi module when running in uwsgi\nmode. It also introduces a new stackrc variable which is WSGI_MODE\nthat we can use to control the conditionals in services that current\nwork with mod_wsgi.\n\nAlso update retry timeouts on proxy pass so that workers don\u0027t disable\ntheir connections during polling for initial activity.\n\nChange-Id: I46294fb24e3c23fa19fcfd7d6c9ee8a932354702\n" }, { "commit": "f3b2f4c85307b14f115a020f5eaf6c92026b55b4", "tree": "1f9180b6b7271a9b232bf08145ad37308fbee219", "parents": [ "2f8c88e0532b6b712cc386a9c15d833d3629b19a" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Apr 13 10:11:48 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Apr 17 07:27:32 2017 -0400" }, "message": "Remove USE_SSL support\n\ntls-proxy is the way we\u0027re now doing a standard install using https\nbetween services. There is a lot more work to make services directly\nhandle https, and having python daemons do that directly is a bit of\nan anti pattern. Nothing currently tests this in project-config from\nmy recent grepping, so in the interest of long term maintenance,\ndelete it all.\n\nChange-Id: I910df4ceab6f24f3d9c484e0433c93b06f17d6e1\n" }, { "commit": "2f8c88e0532b6b712cc386a9c15d833d3629b19a", "tree": "157ac93c5e2b9f35f1adcd6f145467032f60c4bd", "parents": [ "2b85cf0f06b099f9a771e9fbdbdef173c9d04784" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Apr 13 09:08:39 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Fri Apr 14 15:41:02 2017 -0400" }, "message": "Factor out code to write uwsgi config files\n\nInstead of this code all existing in keystone inline, factor out into\na dedicated set of functions, and make keystone use this. This drops\nuwsgi supporting https directly, but that\u0027s not going to be a\nsupported model going forward once we get to proxy only anyway.\n\nChange-Id: I1d89be1f1b36f26eaf543b99bde6fdc5701474fe\n" }, { "commit": "9c5ffd8d132866bd6120696e138e5b7b42dc3f23", "tree": "7cb1207cdf582a8ecb265a708335120c93405c82", "parents": [ "def07b21f86ee70cae223785f0195c91de1f2b64" ], "author": { "name": "Matthew Treinish", "email": "mtreinish@kortar.org", "time": "Wed Mar 29 16:47:57 2017 -0400" }, "committer": { "name": "Matthew Treinish", "email": "mtreinish@kortar.org", "time": "Mon Apr 03 12:38:29 2017 -0400" }, "message": "Handle uwsgi on systemd properly\n\nuwsgi is a different service type under systemd and shouldn\u0027t be run as\na standard oneshot type. The uwsgi docs outline a good pattern for\nwriting systemd unit files:\n\nhttp://uwsgi-docs.readthedocs.io/en/latest/Systemd.html\n\nThis commit takes those suggestions and creates a separate path for\nwriting uwsgi unit files.\n\nChange-Id: I9b541b86781afdded311dba058cedd783e1a0dfa\n" }, { "commit": "370c525061df5cdcdc714fe1064967230604b46e", "tree": "fac088d804d9cf002778320c7db98ffafcc313fa", "parents": [ "6fbd969c85adb53b82457a3fcf879c2b268103bf", "213c9a151f907988b283e4223404d0a09a5d4aa3" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Mar 29 17:45:08 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Mar 29 17:45:08 2017 +0000" }, "message": "Merge \"Remove installation of keystone policy file\"" }, { "commit": "213c9a151f907988b283e4223404d0a09a5d4aa3", "tree": "9a21ab7e214a8141e3d945639498ee56be1a2c07", "parents": [ "4a857e85f4e5f5fed732924ec20b31512759c7fd" ], "author": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Tue Mar 28 14:32:28 2017 +0000" }, "committer": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Tue Mar 28 14:35:09 2017 +0000" }, "message": "Remove installation of keystone policy file\n\nAs of Id6e3c0ac54b21d85e68625a5b52fe2559fb70f24 keystone\u0027s policy\nfile is empty and it is no longer required at runtime. This commit\nupdates devstack to not deploy a policy file for keystone because\ndevstack doesn\u0027t specify any policy overrides. Instead, we can remove\nthe sample policy file and rely on the defaults that have been\nregistered in code. This is the same approach nova took with policy\nin I85a251376dfe38caa4b100861bf764014a98bc37.\n\nChange-Id: Ib1d9a51a78e2a84a3d7294dc8782605a681fa9e8\n" }, { "commit": "5edae54855b6b9af4283cef07e0b0d1a0f90cd3e", "tree": "38a1c4516ffc6f472f455363fac5bd24c5b65425", "parents": [ "fb73a8fc6fa8cdc826b10c47490bc47cd0e6776a" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Mar 21 20:50:24 2017 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Mar 28 07:19:15 2017 -0400" }, "message": "initial work to enable systemd service running\n\nDuring the PTG there was a discussion that the screen developer\nworkflow wasn\u0027t nearly as useful as it once was. There were now too\nmany services to see them all on one screen, and one of the most\ncommon service restart scenarios was not restarting one service, but a\nbunch to get code to take effect.\n\nThis implements a 3rd way of running services instead of direct\nforking via bash, or running under screen, which is running as systemd\nunits.\n\nLogging is adjusted because it\u0027s redundant to log datetime in oslo.log\nwhen journald has that.\n\nSwift needed to have services launched by absolute path to work.\n\nThis is disabled by default, but with instructions on using it. The\nlong term intent is to make this the way to run devstack, which would\nbe the same between both the gate and local use.\n\nSome changes were also needed to run_process to pass the run User\nin. A hack around the keystone uwsgi launcher was done at the same\ntime to remove a run_process feature that only keystone uwsgi uses.\n\nChange-Id: I836bf27c4cfdc449628aa7641fb96a5489d5d4e7\n" }, { "commit": "7a30c7fcabac1cf28fd9baa39d05436680616aef", "tree": "c29c72bd0f8a1290dd2c232b4f71919de33dec36", "parents": [ "42a914cadfb3ea63dc87d3b5f9a17cf6265728cb", "ee37d20f80d3a4871edd17a16c12e8ea5f0afadf" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Feb 21 23:04:49 2017 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Feb 21 23:04:49 2017 +0000" }, "message": "Merge \"pass role by name not id\"" }, { "commit": "bfff93e1568a236be26a8e6c67e758b877f55a2a", "tree": "9dd7009ba232c97db7c140a674ea0bb32974d5dd", "parents": [ "11eb2017ef70a758c54cc984e90e445205886e7e" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Feb 13 16:18:08 2017 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Feb 13 16:18:08 2017 -0500" }, "message": "remove keystone internal uri\n\nThere is really no reason to have an internal uri referenced for\nkeystone in devstack.\n\nChange-Id: If0588a0ab512d94451992e7131dd3c8a33c5797c\n" }, { "commit": "ee37d20f80d3a4871edd17a16c12e8ea5f0afadf", "tree": "cd8d091500bdb1c53164f67a5104f05b4f969726", "parents": [ "7eef546f8a471a3709ff099955787d444e43eadf" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Feb 08 11:24:31 2017 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Feb 13 14:06:03 2017 +0000" }, "message": "pass role by name not id\n\nChange-Id: Ie67758bed3563c9a46a5180eaa9c8d47721fffd8\n" }, { "commit": "b6753cea8cd0e07d982048d2f856c6168fc74a92", "tree": "75df66abe710f6267911628fd1e380169ac84fd1", "parents": [ "df09c433867a9ce204d1b14807cb5510c0bd0385" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Apr 05 11:52:44 2016 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Fri Jan 20 10:48:20 2017 -0500" }, "message": "simplify colorized logging setup\n\nThis makes setup_colorized_logging be a thing which takes a single\nparameter and doesn\u0027t let projects do things differently. It also\nchanges the order of values from user / project to project / user to\nrepresent the hierachy more clearly.\n\nChange-Id: I8c0ba7da54be588e3e068734feb4f78ed7c5a14a\n" }, { "commit": "b51a8862b1f80a947815094148bc229ba3d58ae1", "tree": "f4bd64a0f5a1b8ce82b44124953deb0a73dca32d", "parents": [ "281c5c22ce7f4e7d367f689488e15ad77695a183" ], "author": { "name": "Rodrigo Duarte", "email": "rduartes@redhat.com", "time": "Mon Sep 26 15:22:35 2016 -0300" }, "committer": { "name": "Rodrigo Duarte Sousa", "email": "rduartes@redhat.com", "time": "Thu Jan 05 16:06:39 2017 -0300" }, "message": "Adds keystone security compliance settings\n\nThe PCI-DSS feature has been introduced during the Newton\nrelease and its settings are disabled by default. This\npatch adds the possibility to enable some of them during\nDevStack setup.\n\nChange-Id: If6b5eb3e3cbc43eb241c94d18af80ad50be08772\nDepends-On: Id97ca26f93b742cc3d8d49e98afc581f22360504\n" }, { "commit": "29890549929b4f2ab9dd5c96d0a857708c683997", "tree": "1bdcc8dcd94a15c7d819c5eecaa946a03836237d", "parents": [ "be7fae041fa99df137694cc195b2ad24a3c90f76", "ea3e87d4e5a7a23870e86bbe133064a99e9519cf" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Dec 22 19:25:40 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Dec 22 19:25:40 2016 +0000" }, "message": "Merge \"Add new parameter RECREATE_KEYSTONE_DB\"" }, { "commit": "ea3e87d4e5a7a23870e86bbe133064a99e9519cf", "tree": "efce98e842882f83bfa3cebcd3fe3fe63d1c3423", "parents": [ "c95ca63ae3acdc3ebc36ab4efdfd874993ce72cc" ], "author": { "name": "Julia Varlamova", "email": "jvarlamova@mirantis.com", "time": "Fri Dec 16 14:39:31 2016 +0400" }, "committer": { "name": "Julia Varlamova", "email": "jvarlamova@mirantis.com", "time": "Fri Dec 16 14:41:55 2016 +0400" }, "message": "Add new parameter RECREATE_KEYSTONE_DB\n\nIf \u0027RECREATE_KEYSTONE_DB\u003dFalse\u0027 database won\u0027t be recreated.\nIt would be useful for multinode Grenade tests for Keystone. This parameter\nwill help us to deploy multiple services on different machines talking to\nthe same DB.\n\nDevstack recreates Keystone DB each time during Keystone service installation.\nIf our controller node is already deployed, Keystone DB already contains\nimportant information about OpenStack services and their endpoints. When\nthe second Keystone node is being deployed, we don\u0027t want to delete\nrecords about controllers\u0027 services endpoints.\n\nPartially-Implements: bp rolling-upgrade-testing\n\nChange-Id: Ia8d07b4295ca165be01e44466c95d5275f596e83\n" }, { "commit": "7f68548538a5855cff8fe1debf4e65ff74074e09", "tree": "d9a45370651ba74fd4b213d4de4a0831d349534f", "parents": [ "c95ca63ae3acdc3ebc36ab4efdfd874993ce72cc" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Dec 13 15:47:11 2016 +1100" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Dec 13 15:47:11 2016 +1100" }, "message": "Always add the service role to service users\n\nWhen creating a service user we allow the user to be created with a\ndifferent role. Currently in auth_token middleware we want to check that\nthe service token is specified with the service role so we should always\nadd the service role and optionally add additional roles.\n\nChange-Id: Ie954a679674b4795079b539ebc8d4d2dcbd7dacc\n" }, { "commit": "ee548bc2bf409cffd4d131e5d6cf481704e50d89", "tree": "8b7d937e0d1a0878f092f138e1b6ce6094dfe643", "parents": [ "c18b804b161647452283a243b9c55eb14a416d26", "a1e1f5128a22a7d0cdc8136063d27d64c270021d" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Dec 02 15:27:47 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Dec 02 15:27:47 2016 +0000" }, "message": "Merge \"Add keystone VirtualHost for port 443 when USE_SSL is True\"" }, { "commit": "a3bb131c138859367f4529720121fd3eb8e239fd", "tree": "f71f4d7e8bc3f4290862af0ef966a2e4fbb22465", "parents": [ "9513f8ea39b811105fefc2177f05b3bc37642e96", "fb73d85afe7df7b93b9a460372a8ad6558e887e0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Nov 23 02:16:07 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Nov 23 02:16:07 2016 +0000" }, "message": "Merge \"Remove unused KEYSTONE_CATALOG_BACKEND\"" }, { "commit": "7976f31fb956dcb1cbeea92906f5609f0b43acc4", "tree": "c289d737eea71f9e86a339433471c2e3b551b86a", "parents": [ "29d13df1a284f8f1a5973ccc826a475156820d23", "4440da85637aa8239f24bd4f23a9a8e1ac2d0b8d" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Nov 16 00:04:44 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Nov 16 00:04:44 2016 +0000" }, "message": "Merge \"Unset admin_project config options for Keystone\"" }, { "commit": "dc486bc12fb63ecb5939f8d29dd9cf7a659847cd", "tree": "ac8fae3feb3e8796c271aacbb4d783ea0cac3793", "parents": [ "1f84d457577162421bfd2de63bd83d80c123a32f" ], "author": { "name": "Steve Martinelli", "email": "s.martinelli@gmail.com", "time": "Thu Sep 08 02:29:25 2016 +0000" }, "committer": { "name": "Steve Martinelli", "email": "s.martinelli@gmail.com", "time": "Mon Oct 31 14:57:11 2016 +0000" }, "message": "Switch fernet to be the default token provider\n\nthis is the first patch in a series to actually make fernet the default\ntoken provider in keystone. the patches for grenade, release notes, and\nactually switching the value in keystone all depend on this patch first.\n\nreasons for switching over:\n\n- fernet tokens are the recommended token provider\n- the install guide for newton recommends deployers use fernet tokens [0]\n- we previously attempted this switch but ran into timing issues [1],\n the timing issues have been resolved [2]\n\n[0] http://docs.openstack.org/newton/install-guide-ubuntu/keystone-install.html\n[1] 153db269705f37d4144ad3fcf26dc67269755d7d\n[2] https://review.openstack.org/#/q/topic:make-fernet-default\n\nChange-Id: I3b819ae8d2924f3bece03902e05d1a8c5e5923f1\n" }, { "commit": "fb73d85afe7df7b93b9a460372a8ad6558e887e0", "tree": "e586014b546db1081d1d823ca34cf93a0e0a3de1", "parents": [ "e0fdcd5ff2c238a4e47c409e19922350fa27dc33" ], "author": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Fri Oct 28 02:03:37 2016 -0700" }, "committer": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Fri Oct 28 02:03:37 2016 -0700" }, "message": "Remove unused KEYSTONE_CATALOG_BACKEND\n\nThis patch simply removes a var noted to be removed back in Newton.\n\nChange-Id: I7c66e1d8d65f562596543ed8ca402dba8c8ea271\n" }, { "commit": "7b07ccf5e4b7f724eceedb069a51c29284b357aa", "tree": "6eb5588e1438f6d4d46015ff30b0cfc16ba5fb16", "parents": [ "e0fdcd5ff2c238a4e47c409e19922350fa27dc33" ], "author": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Thu Oct 27 06:14:00 2016 -0700" }, "committer": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Thu Oct 27 16:24:16 2016 +0000" }, "message": "Remove deprecated/obsolete ldap options\n\nThe devstack ldap configuration for keystone is still using some\nold options that are no longer valid. The write support is\nbeing removed this release. And in previous releases, the ldap\nassignment driver support was removed and was not removed here.\n\nChange-Id: I538626b681eaee6a7ac10dfbc29605b73fbe13bf\n" }, { "commit": "4440da85637aa8239f24bd4f23a9a8e1ac2d0b8d", "tree": "b8312c2aa45e11a93c22d618d9957993002524d8", "parents": [ "e0fdcd5ff2c238a4e47c409e19922350fa27dc33" ], "author": { "name": "Adam Young", "email": "ayoung@redhat.com", "time": "Wed Oct 26 11:40:08 2016 +0200" }, "committer": { "name": "Adam Young", "email": "ayoung@redhat.com", "time": "Wed Oct 26 11:40:08 2016 +0200" }, "message": "Unset admin_project config options for Keystone\n\nUntil the policy changes land for Nova, Glance, etc, this\nvalue is not used. Additionally, by having it set, it actually\nmakes it hard/impossible for the required changes to land in\nthe other services. Disable/comment out the changes in the\nKeystone specific lib file for now, and we will re-enable once\nthe Services can make use of them.\n\nChange-Id: Ia1de9083c21107dac2f0abb56bda166bdb37a69d\n" }, { "commit": "ec498cd0619805c409b28f81c6a7bcd3a01136ed", "tree": "382b7e923491ae169dc3b004ed5d0cb39a766736", "parents": [ "7480276f5e83e1d29371c402f8500098ce1871c2" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Oct 06 15:00:44 2016 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Oct 06 15:00:44 2016 -0400" }, "message": "remove sites-enabled/keystone.conf link on clean\n\ndoing a clean.sh / stack.sh cycle with USE_SSL\u003dTrue was failing\nbecause we were no longer cleaning up the keystone site fully, so some\nof the early mod_ssl queries hit an invalid apache configuration.\n\nChange-Id: Ic6f3f601e532ec50c0234d928c25b378d9e95e32\n" }, { "commit": "792a7ab31f0553435c02bb230b2c60833eb58c8e", "tree": "cdc1947f07a386958a85632984f0d85236f6bdf6", "parents": [ "65fc49e283cfd3d2a130fe85bd6ceafed1ba040f", "04e69de6c513e1cddaaa74eb2ff428a5db4d223b" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 26 20:39:11 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 26 20:39:11 2016 +0000" }, "message": "Merge \"Mount identity admin script at /identity_admin\"" }, { "commit": "e18d6fae7256ab33c734fdf763fae261c3b7c979", "tree": "c472107383adc1b8730365fcd79200d361953a37", "parents": [ "590e21f9a48cac3887bc3eb33eb76a8603dff253", "0a318ab8a6ede38a330b5bff10479772ab4776f0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 26 16:54:00 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 26 16:54:00 2016 +0000" }, "message": "Merge \"Switch keystone to dogpile.cache.memcached backend\"" }, { "commit": "590e21f9a48cac3887bc3eb33eb76a8603dff253", "tree": "c39c5e647ae7605a8992655f48e1cdbfad6f50c2", "parents": [ "fdd6dfa5190b801a5208cad5e99c9dff75f6800e", "542abbab3bc58c40a499531165943df4bf2e4ab0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 26 16:53:52 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 26 16:53:52 2016 +0000" }, "message": "Merge \"Keystone uwsgi set lazy-apps\u003dtrue\"" }, { "commit": "04e69de6c513e1cddaaa74eb2ff428a5db4d223b", "tree": "0584e3049c750a2f72876ffed8dbf3dae1f03fdc", "parents": [ "7957489003137280aaa20415f5dc601a8276181e" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Wed Jul 27 08:05:05 2016 +1000" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Sep 26 14:44:40 2016 +0000" }, "message": "Mount identity admin script at /identity_admin\n\nThe /identity_admin endpoint is the port 80/443 equivalent of the\nservice that typically runs on port 35357. In v2 some operations must be\nperformed on the admin endpoint whereas on v3 the services on 5000 and\n35357 are exactly the same. This would be why the service was mounted at\n/identity_v2_admin however that is misleading because both the v2 and v3\nservices are present on that endpoint.\n\nThis is particularly confusing because we set this as the OS_AUTH_URL\nendpoint and it makes it seem like we are doing v2 authentication when\nwe are not.\n\nChange-Id: If73735026079fb19ca5bd44b3a4dc1f507b5c99d\n" }, { "commit": "a2d18484195e700f28e0b7cca1a29e20d9d369b0", "tree": "d14dadbfb1bad781fffe1f8047d7d03831e5d0ca", "parents": [ "81d89cf3584a5edadbaa2514305cf5721b29cdff", "4b49e409f853104dae021dfca1a9342ec9ac4709" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Sep 21 18:19:40 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Sep 21 18:19:40 2016 +0000" }, "message": "Merge \"Use apache for tls-proxy ssl termination\"" }, { "commit": "4b49e409f853104dae021dfca1a9342ec9ac4709", "tree": "dc27f7ff83839baa55b459ca4aa2230c4ed19439", "parents": [ "fb1e1cc7e3de4483de48661b03a4417e2d24957a" ], "author": { "name": "Gregory Haynes", "email": "greg@greghaynes.net", "time": "Wed Aug 31 18:19:51 2016 -0700" }, "committer": { "name": "Clark Boylan", "email": "clark.boylan@gmail.com", "time": "Tue Sep 20 08:14:11 2016 -0700" }, "message": "Use apache for tls-proxy ssl termination\n\nStud is now abandonware (see https://github.com/bumptech/stud) and is\nnot packaged in xenial. Lets use Apache for SSL termination since its\nthere already.\n\nChange-Id: Ifcba410f5969521e8b3d30f02795541c1661f83a\n" }, { "commit": "b74fc6886ff7b373644f886238118dd0c34046f2", "tree": "f19f62eb1f6379f38a260ff909a922db081fc443", "parents": [ "fac8adbe1b2bdd2bae105228eb7acf2dd3f30da7", "eb77eef8a57f8a4d012d8bee316e56b1764919de" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Sep 08 00:59:33 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Sep 08 00:59:33 2016 +0000" }, "message": "Merge \"Keystone re-enable catalog caching\"" }, { "commit": "eb77eef8a57f8a4d012d8bee316e56b1764919de", "tree": "696eb03d77b4b3d83f0b126754ab3aeafe73c74b", "parents": [ "fb1e1cc7e3de4483de48661b03a4417e2d24957a" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 16:26:17 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 16:26:30 2016 -0500" }, "message": "Keystone re-enable catalog caching\n\nCatalog caching was disabled due to bug 1537617, but this has been\nfixed for some time. Re-enabling to get some performance back.\n\nChange-Id: Ic0edf5c70a5040edf3393dbd1e110ab5fb56c110\nRelated-Bug: 1537617\n" }, { "commit": "542abbab3bc58c40a499531165943df4bf2e4ab0", "tree": "73be70c316843a6b25813cf99b27446d24dcb5e5", "parents": [ "a270f5e242f2532389395abfe49eb6780b50a0db" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 15:47:56 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 15:47:56 2016 -0500" }, "message": "Keystone uwsgi set lazy-apps\u003dtrue\n\nKeystone had a problem where there was a memcached socket\nopened very early on startup which then got shared between\nworker processes when running under uwsgi. This can be\nprevented by setting lazy-apps so this is the recommended\nsetting.\n\nSee http://uwsgi-docs.readthedocs.io/en/latest/ThingsToKnow.html\n\n\"\"\"uWSGI tries to (ab)use the Copy On Write semantics of the\nfork() call whenever possible. By default it will fork after\nhaving loaded your applications to share as much of their\nmemory as possible. If this behavior is undesirable for some\nreason, use the lazy-apps option. This will instruct uWSGI to\nload the applications after each worker’s fork(). Beware as\nthere is an older options named lazy that is way more invasive\nand highly discouraged (it is still here only for backward\ncompatibility) \"\"\"\n\nChange-Id: I6f271dc906528f0c86060452deaf15df81b267d2\nRelated-Bug: 1600394\n" }, { "commit": "69d4a71dfe86e8111101dcd1bcf5a4138a7956a4", "tree": "6d5725177c1eaf19398aae838baccc7941a91238", "parents": [ "61be14d2993f84364c47956036bd95a97d2c7725" ], "author": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Sat Aug 27 01:01:37 2016 +0000" }, "committer": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Mon Aug 29 21:18:47 2016 +0000" }, "message": "Allow setup of credential encryption using fernet\n\nWith the addition of encrypted credential in keystone, we need to be able to\nadd setup steps in devstack to configure the credential repository with\nencryption keys.\n\nDepends-On: I97e7701bc5b8765d207cc721793643bcefa2d4e2\nDepends-On: Id3e8922adc154cfec5f7a36613e22eb0b49eeffe\nChange-Id: I433da9a257daa21ec3b5996b2bca571211f1fbba\n" }, { "commit": "0a318ab8a6ede38a330b5bff10479772ab4776f0", "tree": "51af38c0b78adf9717bdb98f61c50cff480052bb", "parents": [ "ecfc8a77c203c7832b8b7542342cbb8e258a7765" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Aug 18 13:50:18 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Aug 18 13:50:18 2016 -0500" }, "message": "Switch keystone to dogpile.cache.memcached backend\n\nmemcache_pool is there to keep a limited number of thread-associated\nconnections open rather than a connection for every thread. If you\ndon\u0027t have a huge number of threads it doesn\u0027t offer anything.\nKeystone is an example of a service where memcache_pool doesn\u0027t\nimprove things -- eventlet isn\u0027t supported anymore and more threads\nis not useful due to GIL.\n\nAs such, keystone cache backend is changed to dogpile.cache.memcached.\n\nSee https://review.openstack.org/357407 for the oslo.cache help text\nchange.\n\nChange-Id: I4452a8c4968073cdea4c0f384453a5a28519fa08\n" }, { "commit": "a1e1f5128a22a7d0cdc8136063d27d64c270021d", "tree": "ba77b5a196c66099d0437dd2d3b85dc621e0d9fe", "parents": [ "61b319787bbd0af7f3cc1feb71cef0bef6dab373" ], "author": { "name": "Rob Crittenden", "email": "rcritten@redhat.com", "time": "Wed Jul 20 18:12:09 2016 -0400" }, "committer": { "name": "Rob Crittenden", "email": "rcritten@redhat.com", "time": "Wed Jul 20 18:15:00 2016 -0400" }, "message": "Add keystone VirtualHost for port 443 when USE_SSL is True\n\nAdd a VirtualHost that defines the necessary options for\nenabling SSL. The existing keystone Apache configuration already\ndoes all the location handling.\n\nChange-Id: I836a471a7258f14f051d3dd8bdb428286b5a11aa\n" }, { "commit": "e88c51cc1b0aa59abbae353f3fd3c2ef58e1602a", "tree": "9229f13105c9b5c61dee83297f2f49b288f29e13", "parents": [ "45360ed32ef82adcc1685d13ef290c4867eb4fd1", "b97a60e90c46c101b6c2c9a5dbf42140bd8bb8d1" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Jun 15 01:11:46 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jun 15 01:11:46 2016 +0000" }, "message": "Merge \"Keystone uwsgi performance tuning\"" }, { "commit": "75ace7a5edbb6496633b97dc1d6b60e000ff3e5f", "tree": "f3a9b573ce864b9a019af8dbdd6403d986157156", "parents": [ "026cad84a34ff914707538470ec3ae6e2015e54b" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Tue Jun 07 17:44:06 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Tue Jun 07 17:44:06 2016 -0500" }, "message": "Correct keystone memcached host setting\n\nkeystone was configured to connect to memcached on the host IP\naddress. Unfortunately, memcached is only listening on localhost,\nso this setting actually hurts performance as keystone fails to\nconnect to the memcached server. There\u0027s no indication of this in\nthe keystone logs since this is just how memcache client works\n(ignoring errors).\n\nYou can verify this by\n1) in /etc/memcached.conf, set -vv\n2) restart memcached: service memcached restart\n3) watch /var/log/memcached.log\n4) There will be no output\n\nwith this change, there will be output in /var/log/memcached.log\n\nAlso the performance should be a lot better.\n\nChange-Id: I95d798d122e2a95e27eb1d2c4e786c3cd844440b\n" }, { "commit": "b97a60e90c46c101b6c2c9a5dbf42140bd8bb8d1", "tree": "43430eeee33b8ecd5cb49a6909651fd9748b7c74", "parents": [ "18ce57e55c736542a0f328c6cdf0f521faf5e48a" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Jun 03 15:59:11 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Jun 05 18:48:03 2016 -0500" }, "message": "Keystone uwsgi performance tuning\n\nI ran some tests locally that showed that when using the uwsgi\ndeploy the keystone server wasn\u0027t using all the processes\navailable. When I switched from \"threads\" to \"processes\" the\nconcurrent performance improved considerably. So I\u0027m proposing\nthat devstack switch to processes to improve performance.\n\nChange-Id: I8cfe9272e098e636441b7cfb51bff08d62c3336e\n" }, { "commit": "f5998b0253be5a73a068169591d9f773662d39aa", "tree": "afe9f14037e28da669c47f0519cda7f586073d6c", "parents": [ "730703a83335d9d9704023ba17a241d3d506f1a4", "841fdafa0bc542b595b267428c5d929bf0726205" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue May 24 20:13:19 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue May 24 20:13:19 2016 +0000" }, "message": "Merge \"Use path-mounted keystone when running in httpd\"" }, { "commit": "ade7898e52cd89d271cbe264e0a9fc5e4d1df785", "tree": "b1b920e3c91cc2ff50d748dfb86ffef4a553bc7f", "parents": [ "b671d83850eea7228542e14869bf13498c285545", "153db269705f37d4144ad3fcf26dc67269755d7d" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed May 18 15:35:32 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed May 18 15:35:32 2016 +0000" }, "message": "Merge \"Revert \"Switch fernet to be the default token provider\"\"" }, { "commit": "153db269705f37d4144ad3fcf26dc67269755d7d", "tree": "515c2a469c2e70f3e9da37a7c6a5f7b6edc1e748", "parents": [ "181588b9ba50fefea12617a9a5e774daddfed20c" ], "author": { "name": "Matt Riedemann", "email": "mriedem@us.ibm.com", "time": "Wed May 18 14:05:14 2016 +0000" }, "committer": { "name": "Matt Riedemann", "email": "mriedem@us.ibm.com", "time": "Wed May 18 14:05:14 2016 +0000" }, "message": "Revert \"Switch fernet to be the default token provider\"\n\nThis reverts commit 181588b9ba50fefea12617a9a5e774daddfed20c.\n\nSince this change landed on 4/29 it\u0027s been the cause of the\ntop two gate failures (besides known latent infra issues) and\nhasn\u0027t had good progress on landing a fix, so until it\u0027s a\npriority for the keystone team we need to revert this change\nto get the integrated gate jobs moving again.\n\nChange-Id: I588a84c5179eab072d21bc1394aea2df00929650\nRelated-Bug: #1577558\nRelated-Bug: #1578866\n" }, { "commit": "b671d83850eea7228542e14869bf13498c285545", "tree": "a3abcf5d39387789d58ba71fb92e8beeb08b8fee", "parents": [ "f5db32dfdb57a4e9fb289047113e059dd4a35ef1", "d1c9198bbe0e90717a9e70c662b806841bc82564" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed May 18 13:42:43 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed May 18 13:42:43 2016 +0000" }, "message": "Merge \"Change the domain name in keystone.conf\"" }, { "commit": "a8980996340d79bc6fc5a1d5545f3ff6c5709eab", "tree": "eedd1924ef381354ce355eab97f6a593ac9d8462", "parents": [ "3a2e534047afa8116fb261438aea50ce61ac3553", "4f55c2d5c384f576e45f4310595e262039fd8175" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue May 17 10:42:50 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue May 17 10:42:50 2016 +0000" }, "message": "Merge \"Set config file to db sync and other manage operation\"" }, { "commit": "0afe207cb346fe7468d073e2358abd2ad9b9d9e8", "tree": "dca739fb114dceea3ed5627a949ac1cbf3602f86", "parents": [ "4bb4728e6fd52c68faa126a36f630f3c6e9d5f6b" ], "author": { "name": "Jens Rosenboom", "email": "j.rosenboom@x-ion.de", "time": "Thu May 12 14:09:03 2016 +0200" }, "committer": { "name": "Jens Rosenboom", "email": "j.rosenboom@x-ion.de", "time": "Thu May 12 14:09:03 2016 +0200" }, "message": "Create service project in service domain\n\nWhen creating service users, the assumption is that the service\nproject lies within the service domain, so create it there.\n\nChange-Id: I4880e789f5eaf340634ceb792397eef12a5a6b51\nCloses-Bug: 1580998\n" }, { "commit": "4f55c2d5c384f576e45f4310595e262039fd8175", "tree": "06be5c649225dbd2a07d1d2673de114918f45937", "parents": [ "a5c1a930962282f105b5057c327b48a4b30a4d12" ], "author": { "name": "Einst Crazy", "email": "yu.changcai@99cloud.net", "time": "Wed May 04 08:14:01 2016 +0000" }, "committer": { "name": "Einst Crazy", "email": "yu.changcai@99cloud.net", "time": "Mon May 09 01:43:32 2016 +0000" }, "message": "Set config file to db sync and other manage operation\n\nCurrently, the db sync operation does not specify the config dir or\nconfig file.\nIf there is a config file in the home path, it will use this one,\nbut not the right one devstack write.\n\nSet config file to these operations.\n\nChange-Id: Id1fbc3d85280c19596f5ebd301c46bcf018fa2f6\nCloses-Bug: #1578098\n" }, { "commit": "d1c9198bbe0e90717a9e70c662b806841bc82564", "tree": "bf9ad3f083e3f2ee64e626186ce673ed0a7cb348", "parents": [ "a5c1a930962282f105b5057c327b48a4b30a4d12" ], "author": { "name": "Rabi Mishra", "email": "ramishra@redhat.com", "time": "Wed May 04 16:09:47 2016 +0530" }, "committer": { "name": "Rabi Mishra", "email": "ramishra@redhat.com", "time": "Wed May 04 16:11:09 2016 +0530" }, "message": "Change the domain name in keystone.conf\n\nAs we are creating a domain with id \u0027default\u0027 and name\n\u0027Default\u0027, we should iniset the correct name.\n\nChange-Id: If67338fbbd255b8aa1b91e18e4cf8213baebab95\n" }, { "commit": "841fdafa0bc542b595b267428c5d929bf0726205", "tree": "17524776a82b40151458eabc939a4803bf3156a4", "parents": [ "13b3be10a754c0e0f9fb31ce824d5f2d9cc905de" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Jun 21 10:08:22 2015 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon May 02 19:10:18 2016 -0500" }, "message": "Use path-mounted keystone when running in httpd\n\nWhen running in httpd, keystone accepts requests on /identity and\n/identity_v2_admin.\n\nThe path endpoints should be preferred over the ports so keystone\nis configured to point applications to the path endpoints by\nsetting admin_endpoint and public_endpoint.\n\nChange-Id: I34569b9e03c3f36748c92d803349e22a7ee1a633\n" }, { "commit": "5b83e986de80cffb26ac717121458545c78d6245", "tree": "5c0f36767ab08fd91ad9e3fbf5148b7e5ee1087b", "parents": [ "96ffde28b6e2f55f95997464aec47ae2c6cf91d3", "181588b9ba50fefea12617a9a5e774daddfed20c" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Apr 29 17:27:14 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Apr 29 17:27:15 2016 +0000" }, "message": "Merge \"Switch fernet to be the default token provider\"" }, { "commit": "039fc1a54205f2ba37d1d94f2b4f358901c2aa48", "tree": "e0d3197d6643b729059861c9f6dea6fd3058dffb", "parents": [ "290b6f204b2df67c4ab27e766ac70e399edbc94c", "cbcbd8f33c87904b2293e68ec9868be0b6e4393e" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Apr 20 21:49:01 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Apr 20 21:49:02 2016 +0000" }, "message": "Merge \"Allow putting service users in a seperate domain\"" }, { "commit": "181588b9ba50fefea12617a9a5e774daddfed20c", "tree": "0a7207ffdeb8ddd32aeb9c1e234d0ccf2c4d9f77", "parents": [ "6109a6b7a960bfca0afaa915a27c8d99f140ed10" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Jun 25 17:58:51 2015 -0500" }, "committer": { "name": "ayoung", "email": "ayoung@redhat.com", "time": "Tue Apr 19 19:04:37 2016 +0000" }, "message": "Switch fernet to be the default token provider\n\nUse the fernet token provider as the default for keystone.\n\n The Keystone token provider of choice is changing from UUID to Fernet.\n However, due the the need for multi-site keystone deploys to have keys\n kept in sync, we cannot change the default in upstream Keystone\n without breaking existing deployments. Fernet requires a deliberate\n setup step like what is done in devstack. Making the change in\n devstack documents the expected setup.\n\nChange-Id: I8c0db244634b0861b0eb3c48fe6ede153f7f04f2\n" }, { "commit": "cbcbd8f33c87904b2293e68ec9868be0b6e4393e", "tree": "1db9c7c8e519fd2c5991730a2ac47858b49be9b3", "parents": [ "3d0981398a898b7ed5d4cbac4121b22963ffb32f" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Thu Jan 21 16:08:14 2016 -0600" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Mon Apr 18 09:59:52 2016 +1000" }, "message": "Allow putting service users in a seperate domain\n\nMake it possible to construct the service users in their own seperate\ndomain. Changing this away from Default will not work for everyone yet,\nthough it does work for basic service interaction however enabling it\nwill allow us to start testing and hopefully gating that services aren\u0027t\nrelying on v2 only concepts.\n\nChange-Id: I7e73df5dd1caabf355783da2bc0f3007ade92fba\n" }, { "commit": "982b9911fb66d8c098442f0785972b3a3fcb1414", "tree": "a7b3d2584481717e3ec2b0e9e668d73aa0d6f364", "parents": [ "a344608ca9c5a61bad60a478fe1bbb60ecc60681" ], "author": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Thu Apr 14 07:48:24 2016 +1000" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Thu Apr 14 13:41:34 2016 +1000" }, "message": "Deprecate SERVICE_TENANT\n\nThis is a follow-on to I6f392d3c16726f6dd734184dcf3014fb4f388207 to\nnote the variable is kept for backwards compatibility.\n\nChange-Id: I1008b2d4e2baf82e1aa531d9eaf96a084beb69aa\n" }, { "commit": "2e23e641511b37d041ea2bbb2e5c969842e05aa4", "tree": "6856cdcd27a12c201fd8f87f0d4d3ce0f7b2f19b", "parents": [ "a061138535a2479fef9dcb70cd4dc261d264d623", "0b1465b6f699a974e3900fff2a810aec6a6bf43c" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Apr 13 23:35:52 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Apr 13 23:35:52 2016 +0000" }, "message": "Merge \"change tenant to project in keystone bootstrapping\"" }, { "commit": "846254620e8230d7633f6163957bc61f5473ad1e", "tree": "a4db7abff1334a0fa451f9141f87a0ed24b8c858", "parents": [ "e9820732f16386facc526d14a5150ba68da68161", "8dda061a1fc3b06675cc873681d3bdaaad98f734" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Apr 08 15:47:24 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Apr 08 15:47:24 2016 +0000" }, "message": "Merge \"Revert \"Revert \"Use unversioned keystone endpoints\"\"\"" }, { "commit": "8dda061a1fc3b06675cc873681d3bdaaad98f734", "tree": "9920c0b1264991b377ef682d3b49f69efc0d42dd", "parents": [ "da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780" ], "author": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Thu Apr 07 00:12:51 2016 +0000" }, "committer": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Thu Apr 07 17:00:37 2016 +0000" }, "message": "Revert \"Revert \"Use unversioned keystone endpoints\"\"\n\nThis reverts commit da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780.\n\nDepends-on: Id2c7e09611c1f8b06e6d272589b4ea3435b8de86\nChange-Id: I1b2a65179b5863d8bcbc5dd02b615f4e6e564213\n" }, { "commit": "2bf60959256f3da0729ba8624cb8926f4831ed89", "tree": "282ee43fd59a519dbba8adff1b4da2457191a6f4", "parents": [ "449ab1098929cfc0a3081a1f57a3404a7306a747", "da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Apr 07 00:10:16 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Apr 07 00:10:16 2016 +0000" }, "message": "Merge \"Revert \"Use unversioned keystone endpoints\"\"" }, { "commit": "da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780", "tree": "34fd88b4b52d1d3ca0edc3b9929bfddd6c45b9ea", "parents": [ "4921d4dbb937b8a9ca26379a33252f0bebcfb53f" ], "author": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Wed Apr 06 21:57:28 2016 +0000" }, "committer": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Wed Apr 06 21:57:28 2016 +0000" }, "message": "Revert \"Use unversioned keystone endpoints\"\n\nThis reverts commit 4921d4dbb937b8a9ca26379a33252f0bebcfb53f.\n\nChange-Id: Ic8888fca5d25ca6caa3f29f712db319f1d3869ba\n" }, { "commit": "4bb3e20655c0af871a50b05364175eff839863fb", "tree": "106be608ef2a76bae369484c16615858ff27648c", "parents": [ "cb1b506d9980b6a4edc2f2fdea5f6530165cf26e", "4921d4dbb937b8a9ca26379a33252f0bebcfb53f" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Apr 06 18:31:01 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Apr 06 18:31:02 2016 +0000" }, "message": "Merge \"Use unversioned keystone endpoints\"" }, { "commit": "0b1465b6f699a974e3900fff2a810aec6a6bf43c", "tree": "dff1d4bbc631cf0d9051fc671c14ba2b4992478e", "parents": [ "19dfa2af3286a6fbd8ea74dbc41a6affd2123e3f" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Apr 04 10:15:47 2016 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Apr 05 11:40:25 2016 -0400" }, "message": "change tenant to project in keystone bootstrapping\n\nChange-Id: I6f392d3c16726f6dd734184dcf3014fb4f388207\n" }, { "commit": "556eeb0d358746ed4587440093c2739fb0a57c2b", "tree": "141a76769cec2009e34083701b2317f41ff2f553", "parents": [ "74d82d9343431a53bcffd6554b6188278e61e0d9" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Mar 24 14:01:57 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Mar 24 14:01:57 2016 -0500" }, "message": "Drop keystone eventlet support\n\nKeystone has dropped support for running under eventlet (using\nkeystone-all).\n\nChange-Id: Ib38c0b1a54633a6b6dfa3a0a605cd2b02ca48989\n" }, { "commit": "9ea497539bb1e20fc2d247719f98401d5f7cd67c", "tree": "ead23f1ad29ecb90a1ecf47c2b2b95d454de7613", "parents": [ "0a2a7ae8471575d887a19b9bf8b7375ea1fd7f45" ], "author": { "name": "Attila Fazekas", "email": "afazekas@redhat.com", "time": "Tue Mar 22 15:22:03 2016 +0100" }, "committer": { "name": "afazekas", "email": "afazekas@redhat.com", "time": "Wed Mar 23 19:03:14 2016 +0100" }, "message": "Configure the admin as admin\n\nMake our usual admin user to be a real admin,\nand open the way for improving the per project\npolicy.json files.\n\nChange-Id: I133a5953d209bc1edbd03ecfae750f77e3eaa64d\nRelated-Change: https://review.openstack.org/#/c/242232\n" }, { "commit": "0a2a7ae8471575d887a19b9bf8b7375ea1fd7f45", "tree": "977032b3a1b9f2c880fb3f1febf78e18bdb4318b", "parents": [ "467dbf7703076803f14bca2e67a7125df83122ec", "8ff298a8715d39d8ac260afba1593b6ecf95b0ce" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Mar 18 20:24:03 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Mar 18 20:24:03 2016 +0000" }, "message": "Merge \"Updated deprecated keystone_authtoken option\"" }, { "commit": "198887e8903696ea9fcbec0f8a91c2f6ca5a34c7", "tree": "6b51935d0e1545f197184153c21fe084b5c154dd", "parents": [ "aeb1e4d4bb5f77aac23cd041e0b37e5e17a85e23" ], "author": { "name": "Ihar Hrachyshka", "email": "ihrachys@redhat.com", "time": "Fri Apr 10 18:45:35 2015 +0200" }, "committer": { "name": "Ihar Hrachyshka", "email": "ihrachys@redhat.com", "time": "Thu Mar 17 13:09:56 2016 +0100" }, "message": "logging: don\u0027t set logging format strings for keystone\n\nDon\u0027t override those format strings since the overridden\nvalues are identical to those used by oslo.log by default [1].\n\nlogging_exception_prefix is still set since it changes the logging\nformat to use TRACE label for exceptions instead of default ERROR.\n\n[1]: https://git.openstack.org/cgit/openstack/oslo.log/tree/oslo_log/_options.py?id\u003dc47a91dbbb586c27d8521b1016bf7901c47b1c90#n110\n\nCloses-Bug: #1433687\nChange-Id: Ibd11cd6b0defb6dc709dbd3e718a49fd71cce6b6\n" }, { "commit": "4921d4dbb937b8a9ca26379a33252f0bebcfb53f", "tree": "9920c0b1264991b377ef682d3b49f69efc0d42dd", "parents": [ "f0f371951f0df7b797556fd6c5f3ceb0fcc9d76c" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Feb 23 22:51:04 2016 -0600" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Thu Mar 17 12:39:49 2016 +1100" }, "message": "Use unversioned keystone endpoints\n\nInsert the unversioned keystone URLs into the service catalog. Services\nshould be able to determine the correct URL for their work from this.\n\nDepends-On: I931f0c558aafc8dfaa5519744c6e4e7fcffc3205\nChange-Id: I6171f782a1dd397720a9b2a3393b30ae5aca0cc2\n" }, { "commit": "428f86e84f4f1d5f7038e61f3cb967ee3a975aa9", "tree": "6f490fd1510910907cf9696536a7257ae8f4b265", "parents": [ "c47340efb71f44ba0967ce8f8b64fec96bc617ff", "4abcfaa86e7bb8827bc1b8b0e48352a0b748446f" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Mar 15 01:01:16 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Mar 15 01:01:16 2016 +0000" }, "message": "Merge \"uwsgi keystone under master process\"" }, { "commit": "c47340efb71f44ba0967ce8f8b64fec96bc617ff", "tree": "a61a710f96d4f317228d93f9c3d35439360ddd3e", "parents": [ "44177fabc3b92b409c70a1cdf1e759679eb1edae", "0d38e2d5d87e98552692f4c177df3a216bfac9dd" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Mar 15 01:01:08 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Mar 15 01:01:08 2016 +0000" }, "message": "Merge \"Cleanup duplication in keystone uwsgi options\"" }, { "commit": "4b56bc3507ac9c6f953ec3d94a103ac2bfa89915", "tree": "5bd06957144b4ecab6493ce92d04a0f31c6ae73b", "parents": [ "082399ef18106bc3820848b6fc352604f0fcf97a", "32bf2c4f6f36dbe6e0b68143810b0f4e5b5ae3b8" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Mar 14 21:03:08 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Mar 14 21:03:08 2016 +0000" }, "message": "Merge \"Use extended keystone-manage bootstrap parameters\"" }, { "commit": "4abcfaa86e7bb8827bc1b8b0e48352a0b748446f", "tree": "047ff560599d721d56514409f134119091ec19e6", "parents": [ "0d38e2d5d87e98552692f4c177df3a216bfac9dd" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Mar 11 08:30:05 2016 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Mar 14 14:38:55 2016 -0500" }, "message": "uwsgi keystone under master process\n\nNormally a standalone uwsgi server would run in \"master\" mode -- it\nhandles signals to reload the processes. I tried this originally\nwith keystone but found that the server didn\u0027t shut down when\nunstacking. The reason it didn\u0027t shut down is because (by default)\nuwsgi does a reload on SIGTERM \u0026 SIGHUP rather than shutting down by\ndefault, see [1].\n\nSetting \"die-on-term \u003d true\" \u0026 \"exit-on-reload \u003d true\" changes the\nuwsgi server to shut down when unstacking.\n\n[1] http://uwsgi-docs.readthedocs.org/en/latest/Management.html#reloading-the-server\n\nChange-Id: I145fef185d4a31078295941779e175b7452a5760\n" }, { "commit": "0d38e2d5d87e98552692f4c177df3a216bfac9dd", "tree": "ee7cde4ffe8f3f945ba1dcc7b949bd7f63b9b4c3", "parents": [ "082399ef18106bc3820848b6fc352604f0fcf97a" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Mar 14 13:57:01 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Mar 14 14:38:55 2016 -0500" }, "message": "Cleanup duplication in keystone uwsgi options\n\nThere was a lot of duplication in the uwsgi options between the\nadmin and public config files. The options common to both are\nmoved into their own section.\n\nChange-Id: I5519c7d4d8b8446a7a5fdb8033852655d8a2c67b\n" }, { "commit": "84f6c0fa6838ffa06aafb17c460a3990c10f4443", "tree": "6c55fe27a052417f8e07f6309ff6ea5e2fbcccdd", "parents": [ "3ccb79ecea221a91393d41d43186b425ff0a0c4d" ], "author": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Fri Mar 11 22:37:27 2016 -0500" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Fri Mar 11 22:39:12 2016 -0500" }, "message": "remove the keystone bash completion install step\n\nkeytone has removed it\u0027s CLI and will release a new version\nwhen Newton begins. As part of the removal process we also\nneed to remove the bash completion script, which is currently\nfailing devstack gates.\n\nChange-Id: I132b862bde5b4173bf34beae12a7a882f5a96314\n" }, { "commit": "8ff298a8715d39d8ac260afba1593b6ecf95b0ce", "tree": "8b3172261521414c18386953eeed566ede209f6f", "parents": [ "03cf3ce902daa5b53151cd2b8663f4e5533e3177" ], "author": { "name": "Ronald Bradford", "email": "ronald.bradford@gmail.com", "time": "Tue Mar 08 15:19:48 2016 +0000" }, "committer": { "name": "Ronald Bradford", "email": "ronald.bradford@gmail.com", "time": "Tue Mar 08 18:59:44 2016 +0000" }, "message": "Updated deprecated keystone_authtoken option\n\n* memcache_servers is a deprecated name for memcached_servers.\n See: keystonemiddleware/auth_token/__init__.py#n287\n\nNOTE: memcache_serves in the cache section is valid option for\n oslo.cache. See oslo_cache/_opts.py#n65\n\nDepends-on: Id65f1bff8e38c777fa406d88ac6a2355d6033d94\nChange-Id: I3e1230b139e710a0433e71ce118ca246d7c6a0e6\n" }, { "commit": "32bf2c4f6f36dbe6e0b68143810b0f4e5b5ae3b8", "tree": "7167080e22f197dd5e1babbddc0a046e2b6416f0", "parents": [ "03cf3ce902daa5b53151cd2b8663f4e5533e3177" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Mar 08 12:24:52 2016 +1100" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Mon Mar 07 20:49:13 2016 -0600" }, "message": "Use extended keystone-manage bootstrap parameters\n\nUse the additional keystone-manage parameters to setup the identity\nendpoint in the service catalog rather than manually fetching a token\nfor this.\n\nChange-Id: I6f5be1df205dee8f3251b4eb413e00ae64f00f07\n" }, { "commit": "b01a3c3bafba743a80cc9288fff807dd7f15ed4e", "tree": "206786e2709275ec264f1eb1fe97c0c17c7adcf4", "parents": [ "c6b5fe3c727ab94a090c963bf501141efea21d34", "50f75a9f64efc00e17028c780b6df261fc2c27ec" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Feb 25 00:55:54 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Feb 25 00:55:54 2016 +0000" }, "message": "Merge \"Followup comment fix from alt_demo user creation\"" }, { "commit": "6bb429359d4f1c8d2fe814c7cc90cc469cc1f5bd", "tree": "a10f25bd2809882a198c65ebf1fe91db86f69624", "parents": [ "0515ff0912d5047d24afcc86d49a8e9be71ace6d", "d8589fa01a57feccc2d20a72307098b7e3eeb1d3" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Feb 24 19:35:53 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Feb 24 19:35:53 2016 +0000" }, "message": "Merge \"Fix uwsgi keystone\"" }, { "commit": "13fe6f59d1b6d209bf770b0959d408ee1a8fb659", "tree": "69dae50b08d9c049e157a5574c9f0c21f141875f", "parents": [ "ecc7d273db14e8d8c364305dcb566f18a4b3f16a" ], "author": { "name": "Mehdi Abaakouk", "email": "sileht@redhat.com", "time": "Tue Feb 23 12:57:02 2016 +0100" }, "committer": { "name": "Mehdi Abaakouk", "email": "sileht@redhat.com", "time": "Tue Feb 23 13:04:12 2016 +0100" }, "message": "Fix telemetry integration gate jobs\n\nSince https://review.openstack.org/#/c/281779/2 have been\nmerged the telemetry integration job is broken.\n\nUnfortunatly, it can\u0027t be fixed on our side, because we have to\nrename SERVICE_TENANT_NAME in many devstack plugin, we can\u0027t merge thing\nuntil all plugins have been fixed.\n\nSo this change restores SERVICE_TENANT_NAME, to be able to switch to SERVICE_PROJECT_NAME.\n\nRelated-bug: #1548634\nChange-Id: I14ebf23aa63f0f153b934ad213a6209d22e73e9d\n" }, { "commit": "d8589fa01a57feccc2d20a72307098b7e3eeb1d3", "tree": "b8d895079e6bf3def98528c2fb5e8012de9e1cfc", "parents": [ "2688eedc51fc7b4ef0a5332c1aafce8a557928da" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 22 13:49:52 2016 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 22 13:59:34 2016 -0600" }, "message": "Fix uwsgi keystone\n\nThe uwsgi keystone jobs are failing with an error like\n\n + devstack/functions-common:_run_process:L1391: setsid uwsgi /etc/keystone/keystone-uwsgi-admin.ini\n + devstack/functions-common:_run_process:L1395: exit 0\n execvp: No such file or directory\n\nI think this is because uwsgi isn\u0027t installed on the images. The fix\nis to pip install it.\n\nAlso, use the full path to the uwsgi executable (even though execvp\nis used) because eventlet (calling keystone-all) does.\n\nAlso, the uwsgi process wasn\u0027t shutting down on ./unstack.sh. This\nis worked around by not running master process.\n\nChange-Id: Id02e16c5149ba3dfa13051e87cfccd8e505b7362\n" }, { "commit": "7580a0c3e37932a8fc03750d35ccd4e13e18f8c4", "tree": "61a089d96396f912eb85e8c5686b40b49ca370ca", "parents": [ "80ea24cbbb98fd6bdc5dff2fa4bbfc074a1b38b5" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Feb 17 06:23:36 2016 -0500" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Mon Feb 22 11:55:17 2016 +1100" }, "message": "Replace TENANT \u003d\u003e PROJECT phase 1\n\nThis replaces the use of TENANT variables with PROJECT ones during the\ninitial setup. The openrc will still export a OS_TENANT_NAME because\nmany tools (cinderclient, glanceclient amoung them) will not function\nwithout it. We warn when we do that.\n\nChange-Id: I824b1121842eb5821034071874bf1bb2d7c3631e\n" }, { "commit": "edc11c2f834e45dea9c9c0fcda21369d2afa30e2", "tree": "7a87388c66878822d5454dbe82279019e4680f82", "parents": [ "a03053660a3867b4f7622303c0499a6b79292cca" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Dec 14 15:32:05 2015 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 15 08:45:22 2016 -0600" }, "message": "Keystone support deploy in uwsgi\n\nKeystone is going to remove support for eventlet. Rather than only\nhave one way to run keystone (in Apache Httpd with mod_wsgi), we\nshould continue to gate on multiple wsgi containers to ensure that\nkeystone remains container-agnostic. The suggested alternative\ncontainer is uwsgi.\n\nTo run keystone in uwsgi rather than httpd or eventlet, set the\nfollowing env var in local.conf:\n\n KEYSTONE_DEPLOY\u003duwsgi\n\nThere\u0027s a lot of options to uwsgi. Here\u0027s some protips:\nhttp://uwsgi-docs.readthedocs.org/en/latest/ThingsToKnow.html\n\nChange-Id: If3b49879ce5181c16f0f0ab0db12fa55fe810a41\n" }, { "commit": "a03053660a3867b4f7622303c0499a6b79292cca", "tree": "3465eb51c6e1004bc3b71074a5bb9aa471c9d779", "parents": [ "f130b283d9603477c0ffa7705eec39d73798b4d2" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Jan 25 13:38:27 2016 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 15 08:45:22 2016 -0600" }, "message": "Keystone deploy switch\n\nCurrently there\u0027s a boolean KEYSTONE_USE_MOD_WSGI to switch between\nrunning keystone in mod_wsgi and eventlet. We\u0027ve got a need to\nsupport more/different deployment options (e.g., uwsgi), so a\nboolean is inadequate.\n\nA new input variable KEYSTONE_DEPLOY is introduced that can be\nset to mod_wsgi or eventlet (and other values in future) to\ncontrol how keystone is deployed. KEYSTONE_USE_MOD_WSGI is\ndeprecated.\n\nChange-Id: I9b2815e6f007309f088346df9ac48e6a24ae3656\n" }, { "commit": "985e958dda3e843442f76199caf63fa8b93680cc", "tree": "fd99f845efb549c1c5812767d166e2896a3358f6", "parents": [ "1a9e294ff398e5f3c3a0a62621b8872273aeb0f9" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Feb 10 07:25:24 2016 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Feb 10 15:39:31 2016 -0500" }, "message": "remove keystone templated catalog\n\nThis is just another code path for little benefit in devstack which is\ngoing to rot out. We should be opinionated here and only support the\ndynamic catalog.\n\nChange-Id: I4e5c7e86aefe72fc21c77d423033e9b169318fec\n" }, { "commit": "d6f922364e3e8a500602f65691d395ef64a077b4", "tree": "61fb1dfee46f27edea81ac466adec043be1eb6df", "parents": [ "11dd05e7fa9f0190b9e449813a597373f490ddea" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Feb 09 06:34:36 2016 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Feb 09 06:34:36 2016 -0500" }, "message": "push out some deprecations to figure out what\u0027s using these bits\n\nThere are some parts of devstack we should really delete, but we have\nno idea who is using them. Push out some deprecations so we can look\nat this through logstash.\n\nChange-Id: Id5c8748606cce16f64e978ad7ac9309bebac0eb7\n" }, { "commit": "da1cc5780d9501f5705a5e9844e819067514217f", "tree": "0a951412ea115c4c84f176e739ac0276aaa91495", "parents": [ "e20cb43fd691c77919d77618bce46bc8c3e4de11" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Tue Feb 02 09:09:28 2016 -0800" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Mon Feb 08 11:36:37 2016 -0800" }, "message": "Remove microseconds from apache log(s)\n\nRemove the microseconds from the apache logs and move back to using\nmilliseconds. There is no longer any 2.2 workarounds in the keystone\nsetup process.\n\nChange-Id: I8787eee41fbde1f9794aeffe1e862af0d5117bc3\n" }, { "commit": "50f75a9f64efc00e17028c780b6df261fc2c27ec", "tree": "8ca39e6c05b07b4294c85f16b219927ae9ac3c7f", "parents": [ "c67d22e2ed0eb3fa0786f4314752ab7b26758ea3" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Wed Feb 03 17:40:17 2016 -0600" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Thu Feb 04 03:25:46 2016 +0000" }, "message": "Followup comment fix from alt_demo user creation\n\nTweak a code comment based on a review comment from Steve Martinelli in\nhttps://review.openstack.org/#/c/275121/ where the alt_demo user is now\nalways created.\n\nChange-Id: I9e9a769f601e52c030e9f6953f1746788c24a185\n" }, { "commit": "c67d22e2ed0eb3fa0786f4314752ab7b26758ea3", "tree": "03819d602686d9c625b27cf1a48e85138df8c672", "parents": [ "3c92590101bffc53cadcc04f8774d9deca01e44b" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Feb 02 05:51:14 2016 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Feb 02 05:51:14 2016 -0500" }, "message": "make the alt_demo user during normal install\n\nFor testing reasons it\u0027s typically very useful to have a second non\nadmin user to cross check that it can\u0027t do a thing to the first\nuser. It was useful enough we always created it with tempest (though\nwe didn\u0027t always use it).\n\nThis makes devstack always create an alt_demo user, which is available\nin occ as devstack-alt. This will help us unwind some of the keystone\nv3 breaks with functional tests using keystone cli to build this\nsecond user.\n\nChange-Id: Iaaf02469180563e2d8c413fee0ee66ada2296cfa\n" }, { "commit": "a8ffe8a4734ceb7dc82ae50addcda96b84e934b7", "tree": "0a851ccc620b1cc3ae82858c33246e04ebc0e9c6", "parents": [ "973fb21de6b21253d2629fae23360dbc08940e69" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Sun Jan 24 20:36:35 2016 -0800" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Wed Jan 27 13:21:00 2016 -0600" }, "message": "Enable keystone caching\n\nEnable keystone caching since there is now a memcache server available\nfor the middlewares to cache validation. Offload queries to the\nkeystone backend to memcache as well.\n\nChange-Id: I6d1d28f5b974e79d44d1e86ea53c666e3f5771df\n" }, { "commit": "5997ce3ab657293bda11c69b6078e9290676e54b", "tree": "a85cf1949d380c43aa83b2add03de1284c6d720a", "parents": [ "1d27155f650e9b8e4053a201f1f08c494b820de2" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Wed Jan 20 12:43:22 2016 -0800" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Fri Jan 22 00:04:57 2016 +0000" }, "message": "Always cache tokens in a shared memcache\n\nInstead of using in-process caching for tokens per service per\nworker (disabled by default now), use a shared memcache to cache\ntoken validation(s). This should both offload/speedup validations\nand avoid the issues surrounding inconsistent validation responses\nwhen using in-process caching [since each worker caches separately].\n\nChange-Id: Ifc17c27744dac5ad55e84752ca6f68169c2f5a86\n" }, { "commit": "3106c2d7d4229b99f2844718ddc5fd768caf067f", "tree": "290761c06ce99d339d0d644c740960e68a72d6b6", "parents": [ "a34ebd103dee8852cefd98c99c1583c012b52bfe", "3526276a0827afb5a598c046e410b88bcb8f2e65" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Jan 16 13:38:55 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jan 16 13:38:55 2016 +0000" }, "message": "Merge \"Add support for role and resource keystone backends\"" }, { "commit": "923be5f791c78fa9f21b2e217a6b61328c493a38", "tree": "d58237a00237c5c3609252aaec3bf9450a4d2986", "parents": [ "8df31a107d9d55233aef290733c56e2f953e5dd3" ], "author": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Sun Dec 20 00:24:19 2015 -0500" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Sat Jan 09 20:26:48 2016 -0500" }, "message": "bootstrap keystone using new bootstrap command\n\nBe gone ADMIN_TOKEN, long live keystone-manage bootstrap.\n\nThis patch reworks the initial setup for keystone by using\nthe new bootstrap command. After a minimal service catalog\nhas been created, using this process, we simply authenticate\nas usual.\n\nimplements bp: bootstrap\nDepends-On: I113c6934b6b83ceff23a94101967a6df1126873f\nChange-Id: Ia1475d461eab60b68c6a0356714b21c7f92e0194\n" }, { "commit": "8df31a107d9d55233aef290733c56e2f953e5dd3", "tree": "4b3f0103d49a4670a476151beddfa00231c596b9", "parents": [ "a3ab6865ff870b81f95a0e77da8881cb8a407a06", "59c6377ae51c024c28a6fba72de567bc97edda10" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Jan 09 07:49:34 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jan 09 07:49:35 2016 +0000" }, "message": "Merge \"Assign admin role for admin user on default domain\"" }, { "commit": "828936c6ac8045fbb985ed2e89cdaa9a7c01241a", "tree": "90e9e15ddd46bd5bd51c6f4de835f70bde4d2920", "parents": [ "7792bd20254e5df4ee2e18b751c07be0b7d68152", "6a4d3eb55fb377a0ddef3d8978a85d2137430834" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Jan 08 10:11:53 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jan 08 10:11:53 2016 +0000" }, "message": "Merge \"Use keystone[ldap] for ldap packages\"" }, { "commit": "9f8cf83e6914165543d619e053557aa21a8cf4ee", "tree": "0d2300f5b4c4845045715b330a81dce3b0aeefe8", "parents": [ "88509e796c650d882ee26df0eed1f5bbb7f69de9", "f7dc06cb892ca9d2918ae9bafba13bfa72a7da98" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Jan 06 18:23:21 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jan 06 18:23:21 2016 +0000" }, "message": "Merge \"Option \"auth_plugin\" is deprecated.\"" }, { "commit": "3526276a0827afb5a598c046e410b88bcb8f2e65", "tree": "6539f8c31b09572e51c4d67774030af5951da7cc", "parents": [ "d56b3ff028c192db0bbd0b07117ee7526bb1d4d1" ], "author": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Tue Jan 05 23:56:40 2016 -0500" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Tue Jan 05 23:56:40 2016 -0500" }, "message": "Add support for role and resource keystone backends\n\nKeystone further broken apart the assignment backend into: role,\nresource, and assignment. We should define the backends in the\nconfig file and allow users to override the default by passing in\ntheir own value.\n\nChange-Id: Ieb22c428609d3db852814c7eceb77efa6bbde633\n" }, { "commit": "6a4d3eb55fb377a0ddef3d8978a85d2137430834", "tree": "65c3318726268bedd19b33f7d2e80181dc5401e5", "parents": [ "0842b8147f098106b679cf652edbcb5ea4330f04" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sat Aug 01 09:19:18 2015 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Jan 05 07:41:35 2016 -0500" }, "message": "Use keystone[ldap] for ldap packages\n\nKeystone now provides an \"ldap\" in extras to install its ldap\ndependencies so devstack doesn\u0027t have to track the python\ndependencies itself.\n\nInstallation of the extras is done in an extra install line. This is\nslightly redundant, however this pattern works much better from an\ninstall stand point as it supports an arbitrarily large number of\nextras.\n\nPartial-Bug: 1479962\nChange-Id: If0f0ff48f3d6b3c414f2d6fcd747ecf45a397658\n" }, { "commit": "e8788c0129e0634bbefe0382ad82b70a38f38bc6", "tree": "097a33a7a6dafe9b463a7cd93442491c6e6a5e05", "parents": [ "3a6ef48a03195d13866c5bc93d75ac3b92d5de15", "cdba7b0e533b07d9ea896ced5085c5ce98ee2aaa" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Jan 02 13:23:13 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jan 02 13:23:13 2016 +0000" }, "message": "Merge \"Specify HTTPS URLs to fix tls-proxy mode\"" }, { "commit": "f7dc06cb892ca9d2918ae9bafba13bfa72a7da98", "tree": "bcd672db82a7100a8d10ec633518154f30c123cf", "parents": [ "d21747952e32e6495b35f83d0dcea644f3a08a43" ], "author": { "name": "Hua Wang", "email": "wanghua.humble@gmail.com", "time": "Wed Dec 23 12:15:59 2015 +0800" }, "committer": { "name": "Hua Wang", "email": "wanghua.humble@gmail.com", "time": "Wed Dec 23 12:23:25 2015 +0800" }, "message": "Option \"auth_plugin\" is deprecated.\n\nOption \"auth_plugin\" from group \"keystone_authtoken\" is deprecated.\nUse option \"auth_type\" from group \"keystone_authtoken\".\n\nChange-Id: I01371bd924114d6470e960a91a3045fe7dc22339\nCloses-Bug: #1528746\n" }, { "commit": "97b9e970b27f2303b8404aaa31a9f2e7d51ee787", "tree": "21df22a4c98fc069620800b7b68ba2fed0800cd6", "parents": [ "16f8470e5259a62158fc89d1dbfa83cb1244d93b" ], "author": { "name": "Dave Chen", "email": "wei.d.chen@intel.com", "time": "Tue Dec 15 03:33:48 2015 +0800" }, "committer": { "name": "Dave Chen", "email": "wei.d.chen@intel.com", "time": "Tue Dec 15 03:42:17 2015 +0800" }, "message": "Remove the support for keystone extensions\n\nAll keystone extensions have been moved into cores and are\nenabled by default, there is no need to configure the extension\nin devstack but configure it in devstack will block the\ninstall process.\n\nChange-Id: I7d21b122c641f601295ee7ece3583404b3874dbd\nCloses-Bug: #1526033\n" } ], "next": "e42306d9db86a6cbb7cf1c062d8a5bdcd8479654" }