)]}' { "log": [ { "commit": "b6753cea8cd0e07d982048d2f856c6168fc74a92", "tree": "75df66abe710f6267911628fd1e380169ac84fd1", "parents": [ "df09c433867a9ce204d1b14807cb5510c0bd0385" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Apr 05 11:52:44 2016 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Fri Jan 20 10:48:20 2017 -0500" }, "message": "simplify colorized logging setup\n\nThis makes setup_colorized_logging be a thing which takes a single\nparameter and doesn\u0027t let projects do things differently. It also\nchanges the order of values from user / project to project / user to\nrepresent the hierachy more clearly.\n\nChange-Id: I8c0ba7da54be588e3e068734feb4f78ed7c5a14a\n" }, { "commit": "b51a8862b1f80a947815094148bc229ba3d58ae1", "tree": "f4bd64a0f5a1b8ce82b44124953deb0a73dca32d", "parents": [ "281c5c22ce7f4e7d367f689488e15ad77695a183" ], "author": { "name": "Rodrigo Duarte", "email": "rduartes@redhat.com", "time": "Mon Sep 26 15:22:35 2016 -0300" }, "committer": { "name": "Rodrigo Duarte Sousa", "email": "rduartes@redhat.com", "time": "Thu Jan 05 16:06:39 2017 -0300" }, "message": "Adds keystone security compliance settings\n\nThe PCI-DSS feature has been introduced during the Newton\nrelease and its settings are disabled by default. This\npatch adds the possibility to enable some of them during\nDevStack setup.\n\nChange-Id: If6b5eb3e3cbc43eb241c94d18af80ad50be08772\nDepends-On: Id97ca26f93b742cc3d8d49e98afc581f22360504\n" }, { "commit": "29890549929b4f2ab9dd5c96d0a857708c683997", "tree": "1bdcc8dcd94a15c7d819c5eecaa946a03836237d", "parents": [ "be7fae041fa99df137694cc195b2ad24a3c90f76", "ea3e87d4e5a7a23870e86bbe133064a99e9519cf" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Dec 22 19:25:40 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Dec 22 19:25:40 2016 +0000" }, "message": "Merge \"Add new parameter RECREATE_KEYSTONE_DB\"" }, { "commit": "ea3e87d4e5a7a23870e86bbe133064a99e9519cf", "tree": "efce98e842882f83bfa3cebcd3fe3fe63d1c3423", "parents": [ "c95ca63ae3acdc3ebc36ab4efdfd874993ce72cc" ], "author": { "name": "Julia Varlamova", "email": "jvarlamova@mirantis.com", "time": "Fri Dec 16 14:39:31 2016 +0400" }, "committer": { "name": "Julia Varlamova", "email": "jvarlamova@mirantis.com", "time": "Fri Dec 16 14:41:55 2016 +0400" }, "message": "Add new parameter RECREATE_KEYSTONE_DB\n\nIf \u0027RECREATE_KEYSTONE_DB\u003dFalse\u0027 database won\u0027t be recreated.\nIt would be useful for multinode Grenade tests for Keystone. This parameter\nwill help us to deploy multiple services on different machines talking to\nthe same DB.\n\nDevstack recreates Keystone DB each time during Keystone service installation.\nIf our controller node is already deployed, Keystone DB already contains\nimportant information about OpenStack services and their endpoints. When\nthe second Keystone node is being deployed, we don\u0027t want to delete\nrecords about controllers\u0027 services endpoints.\n\nPartially-Implements: bp rolling-upgrade-testing\n\nChange-Id: Ia8d07b4295ca165be01e44466c95d5275f596e83\n" }, { "commit": "7f68548538a5855cff8fe1debf4e65ff74074e09", "tree": "d9a45370651ba74fd4b213d4de4a0831d349534f", "parents": [ "c95ca63ae3acdc3ebc36ab4efdfd874993ce72cc" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Dec 13 15:47:11 2016 +1100" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Dec 13 15:47:11 2016 +1100" }, "message": "Always add the service role to service users\n\nWhen creating a service user we allow the user to be created with a\ndifferent role. Currently in auth_token middleware we want to check that\nthe service token is specified with the service role so we should always\nadd the service role and optionally add additional roles.\n\nChange-Id: Ie954a679674b4795079b539ebc8d4d2dcbd7dacc\n" }, { "commit": "ee548bc2bf409cffd4d131e5d6cf481704e50d89", "tree": "8b7d937e0d1a0878f092f138e1b6ce6094dfe643", "parents": [ "c18b804b161647452283a243b9c55eb14a416d26", "a1e1f5128a22a7d0cdc8136063d27d64c270021d" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Dec 02 15:27:47 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Dec 02 15:27:47 2016 +0000" }, "message": "Merge \"Add keystone VirtualHost for port 443 when USE_SSL is True\"" }, { "commit": "a3bb131c138859367f4529720121fd3eb8e239fd", "tree": "f71f4d7e8bc3f4290862af0ef966a2e4fbb22465", "parents": [ "9513f8ea39b811105fefc2177f05b3bc37642e96", "fb73d85afe7df7b93b9a460372a8ad6558e887e0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Nov 23 02:16:07 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Nov 23 02:16:07 2016 +0000" }, "message": "Merge \"Remove unused KEYSTONE_CATALOG_BACKEND\"" }, { "commit": "7976f31fb956dcb1cbeea92906f5609f0b43acc4", "tree": "c289d737eea71f9e86a339433471c2e3b551b86a", "parents": [ "29d13df1a284f8f1a5973ccc826a475156820d23", "4440da85637aa8239f24bd4f23a9a8e1ac2d0b8d" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Nov 16 00:04:44 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Nov 16 00:04:44 2016 +0000" }, "message": "Merge \"Unset admin_project config options for Keystone\"" }, { "commit": "dc486bc12fb63ecb5939f8d29dd9cf7a659847cd", "tree": "ac8fae3feb3e8796c271aacbb4d783ea0cac3793", "parents": [ "1f84d457577162421bfd2de63bd83d80c123a32f" ], "author": { "name": "Steve Martinelli", "email": "s.martinelli@gmail.com", "time": "Thu Sep 08 02:29:25 2016 +0000" }, "committer": { "name": "Steve Martinelli", "email": "s.martinelli@gmail.com", "time": "Mon Oct 31 14:57:11 2016 +0000" }, "message": "Switch fernet to be the default token provider\n\nthis is the first patch in a series to actually make fernet the default\ntoken provider in keystone. the patches for grenade, release notes, and\nactually switching the value in keystone all depend on this patch first.\n\nreasons for switching over:\n\n- fernet tokens are the recommended token provider\n- the install guide for newton recommends deployers use fernet tokens [0]\n- we previously attempted this switch but ran into timing issues [1],\n the timing issues have been resolved [2]\n\n[0] http://docs.openstack.org/newton/install-guide-ubuntu/keystone-install.html\n[1] 153db269705f37d4144ad3fcf26dc67269755d7d\n[2] https://review.openstack.org/#/q/topic:make-fernet-default\n\nChange-Id: I3b819ae8d2924f3bece03902e05d1a8c5e5923f1\n" }, { "commit": "fb73d85afe7df7b93b9a460372a8ad6558e887e0", "tree": "e586014b546db1081d1d823ca34cf93a0e0a3de1", "parents": [ "e0fdcd5ff2c238a4e47c409e19922350fa27dc33" ], "author": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Fri Oct 28 02:03:37 2016 -0700" }, "committer": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Fri Oct 28 02:03:37 2016 -0700" }, "message": "Remove unused KEYSTONE_CATALOG_BACKEND\n\nThis patch simply removes a var noted to be removed back in Newton.\n\nChange-Id: I7c66e1d8d65f562596543ed8ca402dba8c8ea271\n" }, { "commit": "7b07ccf5e4b7f724eceedb069a51c29284b357aa", "tree": "6eb5588e1438f6d4d46015ff30b0cfc16ba5fb16", "parents": [ "e0fdcd5ff2c238a4e47c409e19922350fa27dc33" ], "author": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Thu Oct 27 06:14:00 2016 -0700" }, "committer": { "name": "Eric Brown", "email": "browne@vmware.com", "time": "Thu Oct 27 16:24:16 2016 +0000" }, "message": "Remove deprecated/obsolete ldap options\n\nThe devstack ldap configuration for keystone is still using some\nold options that are no longer valid. The write support is\nbeing removed this release. And in previous releases, the ldap\nassignment driver support was removed and was not removed here.\n\nChange-Id: I538626b681eaee6a7ac10dfbc29605b73fbe13bf\n" }, { "commit": "4440da85637aa8239f24bd4f23a9a8e1ac2d0b8d", "tree": "b8312c2aa45e11a93c22d618d9957993002524d8", "parents": [ "e0fdcd5ff2c238a4e47c409e19922350fa27dc33" ], "author": { "name": "Adam Young", "email": "ayoung@redhat.com", "time": "Wed Oct 26 11:40:08 2016 +0200" }, "committer": { "name": "Adam Young", "email": "ayoung@redhat.com", "time": "Wed Oct 26 11:40:08 2016 +0200" }, "message": "Unset admin_project config options for Keystone\n\nUntil the policy changes land for Nova, Glance, etc, this\nvalue is not used. Additionally, by having it set, it actually\nmakes it hard/impossible for the required changes to land in\nthe other services. Disable/comment out the changes in the\nKeystone specific lib file for now, and we will re-enable once\nthe Services can make use of them.\n\nChange-Id: Ia1de9083c21107dac2f0abb56bda166bdb37a69d\n" }, { "commit": "ec498cd0619805c409b28f81c6a7bcd3a01136ed", "tree": "382b7e923491ae169dc3b004ed5d0cb39a766736", "parents": [ "7480276f5e83e1d29371c402f8500098ce1871c2" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Oct 06 15:00:44 2016 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Thu Oct 06 15:00:44 2016 -0400" }, "message": "remove sites-enabled/keystone.conf link on clean\n\ndoing a clean.sh / stack.sh cycle with USE_SSL\u003dTrue was failing\nbecause we were no longer cleaning up the keystone site fully, so some\nof the early mod_ssl queries hit an invalid apache configuration.\n\nChange-Id: Ic6f3f601e532ec50c0234d928c25b378d9e95e32\n" }, { "commit": "792a7ab31f0553435c02bb230b2c60833eb58c8e", "tree": "cdc1947f07a386958a85632984f0d85236f6bdf6", "parents": [ "65fc49e283cfd3d2a130fe85bd6ceafed1ba040f", "04e69de6c513e1cddaaa74eb2ff428a5db4d223b" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 26 20:39:11 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 26 20:39:11 2016 +0000" }, "message": "Merge \"Mount identity admin script at /identity_admin\"" }, { "commit": "e18d6fae7256ab33c734fdf763fae261c3b7c979", "tree": "c472107383adc1b8730365fcd79200d361953a37", "parents": [ "590e21f9a48cac3887bc3eb33eb76a8603dff253", "0a318ab8a6ede38a330b5bff10479772ab4776f0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 26 16:54:00 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 26 16:54:00 2016 +0000" }, "message": "Merge \"Switch keystone to dogpile.cache.memcached backend\"" }, { "commit": "590e21f9a48cac3887bc3eb33eb76a8603dff253", "tree": "c39c5e647ae7605a8992655f48e1cdbfad6f50c2", "parents": [ "fdd6dfa5190b801a5208cad5e99c9dff75f6800e", "542abbab3bc58c40a499531165943df4bf2e4ab0" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 26 16:53:52 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 26 16:53:52 2016 +0000" }, "message": "Merge \"Keystone uwsgi set lazy-apps\u003dtrue\"" }, { "commit": "04e69de6c513e1cddaaa74eb2ff428a5db4d223b", "tree": "0584e3049c750a2f72876ffed8dbf3dae1f03fdc", "parents": [ "7957489003137280aaa20415f5dc601a8276181e" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Wed Jul 27 08:05:05 2016 +1000" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Sep 26 14:44:40 2016 +0000" }, "message": "Mount identity admin script at /identity_admin\n\nThe /identity_admin endpoint is the port 80/443 equivalent of the\nservice that typically runs on port 35357. In v2 some operations must be\nperformed on the admin endpoint whereas on v3 the services on 5000 and\n35357 are exactly the same. This would be why the service was mounted at\n/identity_v2_admin however that is misleading because both the v2 and v3\nservices are present on that endpoint.\n\nThis is particularly confusing because we set this as the OS_AUTH_URL\nendpoint and it makes it seem like we are doing v2 authentication when\nwe are not.\n\nChange-Id: If73735026079fb19ca5bd44b3a4dc1f507b5c99d\n" }, { "commit": "a2d18484195e700f28e0b7cca1a29e20d9d369b0", "tree": "d14dadbfb1bad781fffe1f8047d7d03831e5d0ca", "parents": [ "81d89cf3584a5edadbaa2514305cf5721b29cdff", "4b49e409f853104dae021dfca1a9342ec9ac4709" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Sep 21 18:19:40 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Sep 21 18:19:40 2016 +0000" }, "message": "Merge \"Use apache for tls-proxy ssl termination\"" }, { "commit": "4b49e409f853104dae021dfca1a9342ec9ac4709", "tree": "dc27f7ff83839baa55b459ca4aa2230c4ed19439", "parents": [ "fb1e1cc7e3de4483de48661b03a4417e2d24957a" ], "author": { "name": "Gregory Haynes", "email": "greg@greghaynes.net", "time": "Wed Aug 31 18:19:51 2016 -0700" }, "committer": { "name": "Clark Boylan", "email": "clark.boylan@gmail.com", "time": "Tue Sep 20 08:14:11 2016 -0700" }, "message": "Use apache for tls-proxy ssl termination\n\nStud is now abandonware (see https://github.com/bumptech/stud) and is\nnot packaged in xenial. Lets use Apache for SSL termination since its\nthere already.\n\nChange-Id: Ifcba410f5969521e8b3d30f02795541c1661f83a\n" }, { "commit": "b74fc6886ff7b373644f886238118dd0c34046f2", "tree": "f19f62eb1f6379f38a260ff909a922db081fc443", "parents": [ "fac8adbe1b2bdd2bae105228eb7acf2dd3f30da7", "eb77eef8a57f8a4d012d8bee316e56b1764919de" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Sep 08 00:59:33 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Sep 08 00:59:33 2016 +0000" }, "message": "Merge \"Keystone re-enable catalog caching\"" }, { "commit": "eb77eef8a57f8a4d012d8bee316e56b1764919de", "tree": "696eb03d77b4b3d83f0b126754ab3aeafe73c74b", "parents": [ "fb1e1cc7e3de4483de48661b03a4417e2d24957a" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 16:26:17 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 16:26:30 2016 -0500" }, "message": "Keystone re-enable catalog caching\n\nCatalog caching was disabled due to bug 1537617, but this has been\nfixed for some time. Re-enabling to get some performance back.\n\nChange-Id: Ic0edf5c70a5040edf3393dbd1e110ab5fb56c110\nRelated-Bug: 1537617\n" }, { "commit": "542abbab3bc58c40a499531165943df4bf2e4ab0", "tree": "73be70c316843a6b25813cf99b27446d24dcb5e5", "parents": [ "a270f5e242f2532389395abfe49eb6780b50a0db" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 15:47:56 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Wed Aug 31 15:47:56 2016 -0500" }, "message": "Keystone uwsgi set lazy-apps\u003dtrue\n\nKeystone had a problem where there was a memcached socket\nopened very early on startup which then got shared between\nworker processes when running under uwsgi. This can be\nprevented by setting lazy-apps so this is the recommended\nsetting.\n\nSee http://uwsgi-docs.readthedocs.io/en/latest/ThingsToKnow.html\n\n\"\"\"uWSGI tries to (ab)use the Copy On Write semantics of the\nfork() call whenever possible. By default it will fork after\nhaving loaded your applications to share as much of their\nmemory as possible. If this behavior is undesirable for some\nreason, use the lazy-apps option. This will instruct uWSGI to\nload the applications after each worker’s fork(). Beware as\nthere is an older options named lazy that is way more invasive\nand highly discouraged (it is still here only for backward\ncompatibility) \"\"\"\n\nChange-Id: I6f271dc906528f0c86060452deaf15df81b267d2\nRelated-Bug: 1600394\n" }, { "commit": "69d4a71dfe86e8111101dcd1bcf5a4138a7956a4", "tree": "6d5725177c1eaf19398aae838baccc7941a91238", "parents": [ "61be14d2993f84364c47956036bd95a97d2c7725" ], "author": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Sat Aug 27 01:01:37 2016 +0000" }, "committer": { "name": "Lance Bragstad", "email": "lbragstad@gmail.com", "time": "Mon Aug 29 21:18:47 2016 +0000" }, "message": "Allow setup of credential encryption using fernet\n\nWith the addition of encrypted credential in keystone, we need to be able to\nadd setup steps in devstack to configure the credential repository with\nencryption keys.\n\nDepends-On: I97e7701bc5b8765d207cc721793643bcefa2d4e2\nDepends-On: Id3e8922adc154cfec5f7a36613e22eb0b49eeffe\nChange-Id: I433da9a257daa21ec3b5996b2bca571211f1fbba\n" }, { "commit": "0a318ab8a6ede38a330b5bff10479772ab4776f0", "tree": "51af38c0b78adf9717bdb98f61c50cff480052bb", "parents": [ "ecfc8a77c203c7832b8b7542342cbb8e258a7765" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Aug 18 13:50:18 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Aug 18 13:50:18 2016 -0500" }, "message": "Switch keystone to dogpile.cache.memcached backend\n\nmemcache_pool is there to keep a limited number of thread-associated\nconnections open rather than a connection for every thread. If you\ndon\u0027t have a huge number of threads it doesn\u0027t offer anything.\nKeystone is an example of a service where memcache_pool doesn\u0027t\nimprove things -- eventlet isn\u0027t supported anymore and more threads\nis not useful due to GIL.\n\nAs such, keystone cache backend is changed to dogpile.cache.memcached.\n\nSee https://review.openstack.org/357407 for the oslo.cache help text\nchange.\n\nChange-Id: I4452a8c4968073cdea4c0f384453a5a28519fa08\n" }, { "commit": "a1e1f5128a22a7d0cdc8136063d27d64c270021d", "tree": "ba77b5a196c66099d0437dd2d3b85dc621e0d9fe", "parents": [ "61b319787bbd0af7f3cc1feb71cef0bef6dab373" ], "author": { "name": "Rob Crittenden", "email": "rcritten@redhat.com", "time": "Wed Jul 20 18:12:09 2016 -0400" }, "committer": { "name": "Rob Crittenden", "email": "rcritten@redhat.com", "time": "Wed Jul 20 18:15:00 2016 -0400" }, "message": "Add keystone VirtualHost for port 443 when USE_SSL is True\n\nAdd a VirtualHost that defines the necessary options for\nenabling SSL. The existing keystone Apache configuration already\ndoes all the location handling.\n\nChange-Id: I836a471a7258f14f051d3dd8bdb428286b5a11aa\n" }, { "commit": "e88c51cc1b0aa59abbae353f3fd3c2ef58e1602a", "tree": "9229f13105c9b5c61dee83297f2f49b288f29e13", "parents": [ "45360ed32ef82adcc1685d13ef290c4867eb4fd1", "b97a60e90c46c101b6c2c9a5dbf42140bd8bb8d1" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Jun 15 01:11:46 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jun 15 01:11:46 2016 +0000" }, "message": "Merge \"Keystone uwsgi performance tuning\"" }, { "commit": "75ace7a5edbb6496633b97dc1d6b60e000ff3e5f", "tree": "f3a9b573ce864b9a019af8dbdd6403d986157156", "parents": [ "026cad84a34ff914707538470ec3ae6e2015e54b" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Tue Jun 07 17:44:06 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Tue Jun 07 17:44:06 2016 -0500" }, "message": "Correct keystone memcached host setting\n\nkeystone was configured to connect to memcached on the host IP\naddress. Unfortunately, memcached is only listening on localhost,\nso this setting actually hurts performance as keystone fails to\nconnect to the memcached server. There\u0027s no indication of this in\nthe keystone logs since this is just how memcache client works\n(ignoring errors).\n\nYou can verify this by\n1) in /etc/memcached.conf, set -vv\n2) restart memcached: service memcached restart\n3) watch /var/log/memcached.log\n4) There will be no output\n\nwith this change, there will be output in /var/log/memcached.log\n\nAlso the performance should be a lot better.\n\nChange-Id: I95d798d122e2a95e27eb1d2c4e786c3cd844440b\n" }, { "commit": "b97a60e90c46c101b6c2c9a5dbf42140bd8bb8d1", "tree": "43430eeee33b8ecd5cb49a6909651fd9748b7c74", "parents": [ "18ce57e55c736542a0f328c6cdf0f521faf5e48a" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Jun 03 15:59:11 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Jun 05 18:48:03 2016 -0500" }, "message": "Keystone uwsgi performance tuning\n\nI ran some tests locally that showed that when using the uwsgi\ndeploy the keystone server wasn\u0027t using all the processes\navailable. When I switched from \"threads\" to \"processes\" the\nconcurrent performance improved considerably. So I\u0027m proposing\nthat devstack switch to processes to improve performance.\n\nChange-Id: I8cfe9272e098e636441b7cfb51bff08d62c3336e\n" }, { "commit": "f5998b0253be5a73a068169591d9f773662d39aa", "tree": "afe9f14037e28da669c47f0519cda7f586073d6c", "parents": [ "730703a83335d9d9704023ba17a241d3d506f1a4", "841fdafa0bc542b595b267428c5d929bf0726205" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue May 24 20:13:19 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue May 24 20:13:19 2016 +0000" }, "message": "Merge \"Use path-mounted keystone when running in httpd\"" }, { "commit": "ade7898e52cd89d271cbe264e0a9fc5e4d1df785", "tree": "b1b920e3c91cc2ff50d748dfb86ffef4a553bc7f", "parents": [ "b671d83850eea7228542e14869bf13498c285545", "153db269705f37d4144ad3fcf26dc67269755d7d" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed May 18 15:35:32 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed May 18 15:35:32 2016 +0000" }, "message": "Merge \"Revert \"Switch fernet to be the default token provider\"\"" }, { "commit": "153db269705f37d4144ad3fcf26dc67269755d7d", "tree": "515c2a469c2e70f3e9da37a7c6a5f7b6edc1e748", "parents": [ "181588b9ba50fefea12617a9a5e774daddfed20c" ], "author": { "name": "Matt Riedemann", "email": "mriedem@us.ibm.com", "time": "Wed May 18 14:05:14 2016 +0000" }, "committer": { "name": "Matt Riedemann", "email": "mriedem@us.ibm.com", "time": "Wed May 18 14:05:14 2016 +0000" }, "message": "Revert \"Switch fernet to be the default token provider\"\n\nThis reverts commit 181588b9ba50fefea12617a9a5e774daddfed20c.\n\nSince this change landed on 4/29 it\u0027s been the cause of the\ntop two gate failures (besides known latent infra issues) and\nhasn\u0027t had good progress on landing a fix, so until it\u0027s a\npriority for the keystone team we need to revert this change\nto get the integrated gate jobs moving again.\n\nChange-Id: I588a84c5179eab072d21bc1394aea2df00929650\nRelated-Bug: #1577558\nRelated-Bug: #1578866\n" }, { "commit": "b671d83850eea7228542e14869bf13498c285545", "tree": "a3abcf5d39387789d58ba71fb92e8beeb08b8fee", "parents": [ "f5db32dfdb57a4e9fb289047113e059dd4a35ef1", "d1c9198bbe0e90717a9e70c662b806841bc82564" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed May 18 13:42:43 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed May 18 13:42:43 2016 +0000" }, "message": "Merge \"Change the domain name in keystone.conf\"" }, { "commit": "a8980996340d79bc6fc5a1d5545f3ff6c5709eab", "tree": "eedd1924ef381354ce355eab97f6a593ac9d8462", "parents": [ "3a2e534047afa8116fb261438aea50ce61ac3553", "4f55c2d5c384f576e45f4310595e262039fd8175" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue May 17 10:42:50 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue May 17 10:42:50 2016 +0000" }, "message": "Merge \"Set config file to db sync and other manage operation\"" }, { "commit": "0afe207cb346fe7468d073e2358abd2ad9b9d9e8", "tree": "dca739fb114dceea3ed5627a949ac1cbf3602f86", "parents": [ "4bb4728e6fd52c68faa126a36f630f3c6e9d5f6b" ], "author": { "name": "Jens Rosenboom", "email": "j.rosenboom@x-ion.de", "time": "Thu May 12 14:09:03 2016 +0200" }, "committer": { "name": "Jens Rosenboom", "email": "j.rosenboom@x-ion.de", "time": "Thu May 12 14:09:03 2016 +0200" }, "message": "Create service project in service domain\n\nWhen creating service users, the assumption is that the service\nproject lies within the service domain, so create it there.\n\nChange-Id: I4880e789f5eaf340634ceb792397eef12a5a6b51\nCloses-Bug: 1580998\n" }, { "commit": "4f55c2d5c384f576e45f4310595e262039fd8175", "tree": "06be5c649225dbd2a07d1d2673de114918f45937", "parents": [ "a5c1a930962282f105b5057c327b48a4b30a4d12" ], "author": { "name": "Einst Crazy", "email": "yu.changcai@99cloud.net", "time": "Wed May 04 08:14:01 2016 +0000" }, "committer": { "name": "Einst Crazy", "email": "yu.changcai@99cloud.net", "time": "Mon May 09 01:43:32 2016 +0000" }, "message": "Set config file to db sync and other manage operation\n\nCurrently, the db sync operation does not specify the config dir or\nconfig file.\nIf there is a config file in the home path, it will use this one,\nbut not the right one devstack write.\n\nSet config file to these operations.\n\nChange-Id: Id1fbc3d85280c19596f5ebd301c46bcf018fa2f6\nCloses-Bug: #1578098\n" }, { "commit": "d1c9198bbe0e90717a9e70c662b806841bc82564", "tree": "bf9ad3f083e3f2ee64e626186ce673ed0a7cb348", "parents": [ "a5c1a930962282f105b5057c327b48a4b30a4d12" ], "author": { "name": "Rabi Mishra", "email": "ramishra@redhat.com", "time": "Wed May 04 16:09:47 2016 +0530" }, "committer": { "name": "Rabi Mishra", "email": "ramishra@redhat.com", "time": "Wed May 04 16:11:09 2016 +0530" }, "message": "Change the domain name in keystone.conf\n\nAs we are creating a domain with id \u0027default\u0027 and name\n\u0027Default\u0027, we should iniset the correct name.\n\nChange-Id: If67338fbbd255b8aa1b91e18e4cf8213baebab95\n" }, { "commit": "841fdafa0bc542b595b267428c5d929bf0726205", "tree": "17524776a82b40151458eabc939a4803bf3156a4", "parents": [ "13b3be10a754c0e0f9fb31ce824d5f2d9cc905de" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sun Jun 21 10:08:22 2015 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon May 02 19:10:18 2016 -0500" }, "message": "Use path-mounted keystone when running in httpd\n\nWhen running in httpd, keystone accepts requests on /identity and\n/identity_v2_admin.\n\nThe path endpoints should be preferred over the ports so keystone\nis configured to point applications to the path endpoints by\nsetting admin_endpoint and public_endpoint.\n\nChange-Id: I34569b9e03c3f36748c92d803349e22a7ee1a633\n" }, { "commit": "5b83e986de80cffb26ac717121458545c78d6245", "tree": "5c0f36767ab08fd91ad9e3fbf5148b7e5ee1087b", "parents": [ "96ffde28b6e2f55f95997464aec47ae2c6cf91d3", "181588b9ba50fefea12617a9a5e774daddfed20c" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Apr 29 17:27:14 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Apr 29 17:27:15 2016 +0000" }, "message": "Merge \"Switch fernet to be the default token provider\"" }, { "commit": "039fc1a54205f2ba37d1d94f2b4f358901c2aa48", "tree": "e0d3197d6643b729059861c9f6dea6fd3058dffb", "parents": [ "290b6f204b2df67c4ab27e766ac70e399edbc94c", "cbcbd8f33c87904b2293e68ec9868be0b6e4393e" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Apr 20 21:49:01 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Apr 20 21:49:02 2016 +0000" }, "message": "Merge \"Allow putting service users in a seperate domain\"" }, { "commit": "181588b9ba50fefea12617a9a5e774daddfed20c", "tree": "0a7207ffdeb8ddd32aeb9c1e234d0ccf2c4d9f77", "parents": [ "6109a6b7a960bfca0afaa915a27c8d99f140ed10" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Jun 25 17:58:51 2015 -0500" }, "committer": { "name": "ayoung", "email": "ayoung@redhat.com", "time": "Tue Apr 19 19:04:37 2016 +0000" }, "message": "Switch fernet to be the default token provider\n\nUse the fernet token provider as the default for keystone.\n\n The Keystone token provider of choice is changing from UUID to Fernet.\n However, due the the need for multi-site keystone deploys to have keys\n kept in sync, we cannot change the default in upstream Keystone\n without breaking existing deployments. Fernet requires a deliberate\n setup step like what is done in devstack. Making the change in\n devstack documents the expected setup.\n\nChange-Id: I8c0db244634b0861b0eb3c48fe6ede153f7f04f2\n" }, { "commit": "cbcbd8f33c87904b2293e68ec9868be0b6e4393e", "tree": "1db9c7c8e519fd2c5991730a2ac47858b49be9b3", "parents": [ "3d0981398a898b7ed5d4cbac4121b22963ffb32f" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Thu Jan 21 16:08:14 2016 -0600" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Mon Apr 18 09:59:52 2016 +1000" }, "message": "Allow putting service users in a seperate domain\n\nMake it possible to construct the service users in their own seperate\ndomain. Changing this away from Default will not work for everyone yet,\nthough it does work for basic service interaction however enabling it\nwill allow us to start testing and hopefully gating that services aren\u0027t\nrelying on v2 only concepts.\n\nChange-Id: I7e73df5dd1caabf355783da2bc0f3007ade92fba\n" }, { "commit": "982b9911fb66d8c098442f0785972b3a3fcb1414", "tree": "a7b3d2584481717e3ec2b0e9e668d73aa0d6f364", "parents": [ "a344608ca9c5a61bad60a478fe1bbb60ecc60681" ], "author": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Thu Apr 14 07:48:24 2016 +1000" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Thu Apr 14 13:41:34 2016 +1000" }, "message": "Deprecate SERVICE_TENANT\n\nThis is a follow-on to I6f392d3c16726f6dd734184dcf3014fb4f388207 to\nnote the variable is kept for backwards compatibility.\n\nChange-Id: I1008b2d4e2baf82e1aa531d9eaf96a084beb69aa\n" }, { "commit": "2e23e641511b37d041ea2bbb2e5c969842e05aa4", "tree": "6856cdcd27a12c201fd8f87f0d4d3ce0f7b2f19b", "parents": [ "a061138535a2479fef9dcb70cd4dc261d264d623", "0b1465b6f699a974e3900fff2a810aec6a6bf43c" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Apr 13 23:35:52 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Apr 13 23:35:52 2016 +0000" }, "message": "Merge \"change tenant to project in keystone bootstrapping\"" }, { "commit": "846254620e8230d7633f6163957bc61f5473ad1e", "tree": "a4db7abff1334a0fa451f9141f87a0ed24b8c858", "parents": [ "e9820732f16386facc526d14a5150ba68da68161", "8dda061a1fc3b06675cc873681d3bdaaad98f734" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Apr 08 15:47:24 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Apr 08 15:47:24 2016 +0000" }, "message": "Merge \"Revert \"Revert \"Use unversioned keystone endpoints\"\"\"" }, { "commit": "8dda061a1fc3b06675cc873681d3bdaaad98f734", "tree": "9920c0b1264991b377ef682d3b49f69efc0d42dd", "parents": [ "da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780" ], "author": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Thu Apr 07 00:12:51 2016 +0000" }, "committer": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Thu Apr 07 17:00:37 2016 +0000" }, "message": "Revert \"Revert \"Use unversioned keystone endpoints\"\"\n\nThis reverts commit da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780.\n\nDepends-on: Id2c7e09611c1f8b06e6d272589b4ea3435b8de86\nChange-Id: I1b2a65179b5863d8bcbc5dd02b615f4e6e564213\n" }, { "commit": "2bf60959256f3da0729ba8624cb8926f4831ed89", "tree": "282ee43fd59a519dbba8adff1b4da2457191a6f4", "parents": [ "449ab1098929cfc0a3081a1f57a3404a7306a747", "da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Apr 07 00:10:16 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Apr 07 00:10:16 2016 +0000" }, "message": "Merge \"Revert \"Use unversioned keystone endpoints\"\"" }, { "commit": "da1ca6e07c0d54d0ec5b94ebd78da81c6a46e780", "tree": "34fd88b4b52d1d3ca0edc3b9929bfddd6c45b9ea", "parents": [ "4921d4dbb937b8a9ca26379a33252f0bebcfb53f" ], "author": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Wed Apr 06 21:57:28 2016 +0000" }, "committer": { "name": "Armando Migliaccio", "email": "armamig@gmail.com", "time": "Wed Apr 06 21:57:28 2016 +0000" }, "message": "Revert \"Use unversioned keystone endpoints\"\n\nThis reverts commit 4921d4dbb937b8a9ca26379a33252f0bebcfb53f.\n\nChange-Id: Ic8888fca5d25ca6caa3f29f712db319f1d3869ba\n" }, { "commit": "4bb3e20655c0af871a50b05364175eff839863fb", "tree": "106be608ef2a76bae369484c16615858ff27648c", "parents": [ "cb1b506d9980b6a4edc2f2fdea5f6530165cf26e", "4921d4dbb937b8a9ca26379a33252f0bebcfb53f" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Apr 06 18:31:01 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Apr 06 18:31:02 2016 +0000" }, "message": "Merge \"Use unversioned keystone endpoints\"" }, { "commit": "0b1465b6f699a974e3900fff2a810aec6a6bf43c", "tree": "dff1d4bbc631cf0d9051fc671c14ba2b4992478e", "parents": [ "19dfa2af3286a6fbd8ea74dbc41a6affd2123e3f" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Mon Apr 04 10:15:47 2016 -0400" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Apr 05 11:40:25 2016 -0400" }, "message": "change tenant to project in keystone bootstrapping\n\nChange-Id: I6f392d3c16726f6dd734184dcf3014fb4f388207\n" }, { "commit": "556eeb0d358746ed4587440093c2739fb0a57c2b", "tree": "141a76769cec2009e34083701b2317f41ff2f553", "parents": [ "74d82d9343431a53bcffd6554b6188278e61e0d9" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Mar 24 14:01:57 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Thu Mar 24 14:01:57 2016 -0500" }, "message": "Drop keystone eventlet support\n\nKeystone has dropped support for running under eventlet (using\nkeystone-all).\n\nChange-Id: Ib38c0b1a54633a6b6dfa3a0a605cd2b02ca48989\n" }, { "commit": "9ea497539bb1e20fc2d247719f98401d5f7cd67c", "tree": "ead23f1ad29ecb90a1ecf47c2b2b95d454de7613", "parents": [ "0a2a7ae8471575d887a19b9bf8b7375ea1fd7f45" ], "author": { "name": "Attila Fazekas", "email": "afazekas@redhat.com", "time": "Tue Mar 22 15:22:03 2016 +0100" }, "committer": { "name": "afazekas", "email": "afazekas@redhat.com", "time": "Wed Mar 23 19:03:14 2016 +0100" }, "message": "Configure the admin as admin\n\nMake our usual admin user to be a real admin,\nand open the way for improving the per project\npolicy.json files.\n\nChange-Id: I133a5953d209bc1edbd03ecfae750f77e3eaa64d\nRelated-Change: https://review.openstack.org/#/c/242232\n" }, { "commit": "0a2a7ae8471575d887a19b9bf8b7375ea1fd7f45", "tree": "977032b3a1b9f2c880fb3f1febf78e18bdb4318b", "parents": [ "467dbf7703076803f14bca2e67a7125df83122ec", "8ff298a8715d39d8ac260afba1593b6ecf95b0ce" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Mar 18 20:24:03 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Mar 18 20:24:03 2016 +0000" }, "message": "Merge \"Updated deprecated keystone_authtoken option\"" }, { "commit": "198887e8903696ea9fcbec0f8a91c2f6ca5a34c7", "tree": "6b51935d0e1545f197184153c21fe084b5c154dd", "parents": [ "aeb1e4d4bb5f77aac23cd041e0b37e5e17a85e23" ], "author": { "name": "Ihar Hrachyshka", "email": "ihrachys@redhat.com", "time": "Fri Apr 10 18:45:35 2015 +0200" }, "committer": { "name": "Ihar Hrachyshka", "email": "ihrachys@redhat.com", "time": "Thu Mar 17 13:09:56 2016 +0100" }, "message": "logging: don\u0027t set logging format strings for keystone\n\nDon\u0027t override those format strings since the overridden\nvalues are identical to those used by oslo.log by default [1].\n\nlogging_exception_prefix is still set since it changes the logging\nformat to use TRACE label for exceptions instead of default ERROR.\n\n[1]: https://git.openstack.org/cgit/openstack/oslo.log/tree/oslo_log/_options.py?id\u003dc47a91dbbb586c27d8521b1016bf7901c47b1c90#n110\n\nCloses-Bug: #1433687\nChange-Id: Ibd11cd6b0defb6dc709dbd3e718a49fd71cce6b6\n" }, { "commit": "4921d4dbb937b8a9ca26379a33252f0bebcfb53f", "tree": "9920c0b1264991b377ef682d3b49f69efc0d42dd", "parents": [ "f0f371951f0df7b797556fd6c5f3ceb0fcc9d76c" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Feb 23 22:51:04 2016 -0600" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Thu Mar 17 12:39:49 2016 +1100" }, "message": "Use unversioned keystone endpoints\n\nInsert the unversioned keystone URLs into the service catalog. Services\nshould be able to determine the correct URL for their work from this.\n\nDepends-On: I931f0c558aafc8dfaa5519744c6e4e7fcffc3205\nChange-Id: I6171f782a1dd397720a9b2a3393b30ae5aca0cc2\n" }, { "commit": "428f86e84f4f1d5f7038e61f3cb967ee3a975aa9", "tree": "6f490fd1510910907cf9696536a7257ae8f4b265", "parents": [ "c47340efb71f44ba0967ce8f8b64fec96bc617ff", "4abcfaa86e7bb8827bc1b8b0e48352a0b748446f" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Mar 15 01:01:16 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Mar 15 01:01:16 2016 +0000" }, "message": "Merge \"uwsgi keystone under master process\"" }, { "commit": "c47340efb71f44ba0967ce8f8b64fec96bc617ff", "tree": "a61a710f96d4f317228d93f9c3d35439360ddd3e", "parents": [ "44177fabc3b92b409c70a1cdf1e759679eb1edae", "0d38e2d5d87e98552692f4c177df3a216bfac9dd" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Tue Mar 15 01:01:08 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Tue Mar 15 01:01:08 2016 +0000" }, "message": "Merge \"Cleanup duplication in keystone uwsgi options\"" }, { "commit": "4b56bc3507ac9c6f953ec3d94a103ac2bfa89915", "tree": "5bd06957144b4ecab6493ce92d04a0f31c6ae73b", "parents": [ "082399ef18106bc3820848b6fc352604f0fcf97a", "32bf2c4f6f36dbe6e0b68143810b0f4e5b5ae3b8" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Mar 14 21:03:08 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Mar 14 21:03:08 2016 +0000" }, "message": "Merge \"Use extended keystone-manage bootstrap parameters\"" }, { "commit": "4abcfaa86e7bb8827bc1b8b0e48352a0b748446f", "tree": "047ff560599d721d56514409f134119091ec19e6", "parents": [ "0d38e2d5d87e98552692f4c177df3a216bfac9dd" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Fri Mar 11 08:30:05 2016 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Mar 14 14:38:55 2016 -0500" }, "message": "uwsgi keystone under master process\n\nNormally a standalone uwsgi server would run in \"master\" mode -- it\nhandles signals to reload the processes. I tried this originally\nwith keystone but found that the server didn\u0027t shut down when\nunstacking. The reason it didn\u0027t shut down is because (by default)\nuwsgi does a reload on SIGTERM \u0026 SIGHUP rather than shutting down by\ndefault, see [1].\n\nSetting \"die-on-term \u003d true\" \u0026 \"exit-on-reload \u003d true\" changes the\nuwsgi server to shut down when unstacking.\n\n[1] http://uwsgi-docs.readthedocs.org/en/latest/Management.html#reloading-the-server\n\nChange-Id: I145fef185d4a31078295941779e175b7452a5760\n" }, { "commit": "0d38e2d5d87e98552692f4c177df3a216bfac9dd", "tree": "ee7cde4ffe8f3f945ba1dcc7b949bd7f63b9b4c3", "parents": [ "082399ef18106bc3820848b6fc352604f0fcf97a" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Mar 14 13:57:01 2016 -0500" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Mar 14 14:38:55 2016 -0500" }, "message": "Cleanup duplication in keystone uwsgi options\n\nThere was a lot of duplication in the uwsgi options between the\nadmin and public config files. The options common to both are\nmoved into their own section.\n\nChange-Id: I5519c7d4d8b8446a7a5fdb8033852655d8a2c67b\n" }, { "commit": "84f6c0fa6838ffa06aafb17c460a3990c10f4443", "tree": "6c55fe27a052417f8e07f6309ff6ea5e2fbcccdd", "parents": [ "3ccb79ecea221a91393d41d43186b425ff0a0c4d" ], "author": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Fri Mar 11 22:37:27 2016 -0500" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Fri Mar 11 22:39:12 2016 -0500" }, "message": "remove the keystone bash completion install step\n\nkeytone has removed it\u0027s CLI and will release a new version\nwhen Newton begins. As part of the removal process we also\nneed to remove the bash completion script, which is currently\nfailing devstack gates.\n\nChange-Id: I132b862bde5b4173bf34beae12a7a882f5a96314\n" }, { "commit": "8ff298a8715d39d8ac260afba1593b6ecf95b0ce", "tree": "8b3172261521414c18386953eeed566ede209f6f", "parents": [ "03cf3ce902daa5b53151cd2b8663f4e5533e3177" ], "author": { "name": "Ronald Bradford", "email": "ronald.bradford@gmail.com", "time": "Tue Mar 08 15:19:48 2016 +0000" }, "committer": { "name": "Ronald Bradford", "email": "ronald.bradford@gmail.com", "time": "Tue Mar 08 18:59:44 2016 +0000" }, "message": "Updated deprecated keystone_authtoken option\n\n* memcache_servers is a deprecated name for memcached_servers.\n See: keystonemiddleware/auth_token/__init__.py#n287\n\nNOTE: memcache_serves in the cache section is valid option for\n oslo.cache. See oslo_cache/_opts.py#n65\n\nDepends-on: Id65f1bff8e38c777fa406d88ac6a2355d6033d94\nChange-Id: I3e1230b139e710a0433e71ce118ca246d7c6a0e6\n" }, { "commit": "32bf2c4f6f36dbe6e0b68143810b0f4e5b5ae3b8", "tree": "7167080e22f197dd5e1babbddc0a046e2b6416f0", "parents": [ "03cf3ce902daa5b53151cd2b8663f4e5533e3177" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Tue Mar 08 12:24:52 2016 +1100" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@gmail.com", "time": "Mon Mar 07 20:49:13 2016 -0600" }, "message": "Use extended keystone-manage bootstrap parameters\n\nUse the additional keystone-manage parameters to setup the identity\nendpoint in the service catalog rather than manually fetching a token\nfor this.\n\nChange-Id: I6f5be1df205dee8f3251b4eb413e00ae64f00f07\n" }, { "commit": "b01a3c3bafba743a80cc9288fff807dd7f15ed4e", "tree": "206786e2709275ec264f1eb1fe97c0c17c7adcf4", "parents": [ "c6b5fe3c727ab94a090c963bf501141efea21d34", "50f75a9f64efc00e17028c780b6df261fc2c27ec" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Feb 25 00:55:54 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Feb 25 00:55:54 2016 +0000" }, "message": "Merge \"Followup comment fix from alt_demo user creation\"" }, { "commit": "6bb429359d4f1c8d2fe814c7cc90cc469cc1f5bd", "tree": "a10f25bd2809882a198c65ebf1fe91db86f69624", "parents": [ "0515ff0912d5047d24afcc86d49a8e9be71ace6d", "d8589fa01a57feccc2d20a72307098b7e3eeb1d3" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Feb 24 19:35:53 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Feb 24 19:35:53 2016 +0000" }, "message": "Merge \"Fix uwsgi keystone\"" }, { "commit": "13fe6f59d1b6d209bf770b0959d408ee1a8fb659", "tree": "69dae50b08d9c049e157a5574c9f0c21f141875f", "parents": [ "ecc7d273db14e8d8c364305dcb566f18a4b3f16a" ], "author": { "name": "Mehdi Abaakouk", "email": "sileht@redhat.com", "time": "Tue Feb 23 12:57:02 2016 +0100" }, "committer": { "name": "Mehdi Abaakouk", "email": "sileht@redhat.com", "time": "Tue Feb 23 13:04:12 2016 +0100" }, "message": "Fix telemetry integration gate jobs\n\nSince https://review.openstack.org/#/c/281779/2 have been\nmerged the telemetry integration job is broken.\n\nUnfortunatly, it can\u0027t be fixed on our side, because we have to\nrename SERVICE_TENANT_NAME in many devstack plugin, we can\u0027t merge thing\nuntil all plugins have been fixed.\n\nSo this change restores SERVICE_TENANT_NAME, to be able to switch to SERVICE_PROJECT_NAME.\n\nRelated-bug: #1548634\nChange-Id: I14ebf23aa63f0f153b934ad213a6209d22e73e9d\n" }, { "commit": "d8589fa01a57feccc2d20a72307098b7e3eeb1d3", "tree": "b8d895079e6bf3def98528c2fb5e8012de9e1cfc", "parents": [ "2688eedc51fc7b4ef0a5332c1aafce8a557928da" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 22 13:49:52 2016 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 22 13:59:34 2016 -0600" }, "message": "Fix uwsgi keystone\n\nThe uwsgi keystone jobs are failing with an error like\n\n + devstack/functions-common:_run_process:L1391: setsid uwsgi /etc/keystone/keystone-uwsgi-admin.ini\n + devstack/functions-common:_run_process:L1395: exit 0\n execvp: No such file or directory\n\nI think this is because uwsgi isn\u0027t installed on the images. The fix\nis to pip install it.\n\nAlso, use the full path to the uwsgi executable (even though execvp\nis used) because eventlet (calling keystone-all) does.\n\nAlso, the uwsgi process wasn\u0027t shutting down on ./unstack.sh. This\nis worked around by not running master process.\n\nChange-Id: Id02e16c5149ba3dfa13051e87cfccd8e505b7362\n" }, { "commit": "7580a0c3e37932a8fc03750d35ccd4e13e18f8c4", "tree": "61a089d96396f912eb85e8c5686b40b49ca370ca", "parents": [ "80ea24cbbb98fd6bdc5dff2fa4bbfc074a1b38b5" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Feb 17 06:23:36 2016 -0500" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Mon Feb 22 11:55:17 2016 +1100" }, "message": "Replace TENANT \u003d\u003e PROJECT phase 1\n\nThis replaces the use of TENANT variables with PROJECT ones during the\ninitial setup. The openrc will still export a OS_TENANT_NAME because\nmany tools (cinderclient, glanceclient amoung them) will not function\nwithout it. We warn when we do that.\n\nChange-Id: I824b1121842eb5821034071874bf1bb2d7c3631e\n" }, { "commit": "edc11c2f834e45dea9c9c0fcda21369d2afa30e2", "tree": "7a87388c66878822d5454dbe82279019e4680f82", "parents": [ "a03053660a3867b4f7622303c0499a6b79292cca" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Dec 14 15:32:05 2015 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 15 08:45:22 2016 -0600" }, "message": "Keystone support deploy in uwsgi\n\nKeystone is going to remove support for eventlet. Rather than only\nhave one way to run keystone (in Apache Httpd with mod_wsgi), we\nshould continue to gate on multiple wsgi containers to ensure that\nkeystone remains container-agnostic. The suggested alternative\ncontainer is uwsgi.\n\nTo run keystone in uwsgi rather than httpd or eventlet, set the\nfollowing env var in local.conf:\n\n KEYSTONE_DEPLOY\u003duwsgi\n\nThere\u0027s a lot of options to uwsgi. Here\u0027s some protips:\nhttp://uwsgi-docs.readthedocs.org/en/latest/ThingsToKnow.html\n\nChange-Id: If3b49879ce5181c16f0f0ab0db12fa55fe810a41\n" }, { "commit": "a03053660a3867b4f7622303c0499a6b79292cca", "tree": "3465eb51c6e1004bc3b71074a5bb9aa471c9d779", "parents": [ "f130b283d9603477c0ffa7705eec39d73798b4d2" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Jan 25 13:38:27 2016 -0600" }, "committer": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Mon Feb 15 08:45:22 2016 -0600" }, "message": "Keystone deploy switch\n\nCurrently there\u0027s a boolean KEYSTONE_USE_MOD_WSGI to switch between\nrunning keystone in mod_wsgi and eventlet. We\u0027ve got a need to\nsupport more/different deployment options (e.g., uwsgi), so a\nboolean is inadequate.\n\nA new input variable KEYSTONE_DEPLOY is introduced that can be\nset to mod_wsgi or eventlet (and other values in future) to\ncontrol how keystone is deployed. KEYSTONE_USE_MOD_WSGI is\ndeprecated.\n\nChange-Id: I9b2815e6f007309f088346df9ac48e6a24ae3656\n" }, { "commit": "985e958dda3e843442f76199caf63fa8b93680cc", "tree": "fd99f845efb549c1c5812767d166e2896a3358f6", "parents": [ "1a9e294ff398e5f3c3a0a62621b8872273aeb0f9" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Feb 10 07:25:24 2016 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Wed Feb 10 15:39:31 2016 -0500" }, "message": "remove keystone templated catalog\n\nThis is just another code path for little benefit in devstack which is\ngoing to rot out. We should be opinionated here and only support the\ndynamic catalog.\n\nChange-Id: I4e5c7e86aefe72fc21c77d423033e9b169318fec\n" }, { "commit": "d6f922364e3e8a500602f65691d395ef64a077b4", "tree": "61fb1dfee46f27edea81ac466adec043be1eb6df", "parents": [ "11dd05e7fa9f0190b9e449813a597373f490ddea" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Feb 09 06:34:36 2016 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Feb 09 06:34:36 2016 -0500" }, "message": "push out some deprecations to figure out what\u0027s using these bits\n\nThere are some parts of devstack we should really delete, but we have\nno idea who is using them. Push out some deprecations so we can look\nat this through logstash.\n\nChange-Id: Id5c8748606cce16f64e978ad7ac9309bebac0eb7\n" }, { "commit": "da1cc5780d9501f5705a5e9844e819067514217f", "tree": "0a951412ea115c4c84f176e739ac0276aaa91495", "parents": [ "e20cb43fd691c77919d77618bce46bc8c3e4de11" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Tue Feb 02 09:09:28 2016 -0800" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Mon Feb 08 11:36:37 2016 -0800" }, "message": "Remove microseconds from apache log(s)\n\nRemove the microseconds from the apache logs and move back to using\nmilliseconds. There is no longer any 2.2 workarounds in the keystone\nsetup process.\n\nChange-Id: I8787eee41fbde1f9794aeffe1e862af0d5117bc3\n" }, { "commit": "50f75a9f64efc00e17028c780b6df261fc2c27ec", "tree": "8ca39e6c05b07b4294c85f16b219927ae9ac3c7f", "parents": [ "c67d22e2ed0eb3fa0786f4314752ab7b26758ea3" ], "author": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Wed Feb 03 17:40:17 2016 -0600" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Thu Feb 04 03:25:46 2016 +0000" }, "message": "Followup comment fix from alt_demo user creation\n\nTweak a code comment based on a review comment from Steve Martinelli in\nhttps://review.openstack.org/#/c/275121/ where the alt_demo user is now\nalways created.\n\nChange-Id: I9e9a769f601e52c030e9f6953f1746788c24a185\n" }, { "commit": "c67d22e2ed0eb3fa0786f4314752ab7b26758ea3", "tree": "03819d602686d9c625b27cf1a48e85138df8c672", "parents": [ "3c92590101bffc53cadcc04f8774d9deca01e44b" ], "author": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Feb 02 05:51:14 2016 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Feb 02 05:51:14 2016 -0500" }, "message": "make the alt_demo user during normal install\n\nFor testing reasons it\u0027s typically very useful to have a second non\nadmin user to cross check that it can\u0027t do a thing to the first\nuser. It was useful enough we always created it with tempest (though\nwe didn\u0027t always use it).\n\nThis makes devstack always create an alt_demo user, which is available\nin occ as devstack-alt. This will help us unwind some of the keystone\nv3 breaks with functional tests using keystone cli to build this\nsecond user.\n\nChange-Id: Iaaf02469180563e2d8c413fee0ee66ada2296cfa\n" }, { "commit": "a8ffe8a4734ceb7dc82ae50addcda96b84e934b7", "tree": "0a851ccc620b1cc3ae82858c33246e04ebc0e9c6", "parents": [ "973fb21de6b21253d2629fae23360dbc08940e69" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Sun Jan 24 20:36:35 2016 -0800" }, "committer": { "name": "Dean Troyer", "email": "dtroyer@gmail.com", "time": "Wed Jan 27 13:21:00 2016 -0600" }, "message": "Enable keystone caching\n\nEnable keystone caching since there is now a memcache server available\nfor the middlewares to cache validation. Offload queries to the\nkeystone backend to memcache as well.\n\nChange-Id: I6d1d28f5b974e79d44d1e86ea53c666e3f5771df\n" }, { "commit": "5997ce3ab657293bda11c69b6078e9290676e54b", "tree": "a85cf1949d380c43aa83b2add03de1284c6d720a", "parents": [ "1d27155f650e9b8e4053a201f1f08c494b820de2" ], "author": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Wed Jan 20 12:43:22 2016 -0800" }, "committer": { "name": "Morgan Fainberg", "email": "morgan.fainberg@gmail.com", "time": "Fri Jan 22 00:04:57 2016 +0000" }, "message": "Always cache tokens in a shared memcache\n\nInstead of using in-process caching for tokens per service per\nworker (disabled by default now), use a shared memcache to cache\ntoken validation(s). This should both offload/speedup validations\nand avoid the issues surrounding inconsistent validation responses\nwhen using in-process caching [since each worker caches separately].\n\nChange-Id: Ifc17c27744dac5ad55e84752ca6f68169c2f5a86\n" }, { "commit": "3106c2d7d4229b99f2844718ddc5fd768caf067f", "tree": "290761c06ce99d339d0d644c740960e68a72d6b6", "parents": [ "a34ebd103dee8852cefd98c99c1583c012b52bfe", "3526276a0827afb5a598c046e410b88bcb8f2e65" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Jan 16 13:38:55 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jan 16 13:38:55 2016 +0000" }, "message": "Merge \"Add support for role and resource keystone backends\"" }, { "commit": "923be5f791c78fa9f21b2e217a6b61328c493a38", "tree": "d58237a00237c5c3609252aaec3bf9450a4d2986", "parents": [ "8df31a107d9d55233aef290733c56e2f953e5dd3" ], "author": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Sun Dec 20 00:24:19 2015 -0500" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Sat Jan 09 20:26:48 2016 -0500" }, "message": "bootstrap keystone using new bootstrap command\n\nBe gone ADMIN_TOKEN, long live keystone-manage bootstrap.\n\nThis patch reworks the initial setup for keystone by using\nthe new bootstrap command. After a minimal service catalog\nhas been created, using this process, we simply authenticate\nas usual.\n\nimplements bp: bootstrap\nDepends-On: I113c6934b6b83ceff23a94101967a6df1126873f\nChange-Id: Ia1475d461eab60b68c6a0356714b21c7f92e0194\n" }, { "commit": "8df31a107d9d55233aef290733c56e2f953e5dd3", "tree": "4b3f0103d49a4670a476151beddfa00231c596b9", "parents": [ "a3ab6865ff870b81f95a0e77da8881cb8a407a06", "59c6377ae51c024c28a6fba72de567bc97edda10" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Jan 09 07:49:34 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jan 09 07:49:35 2016 +0000" }, "message": "Merge \"Assign admin role for admin user on default domain\"" }, { "commit": "828936c6ac8045fbb985ed2e89cdaa9a7c01241a", "tree": "90e9e15ddd46bd5bd51c6f4de835f70bde4d2920", "parents": [ "7792bd20254e5df4ee2e18b751c07be0b7d68152", "6a4d3eb55fb377a0ddef3d8978a85d2137430834" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Fri Jan 08 10:11:53 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Fri Jan 08 10:11:53 2016 +0000" }, "message": "Merge \"Use keystone[ldap] for ldap packages\"" }, { "commit": "9f8cf83e6914165543d619e053557aa21a8cf4ee", "tree": "0d2300f5b4c4845045715b330a81dce3b0aeefe8", "parents": [ "88509e796c650d882ee26df0eed1f5bbb7f69de9", "f7dc06cb892ca9d2918ae9bafba13bfa72a7da98" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Wed Jan 06 18:23:21 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Wed Jan 06 18:23:21 2016 +0000" }, "message": "Merge \"Option \"auth_plugin\" is deprecated.\"" }, { "commit": "3526276a0827afb5a598c046e410b88bcb8f2e65", "tree": "6539f8c31b09572e51c4d67774030af5951da7cc", "parents": [ "d56b3ff028c192db0bbd0b07117ee7526bb1d4d1" ], "author": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Tue Jan 05 23:56:40 2016 -0500" }, "committer": { "name": "Steve Martinelli", "email": "stevemar@ca.ibm.com", "time": "Tue Jan 05 23:56:40 2016 -0500" }, "message": "Add support for role and resource keystone backends\n\nKeystone further broken apart the assignment backend into: role,\nresource, and assignment. We should define the backends in the\nconfig file and allow users to override the default by passing in\ntheir own value.\n\nChange-Id: Ieb22c428609d3db852814c7eceb77efa6bbde633\n" }, { "commit": "6a4d3eb55fb377a0ddef3d8978a85d2137430834", "tree": "65c3318726268bedd19b33f7d2e80181dc5401e5", "parents": [ "0842b8147f098106b679cf652edbcb5ea4330f04" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Sat Aug 01 09:19:18 2015 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Jan 05 07:41:35 2016 -0500" }, "message": "Use keystone[ldap] for ldap packages\n\nKeystone now provides an \"ldap\" in extras to install its ldap\ndependencies so devstack doesn\u0027t have to track the python\ndependencies itself.\n\nInstallation of the extras is done in an extra install line. This is\nslightly redundant, however this pattern works much better from an\ninstall stand point as it supports an arbitrarily large number of\nextras.\n\nPartial-Bug: 1479962\nChange-Id: If0f0ff48f3d6b3c414f2d6fcd747ecf45a397658\n" }, { "commit": "e8788c0129e0634bbefe0382ad82b70a38f38bc6", "tree": "097a33a7a6dafe9b463a7cd93442491c6e6a5e05", "parents": [ "3a6ef48a03195d13866c5bc93d75ac3b92d5de15", "cdba7b0e533b07d9ea896ced5085c5ce98ee2aaa" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Sat Jan 02 13:23:13 2016 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Sat Jan 02 13:23:13 2016 +0000" }, "message": "Merge \"Specify HTTPS URLs to fix tls-proxy mode\"" }, { "commit": "f7dc06cb892ca9d2918ae9bafba13bfa72a7da98", "tree": "bcd672db82a7100a8d10ec633518154f30c123cf", "parents": [ "d21747952e32e6495b35f83d0dcea644f3a08a43" ], "author": { "name": "Hua Wang", "email": "wanghua.humble@gmail.com", "time": "Wed Dec 23 12:15:59 2015 +0800" }, "committer": { "name": "Hua Wang", "email": "wanghua.humble@gmail.com", "time": "Wed Dec 23 12:23:25 2015 +0800" }, "message": "Option \"auth_plugin\" is deprecated.\n\nOption \"auth_plugin\" from group \"keystone_authtoken\" is deprecated.\nUse option \"auth_type\" from group \"keystone_authtoken\".\n\nChange-Id: I01371bd924114d6470e960a91a3045fe7dc22339\nCloses-Bug: #1528746\n" }, { "commit": "97b9e970b27f2303b8404aaa31a9f2e7d51ee787", "tree": "21df22a4c98fc069620800b7b68ba2fed0800cd6", "parents": [ "16f8470e5259a62158fc89d1dbfa83cb1244d93b" ], "author": { "name": "Dave Chen", "email": "wei.d.chen@intel.com", "time": "Tue Dec 15 03:33:48 2015 +0800" }, "committer": { "name": "Dave Chen", "email": "wei.d.chen@intel.com", "time": "Tue Dec 15 03:42:17 2015 +0800" }, "message": "Remove the support for keystone extensions\n\nAll keystone extensions have been moved into cores and are\nenabled by default, there is no need to configure the extension\nin devstack but configure it in devstack will block the\ninstall process.\n\nChange-Id: I7d21b122c641f601295ee7ece3583404b3874dbd\nCloses-Bug: #1526033\n" }, { "commit": "e42306d9db86a6cbb7cf1c062d8a5bdcd8479654", "tree": "47b3e95e65c3b2e441cf1918005c65d7f388cde7", "parents": [ "1f7631dce6252f32c182176b5e11b1f8eaa8b399" ], "author": { "name": "gordon chung", "email": "gord@live.ca", "time": "Thu Dec 10 14:54:01 2015 -0500" }, "committer": { "name": "gordon chung", "email": "gord@live.ca", "time": "Thu Dec 10 14:54:01 2015 -0500" }, "message": "only set admin_* options for eventlet\n\nkeystone+apache don\u0027t need these values set.\n\nChange-Id: Iebdb31b5f0888613e0454f09a426933d6fcd71b3\nsee: http://lists.openstack.org/pipermail/openstack-dev/2015-December/081984.html\n" }, { "commit": "523f48803609b35350b624244fa73b1030c1d5fa", "tree": "17f99ab223f42eec58523fa89a49f243efba754b", "parents": [ "307730acd9d271bc4c3d44f2dfed0eab67e1657d" ], "author": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Tue Oct 13 11:03:03 2015 +1100" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Fri Nov 27 15:36:04 2015 +1100" }, "message": "Namespace XTRACE commands\n\nI noticed this when debugging some grenade issues failures.\n\nAn include of grenade/functions stores the current value of XTRACE\n(on) and disables xtrace for the rest of the import.\n\nWe then include devstack\u0027s \"functions\" library, which now overwrites\nthe stored value of XTRACE the current state; i.e. disabled.\n\nWhen it finishes it restores the prior state (disabled), and then\ngrenade restores the same value of XTRACE (disabled).\n\nThe result is that xtrace is incorrectly disabled until the next time\nit just happens to be turned on.\n\nThe solution is to name-space the store of the current-value of xtrace\nso when we finish sourcing a file, we always restore the tracing value\nto what it was when we entered.\n\nSome files had already discovered this. In general there is\ninconsistency around the setting of the variable, and a lot of obvious\ncopy-paste. This brings consistency across all files by using\n_XTRACE_* prefixes for the sotre/restore of tracing values.\n\nChange-Id: Iba7739eada5711d9c269cb4127fa712e9f961695\n" }, { "commit": "cdba7b0e533b07d9ea896ced5085c5ce98ee2aaa", "tree": "8f083091dff626cbce00b6b7f4a8330bff70925f", "parents": [ "585501a250cd4ee8210c81176ce89b0430b97753" ], "author": { "name": "Rob Crittenden", "email": "rcritten@redhat.com", "time": "Tue May 26 15:33:45 2015 -0400" }, "committer": { "name": "ayoung", "email": "ayoung@redhat.com", "time": "Tue Nov 17 19:39:54 2015 +0000" }, "message": "Specify HTTPS URLs to fix tls-proxy mode\n\nA number of new settings are required for glance, cinder\nand keystone to be installable when the tls-proxy\nservice is enabled.\n\nFor cinder a new public_endpoint option was added and this\nneeds to be set to the secure port.\n\nKeystone needs the admin_endpoint and public_endpoints\ndefined otherwise during discovery the default,\nnon-secure versions, will be returned.\n\nThe keystone authtoken identity_uri was set at its default value\nin the glance registry and API configuration files.\n\nChange-Id: Ibb944ad7eb000edc6bccfcded765d1976d4d46d0\nCloses-Bug: #1460807\n" }, { "commit": "310cedf6770ba557aa4f85ce424e765501016ed4", "tree": "87128acf3e2a8e0055024f071137ae8d33fc9ba6", "parents": [ "c77fc2e196b471fc12d4e99f013d68965b639658", "22f747b8df023dd74808df097f5fa5a92168f620" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Oct 29 04:57:22 2015 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Oct 29 04:57:22 2015 +0000" }, "message": "Merge \"Use swift port variable in keystone and cinder\"" }, { "commit": "22f747b8df023dd74808df097f5fa5a92168f620", "tree": "40168aa34df503f2e5971a8509c8f61a762bd04d", "parents": [ "897d116a7c9c09385e7e87e1202d7fa612802c49" ], "author": { "name": "Falk Reimann", "email": "falk.reimann@sap.com", "time": "Fri Aug 28 12:40:19 2015 +0200" }, "committer": { "name": "Falk Reimann", "email": "falk.reimann@sap.com", "time": "Fri Oct 23 09:19:32 2015 +0200" }, "message": "Use swift port variable in keystone and cinder\n\nThis patch alows specifiying a deviation of the swift default port 8080 with\nvariable SWIFT_DEFAULT_BIND_PORT. The created endpoints in keystone for\nobject-store and the backup_swift_url in cinder.conf will use variable\nSWIFT_DEFAULT_BIND_PORT instead of the fixed port 8080.\n\nChange-Id: I47bbcf77368c430718fb8f29b7de1ff305e64422\nCloses-Bug: #1489767\n" }, { "commit": "ada886dd43ccc07f48d3a82d8d3d840fe5096c03", "tree": "93d62f1c82edc08d813b7f9f7eb9270e7024e055", "parents": [ "433a9b10ddd6fa67d7459c4943a92ce4f488cebc" ], "author": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Wed Oct 07 14:06:26 2015 +1100" }, "committer": { "name": "Ian Wienand", "email": "iwienand@redhat.com", "time": "Wed Oct 07 17:03:32 2015 +1100" }, "message": "Don\u0027t mix declaration and set of locals\n\nIa0957b47187c3dcadd46154b17022c4213781112 proposes to have bashate\nfind instances of setting a local value. The issue is that \"local\"\nalways returns 0, thus hiding any failure in the commands running to\nset the variable.\n\nThis is an automated replacement of such instances\n\nDepends-On: I676c805e8f0401f75cc5367eee83b3d880cdef81\nChange-Id: I9c8912a8fd596535589b207d7fc553b9d951d3fe\n" }, { "commit": "59c6377ae51c024c28a6fba72de567bc97edda10", "tree": "c2673ac180ffcb08d36520ffb736124baec10f2f", "parents": [ "f25c9ec3662ace97639b03bbbf3943e981793c11" ], "author": { "name": "Roxana Gherle", "email": "roxana.gherle@hp.com", "time": "Wed Sep 09 18:22:31 2015 -0700" }, "committer": { "name": "Roxana Gherle", "email": "roxana.gherle@hp.com", "time": "Tue Sep 22 10:15:28 2015 -0700" }, "message": "Assign admin role for admin user on default domain\n\nThis patch adds an admin role assignment for the admin user on\nthe default domain as part of the Keystone configuration stage.\n\nCloses-Bug: #1494081\nChange-Id: I91c88917bd51be4572e4970c94e65d866798df26\n" }, { "commit": "2f746c5243c31e21d35edfcf2e637de4672668ce", "tree": "adda36444f4dc0ce7a7071977a8fbba3b536b523", "parents": [ "1cf97bd096112b8d2e0eb95fd2a636a53cbf0bcc", "2ad1a42ca667ff21e6f7d2ae906be23a20430036" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Mon Sep 14 05:21:26 2015 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Mon Sep 14 05:21:26 2015 +0000" }, "message": "Merge \"Use keystone wsgi_scripts\"" }, { "commit": "17fe88a72c65fa1f926f3ada5a0cfb45bf6649a9", "tree": "f6ba2bb4f1b0ab7ffa27cf205b3641117251d5d0", "parents": [ "0904bb9370fc2954786c1b085e433957d14c3d40" ], "author": { "name": "Hidekazu Nakamura", "email": "hid-nakamura@vf.jp.nec.com", "time": "Fri Sep 11 19:50:26 2015 +0900" }, "committer": { "name": "Hidekazu Nakamura", "email": "hid-nakamura@vf.jp.nec.com", "time": "Fri Sep 11 19:52:18 2015 +0900" }, "message": "Fix typo in lib/keystone\n\nnonadmin \u003d\u003e nonadmins\n\nChange-Id: I9d51e079c10f7c48b962a1d6f4577e8a6ec4a229\n" }, { "commit": "2ad1a42ca667ff21e6f7d2ae906be23a20430036", "tree": "029d5b293978355b381b7d4db83025360e477c49", "parents": [ "b1ea5eacbc173a0acc162dc486d17154d509a430" ], "author": { "name": "Brant Knudson", "email": "bknudson@us.ibm.com", "time": "Tue Jun 23 10:53:50 2015 -0500" }, "committer": { "name": "Sean Dague", "email": "sean@dague.net", "time": "Tue Aug 25 11:01:05 2015 -0400" }, "message": "Use keystone wsgi_scripts\n\nDevstack was setting up a separate directory and copying\nhttp/keystone.py into it for the admin and public endpoints.\n\nKeystone now defines wsgi_scripts entrypoints so that\nkeystone-wsgi-admin and keystone-wsgi-public are created on\ninstall so devstack can reference these files instead.\n\nSee http://httpd.apache.org/docs/2.4/upgrading.html#access for\nthe apache docs with examples for the Allow|Deny/Require\ndirectives.\n\nDepends-On: Ic9c03e6c00408f3698c10012ca98cfc6ea9b6ace\nChange-Id: Ided688be62b64066d90776313c963ec5016363f2\n" }, { "commit": "3805b3770c091840f67949762ed38bb1548704d2", "tree": "5f3c33e461f9678d28bf4b959124b6b471dec8ac", "parents": [ "d4da210ffb2a9f1274705ba04ec56337e7e1ea1c", "21a9077d7cf32ee1c387171b943125e938eaa1b2" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Jul 23 14:17:49 2015 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Jul 23 14:17:49 2015 +0000" }, "message": "Merge \"Allow installing keystoneauth from git\"" }, { "commit": "474e96d02bd93eb078f0e3eb85362a1ccb3cd149", "tree": "b3e9930046f356dd78a7e98314d8f31cd22378aa", "parents": [ "32a3e322b428d83fa5922c1b9e6adce047064bd6", "cef5e40e0c1479f12f78c9dab74dc3100b2f10f7" ], "author": { "name": "Jenkins", "email": "jenkins@review.openstack.org", "time": "Thu Jul 16 14:03:24 2015 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "review@openstack.org", "time": "Thu Jul 16 14:03:24 2015 +0000" }, "message": "Merge \"Support fernet token provider\"" }, { "commit": "b17ad7560d7d67e3464b489e124c540e025b9299", "tree": "4af18b24b59bded064806f15b0f2c8b69e7d9183", "parents": [ "68f9172dbd18688db188454c775dbf139224aeca" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@redhat.com", "time": "Fri May 29 06:04:47 2015 +0000" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@redhat.com", "time": "Wed Jul 08 05:17:00 2015 +1000" }, "message": "Use identity V3 API for endpoint creation\n\nAlways use the keystone V3 API when creating services and endpoints. The syntax\nhere is slightly different but we maintain the function interface.\n\nChange-Id: Ib3a375918a45fd6e37d873a1a5c0c4b26bdbb5d8\nImplements: bp keystonev3\n" }, { "commit": "21a9077d7cf32ee1c387171b943125e938eaa1b2", "tree": "b6dd67eabece8d2ad0f6667744c3cb44091b3e38", "parents": [ "2d25c9290d163d682ae3958f0e09fede937c0f0f" ], "author": { "name": "Jamie Lennox", "email": "jamielennox@redhat.com", "time": "Fri Jul 03 11:54:38 2015 +1000" }, "committer": { "name": "Jamie Lennox", "email": "jamielennox@redhat.com", "time": "Mon Jul 06 23:17:15 2015 +0000" }, "message": "Allow installing keystoneauth from git\n\nKeystoneauth is not marked as stable yet however to ensure that the\nintegration between it, keystoneclient and other services don\u0027t break\ncompatibility we want to test it with tempest.\n\nUnfortunately you can\u0027t put -e links in requirements.txt files so add\nit to devstack so we can set the test environment. This will also make\nit available when keystoneauth is released.\n\nChange-Id: I43ca1df9c6ae2f0ac1a687c9ce1e2ccb97e81652\n" } ], "next": "cef5e40e0c1479f12f78c9dab74dc3100b2f10f7" }