keystone (2:13.0.0-7) [PTS] [DDPO]

NEW: VCS has unreleased changes: 2:14.0.0~rc1-1 > 2:13.0.0-7

Git: https://salsa.debian.org/openstack-team/services/keystone.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/rocky
Path: debian/changelog
Browser: https://salsa.debian.org/openstack-team/services/keystone
Last scan: 2018-08-20 17:06:17+00
Next scan: 2018-08-21 17:49:00+00

Debian changelog in Git:

keystone (2:14.0.0~rc1-1) UNRELEASED; urgency=medium

  * New upstream release.
  * Removed patches applied upstream:
    - remove_at_expression_from_tags.patch
    - CVE-2018-14432_Reduce_duplication_in_federated_auth_APIs.patch
  * Fixed (build-)depends for this release.

 -- Thomas Goirand <zigo@debian.org>  Mon, 20 Aug 2018 14:28:30 +0200

This branch is 1043 commits ahead of tag 14.0.0.0rc1

Git log:

commit 0f8b99d5db1b8ce417f6357198b0a1de03edccee
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Aug 20 17:46:35 2018 +0200

    Removed unpatch before tests.

commit 39f09b3235ff7ec0be9ee13eac1bfcd02cc125b6
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Aug 20 16:09:00 2018 +0200

    Fix diff with upstream tag.

commit 775f76769f5cbf8589b4bd4f838a15793c6c7518
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Aug 20 14:39:25 2018 +0200

    Fixed (build-)depends for this release.

commit 175eb3e12607dfd23939aa8d4f993a6b3b283cd9
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Aug 20 14:31:06 2018 +0200

      * Removed patches applied upstream:
        - remove_at_expression_from_tags.patch
        - CVE-2018-14432_Reduce_duplication_in_federated_auth_APIs.patch

commit 953d3e991b44c2888a0af03a6f8c379351f2a5bf
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Aug 20 14:29:02 2018 +0200

    Now packaging 14.0.0~rc1 (aka: Rocky RC1)

commit 784195fd35f6fd21e04bca75299a0cd3765bfaa8
Merge: 619a5ce45 b625ccc42
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Aug 20 14:28:17 2018 +0200

    Merge tag '14.0.0_rc1' into debian/rocky
    
    keystone 14.0.0.0rc1 release candidate
    
    meta:version: 14.0.0.0rc1
    meta:diff-start: -
    meta:series: rocky
    meta:release-type: release candidate
    meta:pypi: no
    meta:first: no
    meta:release:Author: Lance Bragstad <lbragstad@gmail.com>
    meta:release:Commit: Lance Bragstad <lbragstad@gmail.com>
    meta:release:Change-Id: I71e4c961f3017291532694f41aecee5dde4ce963
    meta:release:Code-Review+2: Sean McGinnis <sean.mcginnis@gmail.com>
    meta:release:Workflow+1: Sean McGinnis <sean.mcginnis@gmail.com>

commit 619a5ce45b580486016dc1bad579b8cf81203c77
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Aug 16 08:31:37 2018 +0200

    Add CVE-2018-14432_Reduce_duplication_in_federated_auth_APIs.patch

commit 7e5099e4428448e126f76c3b2c4e997e75ce766a
Author: Ondřej Nový <onovy@debian.org>
Date:   Fri Aug 3 06:15:33 2018 +0200

    d/control: Use team+openstack@tracker.debian.org as maintainer

commit dc7f5ffd3157553263c04d65acc7de6edf1febf9
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Fri Apr 6 11:09:24 2018 +0000

      * Removed using twice --bootstrap-region-id ${REGION_NAME} when doing the
        keystone bootstraping.

commit 8982e09cff66f8d5884704f0cc29b1160e2e4e36
Author: Michal Arbet <michal.arbet@ultimum.io>
Date:   Thu Mar 22 15:00:15 2018 +0000

    Remove from po

commit e793cfd0c3ca6dcf3bb4a7c8d55b62f72e723bf3
Author: Michal Arbet <michal.arbet@ultimum.io>
Date:   Thu Mar 22 14:44:02 2018 +0000

    New debian revision

commit d278a38b745c7d571bd32c690ab5b1abf39504a5
Author: Michal Arbet <michal.arbet@ultimum.io>
Date:   Thu Mar 22 14:05:33 2018 +0000

    Add some deletion of files

commit 1ce120c0f1d5880f28fb122b7ce0d8b6c7489548
Author: Michal Arbet <michal.arbet@ultimum.io>
Date:   Thu Mar 22 13:54:48 2018 +0000

    Remove auth-token

commit c9c0d2ff94b647468ed016dc943972726e1cc821
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Mar 22 12:12:53 2018 +0000

    Releasing to unstable.

commit dc70935f5c55a4a79ac849940ddcbfa47b078a54
Merge: af7dc37d8 abb859bdd
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Mar 22 12:11:31 2018 +0000

    Merge branch 'debian/queens' of ssh://salsa.debian.org/openstack-team/services/keystone into debian/queens

commit af7dc37d816ff761edc4d0ed85a004bda98079f2
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Mar 22 12:11:18 2018 +0000

    Also create role "owner".

commit abb859bdd0935d80d1ec112d412d0e1b11c817e4
Author: Thomas Goirand <zigo@debian.org>
Date:   Mon Mar 19 21:26:00 2018 +0100

    Added selection of endpoint protocol (ie: http / https).

commit 1ebbdc66049a5daed0993bcd2125eb45494a5d28
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Sun Mar 11 21:45:35 2018 +0000

    Do not create role admin, created during bootstrap.

commit 0310afe2512eeb087ac1e26060d6cdcc639b6ec9
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Fri Mar 9 21:52:44 2018 +0000

    Releasing to unstable.

commit 2b702bbe9f9213bbf7f3849ca1bed755227a6b5c
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 8 20:30:18 2018 +0100

    Switch back to Apache instead of uwsgi.

commit e623dfff54b1b800407704f168be9675098ed5b8
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Mar 8 15:50:24 2018 +0000

    Increase the number of uwsgi processes.

commit ff61b5b36722e6e13578898e913c8bdafe538580
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Mar 8 15:28:15 2018 +0000

    Releasing to unstable.

commit c6726fff07ea5a84be8c795a1697c554081eb875
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 8 16:26:54 2018 +0100

    Calls systemctl enable keystone-admin / keystone-public before starting.

commit 65c0a189ab873b7e58f9f4251ac0af181b323df1
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Mar 8 15:05:53 2018 +0000

    Releasing to unstable.

commit fd1d35370f236b464dad396cb6a98339e873e73a
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 8 15:56:18 2018 +0100

      * Switch back to using invoke-rc.d instead of service.
      * Remove option --no-orphans for uwsgi: this creates some 104 errors (ie: TCP
        connection reset by peer).

commit d7f60cc1542e9bf3b42fed83d809ce4666409155
Merge: 631ad6d50 e3297822b
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 8 15:29:59 2018 +0100

    Merge branch 'debian/queens' of ssh://salsa.debian.org/openstack-team/services/keystone into debian/queens

commit 631ad6d50f8fe969d665a4ca4478fdc57824a635
Author: Thomas Goirand <zigo@debian.org>
Date:   Thu Mar 8 15:29:36 2018 +0100

    Attempt to remove --no-orphans option from UWSGI config.

commit e3297822b562fe1ea960525568da7db7d5d820ac
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Mar 8 09:03:53 2018 +0000

      * Switch to using service start instead of invoke-rc.d to start keystone
        from postinst.

commit 5ad41fc131fae6225753d66815c94aff9433af41
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Mar 8 08:36:34 2018 +0000

    Releasing to unstable.

commit 5b93e113638403689fe69cdfc70b345c2b1d0fc3
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Mar 8 08:35:58 2018 +0000

    Forgot to fix dependencies for switching to uwsgi.

commit 4149f6076da8c44874a9efa65e879af59cc99e61
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Tue Mar 6 09:55:32 2018 +0000

    Now packaging 13.0.0 (aka: Queens)

commit 91829cfa981ac504904a8d9002fb91a45373e237
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Tue Mar 6 09:53:44 2018 +0000

    Handle policy.json correctly.

commit bb33cafceedd8e97cbd5df171629705c4dbfba6e
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Mon Mar 5 17:36:31 2018 +0000

    Document: Allow setting-up endpoints with IPv6 or FQDN when using debconf.

commit 4ce559124ec8d53d5e2d2a365aa7ebb6526bcaee
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Mon Mar 5 17:35:05 2018 +0000

    Fixed tenant bootstrapping.

commit 6653809630e401b44f4ec76a7142a72bafe5347d
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Mon Mar 5 17:22:37 2018 +0000

    Another patch for switching to uwsgi.

commit aa7f373bbd45ad075889af3fd1c8fb1d7858e579
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Mon Mar 5 17:11:24 2018 +0000

    Explicitely use python3 versions of config file generators.

commit cab78c68b92005948a362758a80b9acdc1581231
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Mon Mar 5 17:09:04 2018 +0000

    Switch to uwsgi instead of Apache.

commit c58b97e57a49fd22d49301227d4c8d7d7b319e10
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Tue Feb 27 20:15:54 2018 +0000

    Add remove_at_expression_from_tags.patch.

commit 730d3c7f680db811fdf0af497a88916c916da969
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Tue Feb 27 20:12:59 2018 +0000

    Refreshed patches.

commit 667a87737d3192b3838fb5fb7d1d6005ed7492ed
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Tue Feb 27 10:32:18 2018 +0000

    Now packaging 13.0.0~rc2 aka Queens rc2, uploading to unstable.

commit 1dc5ef64319aa7d5cba666916209fdb96bcfae1c
Merge: 73718bc9d 847676854
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Tue Feb 27 10:31:33 2018 +0000

    Merge tag '13.0.0_rc2' into debian/queens
    
    keystone 13.0.0.0rc2 release candidate
    
    meta:version: 13.0.0.0rc2
    meta:diff-start: -
    meta:series: queens
    meta:release-type: release candidate
    meta:pypi: no
    meta:first: no
    meta:release:Author: Lance Bragstad <lbragstad@gmail.com>
    meta:release:Commit: Lance Bragstad <lbragstad@gmail.com>
    meta:release:Change-Id: Ib33a70197601b3355e35e9b753610b630b69be8c
    meta:release:Code-Review+2: Doug Hellmann <doug@doughellmann.com>
    meta:release:Code-Review+2: Sean McGinnis <sean.mcginnis@gmail.com>
    meta:release:Workflow+1: Sean McGinnis <sean.mcginnis@gmail.com>

commit 73718bc9d9cd14fb79a8849b5924031e377dfbda
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Sun Feb 25 09:17:09 2018 +0000

    Blacklist broken test: SAMLGenerationTests.test_sign_assertion_exc.

commit 945d8bc45fcfeb7ba27f2c5b655da2ad86b0db69
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Sun Feb 25 08:43:08 2018 +0000

    Force version >= 68~ of ospkgtools

commit df96b006860c0a478a1981f371dac76b73dc5766
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Sat Feb 24 23:49:18 2018 +0000

    Fixed running unit tests.

commit 4aeab46ee767678cd831b1c1f3ba964ad48f690d
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Sat Feb 24 23:46:06 2018 +0000

    wrap-and-sort -bast

commit 3c93acdb8b6a2c15acb89bb6d7aabb345e7a9056
Author: Thomas Goirand <zigo@debian.org>
Date:   Sun Feb 25 00:44:35 2018 +0100

    Clean-ups in debian/rules

commit 48adbd53697ac33fa3d702f9f5cc07c2606c9ccf
Author: Thomas Goirand <zigo@debian.org>
Date:   Sun Feb 25 00:33:29 2018 +0100

    Fix debian/copyright holder list

commit 847676854572e0c36535048b731f966590adb746
Author: Lance Bragstad <lbragstad@gmail.com>
Date:   Wed Feb 21 18:00:21 2018 +0000

    Update 3.10 versioning to limits and system scope
    
    This should have been done before the queens release. I noticed it
    when looking at the API reference and only seeing application
    credentials listed under 3.10 information.
    
    Change-Id: I6f2d9551d15061dbe99e9228c097e735910a41db
    (cherry picked from commit 1175a356fc71036b38c41025f5a90e16f91bbc98)

commit 1dc2173c1cc116763b79baeb34635bdec3a39b21
Merge: afca5cc43 8646f40a4
Author: Zuul <zuul@review.openstack.org>
Date:   Tue Feb 20 17:25:57 2018 +0000

    Merge "Delete system role assignments when deleting groups" into stable/queens

commit 7aff48722cb6f593a458a140ee6f906756abf589
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Tue Feb 20 09:51:14 2018 +0000

    Switched to Python 3.

commit afca5cc43bc2442bd95524b7ad030d2e7965902c
Author: Lance Bragstad <lbragstad@gmail.com>
Date:   Mon Feb 19 18:23:25 2018 +0000

    Populate application credential data in token
    
    Without this patch, the token formatter does not have enough data to
    construct a token created with an application credential. This means
    that if the token cache is disabled or expired, when keystone goes to
    create the token it will not find any application credential information
    and will not recreate the application_credential_restricted parameter in
    the token data. This patch creates a new Payload class for application
    credentials so that the application credential ID is properly persisted
    in the msgpack'd payload. It also adds more data to the token data
    object so that the application credential ID and name as well as its
    restricted status is available when the token is queried.
    
    Co-authored-by: Lance Bragstad <lbragstad@gmail.com>
    
    Change-Id: I322a40404d8287748fe8c3a8d6dc1256d935d84a
    Closes-bug: #1750415
    (cherry picked from commit 796198f19670e3eb899ca3b1db5d2a21a4127a30)

commit 5f8faa16a1f73d721ccfdb62c7d1de2b90821260
Merge: 5fd72b5ab ae0edae6c
Author: Zuul <zuul@review.openstack.org>
Date:   Mon Feb 19 20:06:21 2018 +0000

    Merge "Imported Translations from Zanata" into stable/queens

commit 5fd72b5abdf23a928fbf3924478746d662180fc8
Merge: ddd7ff300 7aec54ae9
Author: Zuul <zuul@review.openstack.org>
Date:   Mon Feb 19 15:07:29 2018 +0000

    Merge "Add docs for application credentials" into stable/queens

commit ae0edae6cd8a9817fdc2cc02d8cbb5b1647b4e0a
Author: OpenStack Proposal Bot <openstack-infra@lists.openstack.org>
Date:   Sun Feb 18 06:54:33 2018 +0000

    Imported Translations from Zanata
    
    For more information about this automatic import see:
    https://docs.openstack.org/i18n/latest/reviewing-translation-import.html
    
    Change-Id: Ie25eaa64c109e7d964cd38602c68f1c55e584d59

commit 7aec54ae98a46a3553cc458f47c1aeb82f88d7ab
Author: Colleen Murphy <colleen@gazlene.net>
Date:   Mon Feb 12 23:16:07 2018 +0100

    Add docs for application credentials
    
    Add documentation in the User section on managing, using, and rotating
    application credentials.
    
    Since application credential support didn't make it into
    python-openstackclient in the Queens release, show examples using
    python-keystoneclient.
    
    Change-Id: I24bc51d2f3741771ba321fc05d49fd111aa76c15
    (cherry picked from commit 25996a8534b1a8d46fd838a188f1005dc53346b1)

commit 8646f40a4080eddb5f9cc58df2ce478ccfd38a77
Author: Lance Bragstad <lbragstad@gmail.com>
Date:   Tue Feb 13 20:47:54 2018 +0000

    Delete system role assignments when deleting groups
    
    Keystone removes role assignments that groups have on projects and
    domains when deleting groups. This should apply to system role
    assignments, too.
    
    Change-Id: Iebedfcae0b77e350e5359b97fa87894af3f1c8ba
    Closes-Bug: 1749267
    (cherry picked from commit 5a24b96d951537fb12deb7050eb2e7dd7d40fc81)

commit ddd7ff300e9159899f27a27fb3dda8ef9b91be1f
Author: Lance Bragstad <lbragstad@gmail.com>
Date:   Thu Dec 28 22:11:32 2017 +0000

    Grant admin a role on the system during bootstrap
    
    Now that we have system scope in place, we should make sure at least
    one user has a role assignment on the system. We can do this at the
    same time we grant the user a role on a project during bootstrap.
    
    This is backwards compatible because even if a deployment doesn't use
    system-scope, the assignment will just sit there. The deployment will
    have to opt into enforcing scope by updating configuration options
    for oslo.policy to enforce scoping.
    
    This shouldn't prevent deployments from fixing bug 968696 and using
    system scope.
    
    Closes-Bug: 1749268
    
    Change-Id: I6b7196a28867d9a699716c8fef2609d608a5b2a2
    (cherry picked from commit 3c524e6491c1b35a2f8413ebe046c238bf530d71)

commit a1ea04de86ebc57e7c2ba142c346f54aa93745c1
Author: Lance Bragstad <lbragstad@gmail.com>
Date:   Tue Feb 13 17:09:55 2018 +0000

    Fix querying role_assignment with system roles
    
    This commit removes system role assignments when querying keystone
    for a list of assignments pertaining to a specific role. For example,
    `GET /v3/role_assignments?role.id={role_id}`, now returns assignments
    only for that role. Previously, the list contained false positives
    because some system role assignments weren't being removed. This
    was introduced in queens with the system scope work.
    
    Change-Id: Iab35ae01bb715da5813e62cd09900de555dceaaa
    Closes-Bug: 1748970
    (cherry picked from commit 8748e729b2f139c245316fcece181625978c70a1)

commit a286436f0a3b79038b98bc265352ea4fe42cb66a
Merge: 2b8675d1f 752d299d5
Author: Zuul <zuul@review.openstack.org>
Date:   Wed Feb 14 18:31:34 2018 +0000

    Merge "Expose bug in /role_assignments API with system-scope" into stable/queens

commit 2b8675d1f3e0809cad734c1592121a237a4bfb69
Merge: 2c37a470b 89152d73a
Author: Zuul <zuul@review.openstack.org>
Date:   Wed Feb 14 18:31:29 2018 +0000

    Merge "Expose bug in system assignment when deleting groups" into stable/queens

commit 2c37a470bd5672805bd2ae7fc6e1a5852f32e9d2
Merge: a372788db 445837fd8
Author: Zuul <zuul@review.openstack.org>
Date:   Wed Feb 14 18:16:18 2018 +0000

    Merge "Delete system role assignments when deleting users" into stable/queens

commit a372788dbbf19f132ade92eaf4ab786fde9950cc
Merge: 8242fc7e2 298f4458b
Author: Zuul <zuul@review.openstack.org>
Date:   Wed Feb 14 18:16:16 2018 +0000

    Merge "Expose bug in system assignment when deleting users" into stable/queens

commit 2a278d18a50a9d73ce32dec9751eed7512187e25
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Feb 14 15:33:12 2018 +0000

    Remove dh-systemd.

commit 20b6ed53c4540ccf0035e054046e216ee05b9d66
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Feb 14 15:29:10 2018 +0000

    trailing whitespaces.

commit a3b9018d53a8fd02da9fa24460d194310bb6b401
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Feb 14 15:28:37 2018 +0000

    Also package examples.

commit 017e768b706c57122d1bfc9d4bef2345862c3d7c
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Feb 14 15:25:44 2018 +0000

    Remove init-system-helpers from depends, as it's essential.

commit 4112a4a1645114fc84e32fb0c3e1cc09126f9f7b
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Feb 14 15:12:09 2018 +0000

    Needs msgpack >= 0.5 because of egg-name rename.

commit cb676bc65c27907897a5d4457ed09979210988cb
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Feb 14 14:40:28 2018 +0000

    Fixed tests to use pkgos-dh_auto_test and stestr.

commit 2b318098a76b923d05d014e5d665daac4eb72b39
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Feb 14 14:37:33 2018 +0000

    Fixed diff with upstream tag.

commit 4914a17e0bd148c6a4f8a7e8ed91d98652366e2e
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Feb 14 13:27:19 2018 +0000

    Standards-Version: 4.1.3

commit f1df66a23405797092665bc718237c2e2ab217ac
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Feb 14 13:26:51 2018 +0000

    Releasing to experimental.

commit 910b4e5c3fe63e6b9f089dc1ce546d12fd99ad94
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Feb 14 14:25:54 2018 +0100

    Fixed (build-)depends for this release.

commit 3250df2a0f7a688550d3b449f6129718b618c736
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Feb 14 14:11:55 2018 +0100

    Now packaging 13.0.0_rc1 (queens rc1).

commit ca0f66c6b04b4aee42ab4d4ccec7a263a5dbf265
Merge: b4bfbc714 30afb8724
Author: Thomas Goirand <zigo@debian.org>
Date:   Wed Feb 14 14:11:33 2018 +0100

    Merge tag '13.0.0_rc1' into debian/queens
    
    keystone 13.0.0.0rc1 release candidate
    
    meta:version: 13.0.0.0rc1
    meta:diff-start: -
    meta:series: queens
    meta:release-type: release candidate
    meta:pypi: no
    meta:first: no
    meta:release:Author: Lance Bragstad <lbragstad@gmail.com>
    meta:release:Commit: Lance Bragstad <lbragstad@gmail.com>
    meta:release:Change-Id: Ic2d2a5c320df4f46a1eff43a5719d4a1e604e12b
    meta:release:Code-Review+2: Sean McGinnis <sean.mcginnis@gmail.com>
    meta:release:Code-Review+2: Thierry Carrez <thierry@openstack.org>
    meta:release:Workflow+1: Thierry Carrez <thierry@openstack.org>

commit 8242fc7e283909b2de23806b64e49c3e81038018
Author: OpenStack Proposal Bot <openstack-infra@lists.openstack.org>
Date:   Fri Feb 9 06:39:09 2018 +0000

    Imported Translations from Zanata
    
    For more information about this automatic import see:
    https://docs.openstack.org/i18n/latest/reviewing-translation-import.html
    
    Change-Id: I3f69977cd9382d80c9635bd61455659c991b7547
    (cherry picked from commit ff4281465e632a1e78d7ddb226aa6c7780db392e)

commit 89152d73ac167b71b11617bcf946c99c38956184
Author: Lance Bragstad <lbragstad@gmail.com>
Date:   Tue Feb 13 20:37:03 2018 +0000

    Expose bug in system assignment when deleting groups
    
    Project and domain role assignment are cleaned up when deleting
    groups. This commit introduces a test case that shows this isn't the
    case for system role assignments. A subsequent patch will implement
    a fix to make sure system role assignments are removed when groups
    are deleted, to be consistent with project and domain assignments.
    
    Change-Id: I9b452aff144fd8867cdac2f44cbcaa0d1de63a12
    Partial-Bug: 1749267
    (cherry picked from commit 3fa997531f757a832aab209d585bb98503e72cc2)

commit 445837fd8bc89bbf0ade3abbfa21074a6c377581
Author: Lance Bragstad <lbragstad@gmail.com>
Date:   Mon Feb 12 21:23:45 2018 +0000

    Delete system role assignments when deleting users
    
    Keystone removes role assignments that users have on projects and
    domains when deleting users. This should also apply to system role
    assignments, too.
    
    Change-Id: Ied51b9c3b58714b2d5dbcb933eca1839d1351fc7
    Closes-Bug: 1749264
    (cherry picked from commit 3a3b3c5b5a35c93b9f3df79887805956208eaf5f)

commit 298f4458bafcb73be23a2812cc2cdda32ff38ce8
Author: Lance Bragstad <lbragstad@gmail.com>
Date:   Tue Feb 13 20:10:00 2018 +0000

    Expose bug in system assignment when deleting users
    
    Project and domain role assignment are cleaned up when deleting
    users. This commit introduces a test case that shows this isn't the
    case for system role assignments. A subsequent patch will implement
    a fix to make sure system role assignments are removed when users
    are deleted, to be consistent with project and domain assignments.
    
    Change-Id: I1a1e7395f462159037e939aa143e9e24aefb1841
    Partial-Bug: 1749264
    (cherry picked from commit 25596b874ce5b70a29ca53a95060f835fa1da955)

commit 752d299d58f63810136966d9dc9a6e97252c9d32
Author: Lance Bragstad <lbragstad@gmail.com>
Date:   Tue Feb 13 16:52:57 2018 +0000

    Expose bug in /role_assignments API with system-scope
    
    The role_assignment API supports a bunch of query parameters that
    gives users flexibility when querying for role assignments. This
    commit exposes an issue when querying keystone for a specific role
    using /role_assignments?role.id={role_id}. The expected result was
    that the returned list would only contain role assignments for that
    specific role ID. The actual result is a set of role assignments with
    that role ID and all system role assignments.
    
    This caused issues in tempest because tempest goes through and cleans
    up resources using `tearDownClass`, and it is common to remove
    specific roles used in the test class. The problem is that keystone
    queries the role assignment API for all role assignment with a
    specific role ID, which is the equivalent to
    `GET /v3/role_assignments?role.id={role_id}` when deleting a role. The
    list returned included false positives, which were system role
    assignments, resulting in revocation events getting persisted for
    users in those role assignments. This prevented the administrator in
    tempest from cleaning up the rest of the resources because the
    revocation event would make the token being used to do resource
    cleanup.
    
    This commit exposes the bug using tests.
    
    Change-Id: If93400be3c9d3fe8e266bb36c16accca93d77154
    Partial-Bug: 1748970
    (cherry picked from commit a226a3d8be5ba720f149606a84df0432ec4858c7)

commit b4bfbc714ea602e0ef9f9d2e4a2e3d1d7686788c
Author: Ondřej Nový <onovy@debian.org>
Date:   Tue Feb 13 16:47:10 2018 +0100

    Running wrap-and-sort -bast

commit 13659167016e5ba73e557a658c953c5745bd602d
Author: OpenStack Proposal Bot <openstack-infra@lists.openstack.org>
Date:   Sat Feb 10 06:32:32 2018 +0000

    Imported Translations from Zanata
    
    For more information about this automatic import see:
    https://docs.openstack.org/i18n/latest/reviewing-translation-import.html
    
    Conflicts:
      releasenotes/source/locale/ja/LC_MESSAGES/releasenotes.po
    
    Change-Id: If0443d5e686ca4ffec6f4b9926cac35fb3924e5f
    (cherry picked from commit aeb83edfc98df32d76fca820002ce0c7217fd1c7)

commit 11bf93376aa2213170bd23ea015a92b9cf76a11c
Author: Ondřej Nový <onovy@debian.org>
Date:   Mon Feb 12 10:34:23 2018 +0100

    d/control: Set Vcs-* to salsa.debian.org

commit e46148e62220bb73019fe5ed271f88bb0e138c13
Author: OpenStack Release Bot <infra-root@openstack.org>
Date:   Fri Feb 9 15:26:07 2018 +0000

    Update UPPER_CONSTRAINTS_FILE for stable/queens
    
    The new stable upper-constraints file is only available
    after the openstack/requirements repository is branched.
    This will happen around the RC1 timeframe.
    
    Recheck and merge this change once the requirements
    repository has been branched.
    
    The CI system will work with this patch before the requirements
    repository is branched because zuul configues the job to run
    with a local copy of the file and defaults to the master branch.
    However, accepting the patch will break the test configuration
    on developers' local systems, so please wait until after the
    requirements repository is branched to merge the patch.
    
    Change-Id: Ia5f219328c804fba276b9d122af3237c5ed290fc

commit a19650927c60728f30ab6c4a4540361b11b36de9
Author: OpenStack Release Bot <infra-root@openstack.org>
Date:   Fri Feb 9 15:26:05 2018 +0000

    Update .gitreview for stable/queens
    
    Change-Id: Ia1d82ed0ba2256e0297fbf9761b60b1526486505

commit 9218160cabe41b1fc27afe6456bcbe0411511d3d
Author: Thomas Goirand <zigo@debian.org>
Date:   Tue Feb 6 17:31:10 2018 +0100

    Add new role, rating, needed for cloudkitty.

commit a2137c84e0de55b1f3377c2fcf5f4e62ddeabb39
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Nov 2 01:27:29 2017 +0000

    Uploading to unstable.

commit a955515ca9a1603fe98ec4188aa78550c50f3f49
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Nov 1 11:51:32 2017 +0000

    Testing if a2dissite is available in postrm (Closes: #844448).

commit 3ec85f4520074eb6404ac16a401144362806cf77
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Fri Oct 6 21:18:30 2017 +0000

    More parameters when doing the bootstrap.

commit 2ad4bdabe3175bcadd6b10502ec5f874d7cc2f01
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Fri Oct 6 09:22:32 2017 +0000

    Using oslopolicy-sample-generator to generate policy file.

commit 5d1fd4ccad43905b90a6d69d15310a1eadb131d0
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Fri Oct 6 08:02:38 2017 +0000

    keystone.policy.yaml really should be yaml

commit 38cafb57aab6be8b19b6bded560718d20463be2a
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Fri Oct 6 07:41:49 2017 +0000

    Also setup fernet tokens at install time.

commit 5e01f71230b8ef2b3a21a024e9a904abb83b8996
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Fri Oct 6 07:35:06 2017 +0000

    Create a MANIFEST.in to install missing migration files.

commit 9a635e4e7e316d2b09d18726f563a1f3152fdf9f
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Fri Oct 6 07:11:28 2017 +0000

    Fixed generating keystone.conf and now generating keystone.policy.yaml.

commit f4b9ca2b0a9a5c34f0cbeaa2b10729759228160d
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Fri Oct 6 07:00:43 2017 +0000

    Do not use --noverbose when doing db_sync.

commit a1f8d81d2d6f9ee32ace598c26b6af1113288827
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Oct 5 21:26:46 2017 +0000

    Do not install policy.json and keystone.py/wsgi.py.

commit 98d1db60785c11944481b514981357ea8a914ab2
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Oct 5 21:24:12 2017 +0000

    Allow Babel 2.4.0 (patch requirements.txt).

commit 8ae1284b38b99c89df30341705a3c713ded8d6a0
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Thu Oct 5 20:08:36 2017 +0000

    Fixed diff with upstream.

commit 0e629e5c4f5eeaa6e04ac84d4c4182248154c804
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Oct 4 22:22:46 2017 +0000

    Fixed python-ldap -> python-pyldap

commit c95ed31c2a2b0f6fa2a5279cf58421511eafdcee
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Oct 4 22:16:53 2017 +0000

    Correct upstream release in d/changelog

commit 564ab6f400cc1dceab8fcb3ca6fc51610a6b365e
Author: Thomas Goirand <thomas@goirand.fr>
Date:   Wed Oct 4 22:16:29 2017 +0000

    Removed obsolete patches.