This caused the keystone logs in a normal run to grow to
over 1G. This is unsustainable.
This should be reverted, and a more targeted approach added
if there is need for per request logging here.
This reverts commit d2ee07b8e7.
Change-Id: I1d1da2b8ebd48239fbe3c2d36cbd3a0929f38786
If something goes wrong when we encrypt or decrypt a credential, we
should throw a useful error message. We will use this as we implement
encryption for credentials at rest.
bp credential-encryption
Change-Id: I21684de984da05a0728f8875ff00a135fc1b834a
This makes FernetUtils configurable for different things to user fernet
utilities. This should help us use fernet for credential encryption.
bp credential-encryption
Change-Id: Ib4a7309844a2e03a5ca920b5512cf7efe1c97867
By converting our module-level fernet utilities to a class, we can
extend it or modify it in ways to make the utilities work for outside
the fernet token provider. This change is in preparation to use fernet
to encrypt credentials at rest.
bp credential-encryption
Change-Id: Ia4e9fd2b8597993f006d9fea82b782085f2cdbc2
If we are going to be using fernet utilities to implement encryption of
credentials at rest, we should put the utilities in a more available
place.
bp credential-encryption
Change-Id: I06aff77836527885b3df1cbd25834906cda73910
Add all the commands to keystone-manage as well as stubs for
the logic in the migration helpers, for the expand, migrate
and contract cycles of a rolling upgrade.
Follow-on patchs will add the logic to the migration helpers.
Partially Implements blueprint manage-migration
Change-Id: I9f138fe0bcbf5ffbb98e6fcebd7d897329a301b7
Previously, the revocation matching engine was basically a black box
that seemed to mysteriously match some tokens and not others, and it was
difficult to understand why an event would match a given token at a
glance. Fixed.
Change-Id: I751d891dc1cec2bb22ad6a3948aafaa34fc835d1
Add documentation for:
GET /domains/config/default
GET /domains/config/{group}/default
GET /domains/config/{group}/{option}/default
Change-Id: I1b6c8a5873edffdf4a091334b2cc0c9ce041aa62
Closes-Bug: #1609173
Nearly all the "relationship" links are missing in v3 APIs.
Added relationship links to v3 API pages.
Change-Id: If519692a5b48e563719e8cde5c694edad6e01ef8
Partial-Bug: #1609159
This makes the code more verbose (and more redundant) in favor of making
it easier to read.
There was a pretty consistent pattern to what it was actually doing, but
each block of code was basically written differently. This makes them
all the same.
Change-Id: I0804f490e28cedfaea2016e796a773ba50cc821a
This patch adds GET /auth/catalog, GET /auth/projects and GET /auth/domains
to the API site.
Change-Id: Ifda4676680bb9759348bbf7f3353741c45308b8c
Closes-bug: #1609178
Jenkins
Sean Dague
Werner Mendizabal
Henry Nash
Tin Lam
Anh Tran
liujiong
Dolph Mathews
Samuel de Medeiros Queiroz
Steve Martinelli
Andreas Jaeger
OpenStack Proposal Bot
gage hugo
liyingjun