---
launchpad: keystone
release-model: cycle-with-milestones
team: keystone
type: service
releases:
  - version: 14.0.0.0b1
    projects:
      - repo: openstack/keystone
        hash: 395c7088c2d8f11d57ac27878d0f647c42b1a908
  - version: 14.0.0.0b2
    projects:
      - repo: openstack/keystone
        hash: 104717d45847b3afcbd9adb4bfb887f8a8fffe66
  - projects:
      - hash: b8749774559e4e9c8129874712dd1d0bcbf1c0c1
        repo: openstack/keystone
    version: 14.0.0.0b3
  - projects:
      - hash: b625ccc42c4fd7e7a95cb54d6768a5a6fa3769db
        repo: openstack/keystone
    version: 14.0.0.0rc1
  - projects:
      - hash: c767e254979c96858a81cc4bbe8d9773d4dd539b
        repo: openstack/keystone
    version: 14.0.0.0rc2
  - diff-start: 13.0.0.0rc1
    projects:
      - hash: c767e254979c96858a81cc4bbe8d9773d4dd539b
        repo: openstack/keystone
    version: 14.0.0
  - projects:
      - hash: ec1c2e4f7bc20e6a70140c0be614d6c001973d1e
        repo: openstack/keystone
    version: 14.0.1
  - projects:
      - hash: c8904b8679d2aca12b69828e36cc8f6881e83373
        repo: openstack/keystone
    version: 14.1.0
cycle-highlights:
  - |
    Support for a new hierarchical enforcement model has been implemented in
    addition to several improvements to the unified limits APIs.
  - |
    Parts of keystone's API have converted from a custom WSGI implementation to
    using flask and flask-restful. This may affect people using custom
    middleware or injecting custom paste pipelines.
  - |
    The token provider API has been refactored to have cleaner interfaces,
    reducing technical debt. Deployments using custom token providers may be
    affected.
  - |
    Keystone now creates 2 default roles (``member`` and ``reader``) in
    addition to the ``admin`` role upon installation or bootstrap. These roles
    will be incorporated across other service policies by default in the future
    as an effort to simplify RBAC across OpenStack. Note that this might have
    an impact on deployments given case sensitivity issues with role naming.
    You can read about case sensitivty within keystone in `here
    <https://docs.openstack.org/keystone/rocky/admin/identity-case-insensitive.html>`_.
repository-settings:
  openstack/keystone: {}
branches:
  - location: 14.0.0.0rc1
    name: stable/rocky
release-notes: https://docs.openstack.org/releasenotes/keystone/rocky.html