releases/deliverables/ussuri/keystone.yaml

49 lines
1.9 KiB
YAML

---
launchpad: keystone
release-model: cycle-with-rc
team: keystone
type: service
repository-settings:
openstack/keystone: {}
cycle-highlights:
- The user experience for creating application credentials and trusts
has been greatly improved when using a federated authentication
method. Federated users whose role assignments come from mapped
group membership will have those group memberships persisted for
a configurable TTL after their token expires, during which time
their application credentials will remain valid.
- Keystone to Keystone assertions now contain the user's group memberships
on the keystone Identity Provider which can be mapped to group membership
on the keystone Service Provider.
- Federated users can now be given concrete role assignments without
relying on the mapping API by allowing federated users to be created
directly in keystone and linked to their Identity Provider.
- When bootstrapping a new keystone deployment, the admin role now
defaults to having the "immutable" option set, which prevents it
from being accidentally deleted or modified unless the "immutable"
option is deliberately removed.
- Keystonemiddleware no longer supports the Identity v2.0 API, which
was removed from keystone in previous release cycles.
releases:
- version: 17.0.0.0rc1
projects:
- repo: openstack/keystone
hash: 16ac75c2b55f3e53d574f87cfa190edef405da30
- version: 17.0.0.0rc2
projects:
- repo: openstack/keystone
hash: 28bce595bb5d7d61c09c183c053f89c216fb8d62
- version: 17.0.0
projects:
- repo: openstack/keystone
hash: 28bce595bb5d7d61c09c183c053f89c216fb8d62
diff-start: 16.0.0.0rc1
- version: 17.0.1
projects:
- repo: openstack/keystone
hash: 2cf2912fd4d23bd8515313eafc77c6df92c68b81
branches:
- name: stable/ussuri
location: 17.0.0.0rc1
release-notes: https://docs.openstack.org/releasenotes/keystone/ussuri.html