)]}'
{"releasenotes/notes/bp-credential-encryption-93dcb67b3508e91a.yaml":[{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"75761b87bc1a34960e0845e2050f8973df320a83","unresolved":false,"context_lines":[{"line_number":15,"context_line":"    the ``keystone-manage credential_setup`` command in order to use the"},{"line_number":16,"context_line":"    credential API in Newton, or to finish the upgrade from Mitaka to Newton."},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"    If not using the rolling upgrade steps, this will result in a service outage"},{"line_number":19,"context_line":"    for the credential API where credentials will be read-only for the duration"},{"line_number":20,"context_line":"    of the upgrade process."},{"line_number":21,"context_line":"fixes:"},{"line_number":22,"context_line":"  - \u003e"},{"line_number":23,"context_line":"    [`Bug 1619758 \u003chttps://bugs.launchpad.net/keystone/+bug/1619758\u003e`_]"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1a430d35_5431a70a","line":20,"range":{"start_line":18,"start_character":0,"end_line":20,"end_character":27},"updated":"2017-02-05 05:10:41.000000000","message":"Do you mean there is no service outage if using rolling upgrade steps? I think the credentials will also be read-only before contraction phase for the rolling upgrade.","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"0b6b7e094eef64efb8a98f5598dff3d041ef952a","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"    If not using the rolling upgrade steps, this will result in a service outage"},{"line_number":19,"context_line":"    for the credential API where credentials will be read-only for the duration"},{"line_number":20,"context_line":"    of the upgrade process."},{"line_number":21,"context_line":"fixes:"},{"line_number":22,"context_line":"  - \u003e"},{"line_number":23,"context_line":"    [`Bug 1619758 \u003chttps://bugs.launchpad.net/keystone/+bug/1619758\u003e`_]"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"fa31d9ce_00b0efdc","line":20,"in_reply_to":"1a430d35_08e42d39","updated":"2017-02-10 04:42:34.000000000","message":"Lance is right. But I think that is expected, if you do not use rolling upgrades there will always be an outage. Do I need to add something here?","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b45b09d8fcf581a1c2f5855de4d885309bfff6d","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"    If not using the rolling upgrade steps, this will result in a service outage"},{"line_number":19,"context_line":"    for the credential API where credentials will be read-only for the duration"},{"line_number":20,"context_line":"    of the upgrade process."},{"line_number":21,"context_line":"fixes:"},{"line_number":22,"context_line":"  - \u003e"},{"line_number":23,"context_line":"    [`Bug 1619758 \u003chttps://bugs.launchpad.net/keystone/+bug/1619758\u003e`_]"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1a430d35_08e42d39","line":20,"in_reply_to":"1a430d35_5431a70a","updated":"2017-02-06 21:33:28.000000000","message":"Yeah - I think this is meant to say there will be a service outage for the credential api *if* following the rolling upgrade steps. If you\u0027re not following the rolling upgrade steps, then you\u0027re going to see a service outage anyway.","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"}],"releasenotes/notes/bp-ldap-preprocessing-521d92445505b8a3.yaml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b45b09d8fcf581a1c2f5855de4d885309bfff6d","unresolved":false,"context_lines":[{"line_number":4,"context_line":"    [`blueprint ldap-preprocessing \u003chttps://blueprints.launchpad.net/keystone/+spec/ldap-preprocessing\u003e`_]"},{"line_number":5,"context_line":"    The ``keystone-manage mapping_populate`` command was added. This command"},{"line_number":6,"context_line":"    will pre-populate user entries with all users from LDAP. This will improve"},{"line_number":7,"context_line":"    performance when users authenticate. It should be used when an LDAP is first"},{"line_number":8,"context_line":"    configured, or after calling ``keystone-manage mapping_purge``, before any"},{"line_number":9,"context_line":"    queries related to the domain are made. For more information see"},{"line_number":10,"context_line":"    ``keystone-manage mapping_populate --help``."}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1a430d35_885c9dee","line":7,"updated":"2017-02-06 21:33:28.000000000","message":"nit: It should be used after initially configuring LDAP, or after calling...","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"0b6b7e094eef64efb8a98f5598dff3d041ef952a","unresolved":false,"context_lines":[{"line_number":4,"context_line":"    [`blueprint ldap-preprocessing \u003chttps://blueprints.launchpad.net/keystone/+spec/ldap-preprocessing\u003e`_]"},{"line_number":5,"context_line":"    The ``keystone-manage mapping_populate`` command was added. This command"},{"line_number":6,"context_line":"    will pre-populate user entries with all users from LDAP. This will improve"},{"line_number":7,"context_line":"    performance when users authenticate. It should be used when an LDAP is first"},{"line_number":8,"context_line":"    configured, or after calling ``keystone-manage mapping_purge``, before any"},{"line_number":9,"context_line":"    queries related to the domain are made. For more information see"},{"line_number":10,"context_line":"    ``keystone-manage mapping_populate --help``."}],"source_content_type":"text/x-yaml","patch_set":3,"id":"fa31d9ce_e0e11bd2","line":7,"in_reply_to":"1a430d35_885c9dee","updated":"2017-02-10 04:42:34.000000000","message":"Done","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"}],"releasenotes/notes/bp-pre-cache-tokens-73450934918af26b.yaml":[{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"75761b87bc1a34960e0845e2050f8973df320a83","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint pci-dss \u003chttps://blueprints.launchpad.net/keystone/+spec/pci-dss\u003e`_]"},{"line_number":5,"context_line":"    New configuration option ``[token] cache_on_issue`` was added that enables"},{"line_number":6,"context_line":"    tokens to be cached on issuance. This reduces the time necessary to validate"},{"line_number":7,"context_line":"    the token (the first time)."}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1a430d35_f42293b8","line":4,"range":{"start_line":4,"start_character":25,"end_line":4,"end_character":80},"updated":"2017-02-05 05:10:41.000000000","message":"This could fall into the scope of pci-dss? look like it should be this BP https://blueprints.launchpad.net/keystone/+spec/pre-cache-tokens?","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b45b09d8fcf581a1c2f5855de4d885309bfff6d","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint pci-dss \u003chttps://blueprints.launchpad.net/keystone/+spec/pci-dss\u003e`_]"},{"line_number":5,"context_line":"    New configuration option ``[token] cache_on_issue`` was added that enables"},{"line_number":6,"context_line":"    tokens to be cached on issuance. This reduces the time necessary to validate"},{"line_number":7,"context_line":"    the token (the first time)."}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1a430d35_c8f5c5cb","line":4,"in_reply_to":"1a430d35_f42293b8","updated":"2017-02-06 21:33:28.000000000","message":"++","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"0b6b7e094eef64efb8a98f5598dff3d041ef952a","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint pci-dss \u003chttps://blueprints.launchpad.net/keystone/+spec/pci-dss\u003e`_]"},{"line_number":5,"context_line":"    New configuration option ``[token] cache_on_issue`` was added that enables"},{"line_number":6,"context_line":"    tokens to be cached on issuance. This reduces the time necessary to validate"},{"line_number":7,"context_line":"    the token (the first time)."}],"source_content_type":"text/x-yaml","patch_set":3,"id":"fa31d9ce_a0c1e330","line":4,"range":{"start_line":4,"start_character":25,"end_line":4,"end_character":80},"in_reply_to":"1a430d35_f42293b8","updated":"2017-02-10 04:42:34.000000000","message":"oops","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"}],"releasenotes/notes/bp-python3-e4189e0a1a6e2e4f.yaml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b45b09d8fcf581a1c2f5855de4d885309bfff6d","unresolved":false,"context_lines":[{"line_number":7,"context_line":"    Keystone now supports being run under Python 3, specifically version 3.4 is"},{"line_number":8,"context_line":"    used in our unit tests."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"    As a part of moving to Python 3, keystone now relies on `pyldap"},{"line_number":11,"context_line":"    \u003chttps://github.com/pyldap/pyldap\u003e`_  instead of `python-ldap"},{"line_number":12,"context_line":"    \u003chttps://www.python-ldap.org\u003e`_ as the latter is not maintained and only"},{"line_number":13,"context_line":"    works in Python 2.X. ``pyldap`` is a drop-in replacement of ``python-ldap``"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1a430d35_4830f59e","line":10,"updated":"2017-02-06 21:33:28.000000000","message":"nit: As part of supporting the OpenStack community goal to adopt Python 3...","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"0b6b7e094eef64efb8a98f5598dff3d041ef952a","unresolved":false,"context_lines":[{"line_number":7,"context_line":"    Keystone now supports being run under Python 3, specifically version 3.4 is"},{"line_number":8,"context_line":"    used in our unit tests."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"    As a part of moving to Python 3, keystone now relies on `pyldap"},{"line_number":11,"context_line":"    \u003chttps://github.com/pyldap/pyldap\u003e`_  instead of `python-ldap"},{"line_number":12,"context_line":"    \u003chttps://www.python-ldap.org\u003e`_ as the latter is not maintained and only"},{"line_number":13,"context_line":"    works in Python 2.X. ``pyldap`` is a drop-in replacement of ``python-ldap``"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"fa31d9ce_e0083b94","line":10,"in_reply_to":"1a430d35_4830f59e","updated":"2017-02-10 04:42:34.000000000","message":"Done","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"}],"releasenotes/notes/bp-shadow-users-newton-dcd7bd148efef049.yaml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b45b09d8fcf581a1c2f5855de4d885309bfff6d","unresolved":false,"context_lines":[{"line_number":8,"context_line":"  - \u003e"},{"line_number":9,"context_line":"    [`blueprint shadow-users-newton \u003chttps://blueprints.launchpad.net/keystone/+spec/shadow-users-newton\u003e`_]"},{"line_number":10,"context_line":"    The ``identity:list_projects_for_groups`` and ``identity:list_domains_for_groups``"},{"line_number":11,"context_line":"    rules have been changed to better reflect their purpose. These entries were"},{"line_number":12,"context_line":"    only used to allowed ephemeral federated users to discover authorization,"},{"line_number":13,"context_line":"    however with federated users no longer being ephemeral, the rules were"},{"line_number":14,"context_line":"    renamed in ``policy.json`` and ``policy.v3cloudsample.json``. From::"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1a430d35_88e1fd00","line":11,"updated":"2017-02-06 21:33:28.000000000","message":"s/rules/policies/","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"0b6b7e094eef64efb8a98f5598dff3d041ef952a","unresolved":false,"context_lines":[{"line_number":8,"context_line":"  - \u003e"},{"line_number":9,"context_line":"    [`blueprint shadow-users-newton \u003chttps://blueprints.launchpad.net/keystone/+spec/shadow-users-newton\u003e`_]"},{"line_number":10,"context_line":"    The ``identity:list_projects_for_groups`` and ``identity:list_domains_for_groups``"},{"line_number":11,"context_line":"    rules have been changed to better reflect their purpose. These entries were"},{"line_number":12,"context_line":"    only used to allowed ephemeral federated users to discover authorization,"},{"line_number":13,"context_line":"    however with federated users no longer being ephemeral, the rules were"},{"line_number":14,"context_line":"    renamed in ``policy.json`` and ``policy.v3cloudsample.json``. From::"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"fa31d9ce_a0ef23af","line":11,"in_reply_to":"1a430d35_88e1fd00","updated":"2017-02-10 04:42:34.000000000","message":"Done","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"}],"releasenotes/notes/bug-1590587-8f120604a6625852.yaml":[{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"75761b87bc1a34960e0845e2050f8973df320a83","unresolved":false,"context_lines":[{"line_number":4,"context_line":"    [`bug 1590587 \u003chttps://bugs.launchpad.net/keystone/+bug/1590587\u003e`_]"},{"line_number":5,"context_line":"    When assigning domain specific roles, the domain of the `role` and the"},{"line_number":6,"context_line":"    domain of the `project` must match. This is now validated and the REST"},{"line_number":7,"context_line":"    call will return a 403 Forbidden if they do not match."}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1a430d35_d48917cc","line":7,"range":{"start_line":7,"start_character":37,"end_line":7,"end_character":57},"updated":"2017-02-05 05:10:41.000000000","message":"This reads more clearly!","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"0b6b7e094eef64efb8a98f5598dff3d041ef952a","unresolved":false,"context_lines":[{"line_number":4,"context_line":"    [`bug 1590587 \u003chttps://bugs.launchpad.net/keystone/+bug/1590587\u003e`_]"},{"line_number":5,"context_line":"    When assigning domain specific roles, the domain of the `role` and the"},{"line_number":6,"context_line":"    domain of the `project` must match. This is now validated and the REST"},{"line_number":7,"context_line":"    call will return a 403 Forbidden if they do not match."}],"source_content_type":"text/x-yaml","patch_set":3,"id":"fa31d9ce_e02f5bf4","line":7,"range":{"start_line":7,"start_character":37,"end_line":7,"end_character":57},"in_reply_to":"1a430d35_d48917cc","updated":"2017-02-10 04:42:34.000000000","message":"thanks :)","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"}],"releasenotes/notes/bug-1596500-b3c284be50d93ef5.yaml":[{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"75761b87bc1a34960e0845e2050f8973df320a83","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`bug 1596500 \u003chttps://bugs.launchpad.net/keystone/+bug/1596500\u003e`_]"},{"line_number":5,"context_line":"    The ``created_at`` field of a user password may be reset if trailing the"},{"line_number":6,"context_line":"    master development branch. Note that this will only affect deployments that"},{"line_number":7,"context_line":"    have PCI support enabled, via the ``[security_compliance]`` configuration"},{"line_number":8,"context_line":"    options."}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1a430d35_af2516ac","line":6,"range":{"start_line":6,"start_character":4,"end_line":6,"end_character":22},"updated":"2017-02-05 05:10:41.000000000","message":"It\u0027s not clear what\u0027s the master actually mean here with time gone,maybe say the Newton stable release instead?","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"0b6b7e094eef64efb8a98f5598dff3d041ef952a","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`bug 1596500 \u003chttps://bugs.launchpad.net/keystone/+bug/1596500\u003e`_]"},{"line_number":5,"context_line":"    The ``created_at`` field of a user password may be reset if trailing the"},{"line_number":6,"context_line":"    master development branch. Note that this will only affect deployments that"},{"line_number":7,"context_line":"    have PCI support enabled, via the ``[security_compliance]`` configuration"},{"line_number":8,"context_line":"    options."}],"source_content_type":"text/x-yaml","patch_set":3,"id":"fa31d9ce_203a5337","line":6,"range":{"start_line":6,"start_character":4,"end_line":6,"end_character":22},"in_reply_to":"1a430d35_af2516ac","updated":"2017-02-10 04:42:34.000000000","message":"Done","commit_id":"50f5dffdcdc76baecfad36ca26f8f2c5ce17af7e"}]}