auth_token middleware in keystoneclient is deprecated

Bug #1342274 reported by Brant Knudson
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Barbican
Fix Released
Medium
Sam Leong
Ceilometer
Fix Released
Medium
Brant Knudson
Cinder
Fix Released
Undecided
Brant Knudson
Designate
Fix Released
Medium
Sam Leong
Glance
Fix Released
Medium
Brant Knudson
Ironic
Fix Released
Medium
aeva black
OpenStack Compute (nova)
Fix Released
Undecided
Brant Knudson
OpenStack DBaaS (Trove)
Fix Released
Medium
Guang Yee
OpenStack Heat
Fix Released
Undecided
Brant Knudson
OpenStack Object Storage (swift)
Fix Released
Undecided
Guang Yee
Sahara
Fix Released
Medium
Sergey Lukjanov
neutron
Fix Released
Undecided
Brant Knudson
python-keystoneclient
Fix Released
Medium
Dolph Mathews
zaqar
Fix Released
Medium
Sam Leong

Bug Description

The auth_token middleware in keystoneclient is deprecated and will only get security updates. Projects should use the auth_token middleware in keystonemiddleware.

Revision history for this message
Brant Knudson (blk-u) wrote :

This was fixed in nova with https://review.openstack.org/#/c/102342/

Changed in glance:
status: New → In Progress
Changed in nova:
status: New → Fix Committed
Changed in heat:
status: New → In Progress
Changed in neutron:
status: New → In Progress
Changed in ceilometer:
status: New → In Progress
Changed in nova:
assignee: nobody → Brant Knudson (blk-u)
Changed in heat:
assignee: nobody → Brant Knudson (blk-u)
Changed in ceilometer:
assignee: nobody → Brant Knudson (blk-u)
Changed in glance:
assignee: nobody → Brant Knudson (blk-u)
Changed in neutron:
assignee: nobody → Brant Knudson (blk-u)
Revision history for this message
Brant Knudson (blk-u) wrote :
Brant Knudson (blk-u)
Changed in cinder:
assignee: nobody → Brant Knudson (blk-u)
status: New → In Progress
Changed in sahara:
importance: Undecided → Medium
assignee: nobody → Sergey Lukjanov (slukjanov)
milestone: none → juno-2
status: New → Triaged
Revision history for this message
Dolph Mathews (dolph) wrote :

Added keystoneclient so we can have it emit a deprecation warning on startup.

Changed in python-keystoneclient:
assignee: nobody → Dolph Mathews (dolph)
importance: Undecided → Medium
status: New → Triaged
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-keystoneclient (master)

Fix proposed to branch: master
Review: https://review.openstack.org/107182

Changed in python-keystoneclient:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.openstack.org/102361
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=af00ac7906b55831c971710d55d9add6b5cc3825
Submitter: Jenkins
Branch: master

commit af00ac7906b55831c971710d55d9add6b5cc3825
Author: Brant Knudson <email address hidden>
Date: Tue Jun 24 16:52:51 2014 -0500

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    Closes-Bug: #1342274

    Change-Id: I1aadbe24db63eb2507b088cd53886d7f2e192cab

Changed in neutron:
status: In Progress → Fix Committed
aeva black (tenbrae)
Changed in ironic:
assignee: nobody → Devananda van der Veen (devananda)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to ironic (master)

Fix proposed to branch: master
Review: https://review.openstack.org/107197

Feilong Wang (flwang)
Changed in glance:
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to sahara (master)

Fix proposed to branch: master
Review: https://review.openstack.org/107257

Changed in sahara:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-keystoneclient (master)

Reviewed: https://review.openstack.org/107182
Committed: https://git.openstack.org/cgit/openstack/python-keystoneclient/commit/?id=5c9b13d4c7222b71084a0b4fd836e1fdda0edaf7
Submitter: Jenkins
Branch: master

commit 5c9b13d4c7222b71084a0b4fd836e1fdda0edaf7
Author: Dolph Mathews <email address hidden>
Date: Tue Jul 15 16:39:14 2014 -0500

    add deprecation warning for auth_token

    Change-Id: I1faaae0373a7ae12ee528ab5c71741a2b1122d43
    Closes-Bug: 1342274

Changed in python-keystoneclient:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to glance (master)

Reviewed: https://review.openstack.org/102352
Committed: https://git.openstack.org/cgit/openstack/glance/commit/?id=adeca091242eed0b691b88f6bcaac8c8044120f6
Submitter: Jenkins
Branch: master

commit adeca091242eed0b691b88f6bcaac8c8044120f6
Author: Brant Knudson <email address hidden>
Date: Tue Jun 24 16:07:36 2014 -0500

    Use auth_token from keystonemiddleware

    The auth_token middleware in python-keystoneclient is now
    deprecated and has been moved to keystonemiddleware.

    Closes-Bug: #1342274

    Change-Id: Ic8ba2d2f470ec052ba13c3b63b26d5e2270f7412

Changed in glance:
status: In Progress → Fix Committed
Changed in marconi:
assignee: nobody → Sam Leong (chio-fai-sam-leong)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to marconi (master)

Fix proposed to branch: master
Review: https://review.openstack.org/108540

Revision history for this message
Nikhil Manchanda (slicknik) wrote :

Patchset uploaded for fixing this to trove: https://review.openstack.org/#/c/108541/

Changed in trove:
importance: Undecided → High
milestone: none → juno-2
status: New → In Progress
assignee: nobody → Guang Yee (guang-yee)
importance: High → Medium
Kurt Griffiths (kgriffs)
Changed in marconi:
importance: Undecided → Medium
milestone: none → juno-3
Changed in sahara:
milestone: juno-2 → juno-3
Changed in designate:
assignee: nobody → Sam Leong (chio-fai-sam-leong)
status: New → In Progress
Dolph Mathews (dolph)
Changed in python-keystoneclient:
milestone: none → 0.10.0
Kiall Mac Innes (kiall)
Changed in designate:
importance: Undecided → Medium
milestone: none → juno-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to trove (master)

Reviewed: https://review.openstack.org/108541
Committed: https://git.openstack.org/cgit/openstack/trove/commit/?id=fbc389ec432af3152cb81d1027baeed0675fb89d
Submitter: Jenkins
Branch: master

commit fbc389ec432af3152cb81d1027baeed0675fb89d
Author: guang-yee <email address hidden>
Date: Mon Jul 21 17:29:13 2014 -0700

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    Change-Id: Ib43223c2cfb31198b9438bb02f0d68f2bab7eb7e
    Closes-Bug: #1342274

Changed in trove:
status: In Progress → Fix Committed
Changed in glance:
milestone: none → juno-2
Changed in nova:
milestone: none → juno-2
status: Fix Committed → Fix Released
Changed in neutron:
milestone: none → juno-2
status: Fix Committed → Fix Released
Changed in trove:
status: Fix Committed → Fix Released
Guang Yee (guang-yee)
Changed in swift:
assignee: nobody → Guang Yee (guang-yee)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to swift (master)

Fix proposed to branch: master
Review: https://review.openstack.org/109047

Changed in swift:
status: New → In Progress
Changed in barbican:
assignee: nobody → Sam Leong (chio-fai-sam-leong)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to barbican (master)

Fix proposed to branch: master
Review: https://review.openstack.org/109066

aeva black (tenbrae)
Changed in ironic:
importance: Undecided → Medium
milestone: none → juno-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to swift (master)

Reviewed: https://review.openstack.org/109047
Committed: https://git.openstack.org/cgit/openstack/swift/commit/?id=ee14d58d84e6dfb2b6bf007a18a78a49d080db6e
Submitter: Jenkins
Branch: master

commit ee14d58d84e6dfb2b6bf007a18a78a49d080db6e
Author: guang-yee <email address hidden>
Date: Wed Jul 23 10:27:40 2014 -0700

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    Change-Id: Ia04aa83348e0776cb3239cb5420ee1450a990d5b
    Closes-Bug: #1342274

Changed in swift:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to designate (master)

Reviewed: https://review.openstack.org/108816
Committed: https://git.openstack.org/cgit/openstack/designate/commit/?id=3ea34d29ad837e921d27fa209a3eb14c61c7daa6
Submitter: Jenkins
Branch: master

commit 3ea34d29ad837e921d27fa209a3eb14c61c7daa6
Author: chioleong <email address hidden>
Date: Tue Jul 22 12:23:47 2014 -0700

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    Change-Id: Id5056c834fb99f93c507a867ff6d8c085d7394f9
    Closes-Bug: #1342274

Changed in designate:
status: In Progress → Fix Committed
Changed in barbican:
importance: Undecided → Medium
milestone: none → juno-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to barbican (master)

Reviewed: https://review.openstack.org/109066
Committed: https://git.openstack.org/cgit/openstack/barbican/commit/?id=b1368ee45284dfed6944de7709c026fc50d4c32e
Submitter: Jenkins
Branch: master

commit b1368ee45284dfed6944de7709c026fc50d4c32e
Author: chioleong <email address hidden>
Date: Wed Jul 23 11:25:41 2014 -0700

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    Change-Id: I5f17a4ea4e81e3d10142cb92f80de8d03c94c8c6
    Closes-Bug: #1342274

Changed in barbican:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in glance:
status: Fix Committed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ceilometer (master)

Reviewed: https://review.openstack.org/102353
Committed: https://git.openstack.org/cgit/openstack/ceilometer/commit/?id=243d4ad7ef217e1249e0e5ea89dc8fb2a610fa2f
Submitter: Jenkins
Branch: master

commit 243d4ad7ef217e1249e0e5ea89dc8fb2a610fa2f
Author: Brant Knudson <email address hidden>
Date: Tue Jun 24 16:25:26 2014 -0500

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    test_keystone_middleware_conf and
    test_keystone_middleware_parse_conffile were removed. These tests
    were relying on undocumented behavior (how the config options turn
    into attributes). This doesn't work anymore since the
    keystonemiddleware version doesn't provide any public API other than
    calling it as a wsgi app, and then doesn't document what internal
    operations it will do when called so isn't safe to be called in
    unit tests. Tests verifying that the auth_token middleware can read
    its config options should be done in keystonemiddleware.

    Closes-Bug: #1342274

    Change-Id: I1aadbe24db63eb2507b088cd53886d7f2e192cab

Changed in ceilometer:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to swift (feature/ec)

Fix proposed to branch: feature/ec
Review: https://review.openstack.org/111499

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on swift (feature/ec)

Change abandoned by paul luse (<email address hidden>) on branch: feature/ec
Review: https://review.openstack.org/111499
Reason: accident

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to swift (feature/ec)

Fix proposed to branch: feature/ec
Review: https://review.openstack.org/111866

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to swift (feature/ec)
Download full text (15.2 KiB)

Reviewed: https://review.openstack.org/111866
Committed: https://git.openstack.org/cgit/openstack/swift/commit/?id=9ace546b81b7efe606314e24fdb951ffe8e9a253
Submitter: Jenkins
Branch: feature/ec

commit e2255fc1f4d08993f41d3ff2eacc62a3c5f66ecd
Author: David Goetz <email address hidden>
Date: Thu Jul 31 10:19:10 2014 -0700

    fix expirer bug with unicode container listings

    If the container names in the expirer's account are returned as
    unicode strings (as is the case with some json libraries), the
    expirer compared eg u'1' == '1', which is problematic. This patch
    ensures that the unicode is coerced to ascii so the comparison
    is correct.

    Change-Id: I72b322e7513f7da32e8dc75c6bf0e7e016948c88

commit 4286f36a60446e322f23a329416be3ed67db1149
Author: anc <email address hidden>
Date: Mon Mar 10 11:46:58 2014 +0000

    Enable object system metadata on PUTs

    This patch takes a first step towards support
    for object system metadata by enabling headers
    in the x-object-sysmeta- namespace to be
    persisted when objects are PUT. This should be
    useful for other pending patches such as on
    demand migration and server side encryption
    (https://review.openstack.org/#/c/64430/ and
    https://review.openstack.org/#/c/76578/1).

    The x-object-sysmeta- namespace is already
    reserved/protected by the gatekeeper and
    passed through the proxy. This patch modifies
    the object server to persist these headers
    alongside user metadata when an object is
    PUT.

    This patch will preserve existing object
    system metadata and ignore any new system
    metadata when handling object POSTs,
    including POST-as-copy operations. Support
    for modification of object system metadata
    with a POST request requires further work
    as discussed in the blueprint.

    This patch will preserve existing object
    system metadata and update it with new
    system metadata when copying an object.

    A new probe test is added which makes use of
    the BrainSplitter class that has been moved
    from test_container_merge_policy_index.py to
    a new module brain.py.

    blueprint object-system-metadata

    Change-Id: If716bc15730b7322266ebff4ab8dd31e78e4b962

commit 8ad37b2217c30b756bb79ead84be7c04f628ed36
Author: Christian Schwede <email address hidden>
Date: Fri Aug 1 13:55:21 2014 +0000

    Fix swift-dispersion-populate bug when using SimpleClient class

    Commit 7fcbbebb changed the internal client a little bit and removed the
    class variable self.attempts in SimpleClient. This is currently still
    needed in swift-dispersion-populate to track the number of retries, thus
    re-adding it again.

    Closes-Bug: 1351323
    Change-Id: I98ba6441607158b34708b2dbb2d1a63788681d63

commit 5a84b1cde102dac4ae5a40a20a364ada1dc547e9
Author: Samuel Merritt <email address hidden>
Date: Thu Jul 31 12:18:47 2014 -0700

    Put proxy-logging in object expirer's sample config

    It's generally better to have logs for something than to not have
    logs. This way, the object expirer (if using the sample config as a
    starting point) will log wh...

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to cinder (master)

Reviewed: https://review.openstack.org/102355
Committed: https://git.openstack.org/cgit/openstack/cinder/commit/?id=1917e2ff0702f1d691b94d55058ac2e85bf0ce5a
Submitter: Jenkins
Branch: master

commit 1917e2ff0702f1d691b94d55058ac2e85bf0ce5a
Author: Brant Knudson <email address hidden>
Date: Tue Jun 24 16:32:54 2014 -0500

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    Closes-Bug: #1342274
    Change-Id: I1aadbe24db63eb2507b088cd53886d7f2e192cab

Changed in cinder:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to marconi (master)

Reviewed: https://review.openstack.org/108540
Committed: https://git.openstack.org/cgit/openstack/marconi/commit/?id=93f3cd75e1c55c8e21afc03e338345443bd4ebf5
Submitter: Jenkins
Branch: master

commit 93f3cd75e1c55c8e21afc03e338345443bd4ebf5
Author: chioleong <email address hidden>
Date: Mon Jul 21 17:23:01 2014 -0700

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    Change-Id: I174b62d035b84aff1cf0d60efb84f7650445f42c
    Closes-Bug: #1342274

Changed in marconi:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ironic (master)

Reviewed: https://review.openstack.org/107197
Committed: https://git.openstack.org/cgit/openstack/ironic/commit/?id=50003a107d48053683229e81ea20c989f3f5c0a2
Submitter: Jenkins
Branch: master

commit 50003a107d48053683229e81ea20c989f3f5c0a2
Author: Devananda van der Veen <email address hidden>
Date: Tue Jul 15 15:35:45 2014 -0700

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    This patch updates Ironic to use the new keystonemiddleware package.

    Change-Id: Ifb48996867f9f51c4dbedde0e0d9476c2d2818b4
    Closes-Bug: #1342274

Changed in ironic:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (master)

Reviewed: https://review.openstack.org/102358
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=60a26a4e51698bb6904c2c81c364564a627975e8
Submitter: Jenkins
Branch: master

commit 60a26a4e51698bb6904c2c81c364564a627975e8
Author: Brant Knudson <email address hidden>
Date: Tue Jun 24 16:37:35 2014 -0500

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    Closes-Bug: #1342274

    Change-Id: I1aadbe24db63eb2507b088cd53886d7f2e192cab

Changed in heat:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in swift:
status: Fix Committed → Fix Released
milestone: none → 2.1.0
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to sahara (master)

Reviewed: https://review.openstack.org/107257
Committed: https://git.openstack.org/cgit/openstack/sahara/commit/?id=6ff0b1512bae31fd30a2bca610f33a5a0eac467d
Submitter: Jenkins
Branch: master

commit 6ff0b1512bae31fd30a2bca610f33a5a0eac467d
Author: Sergey Lukjanov <email address hidden>
Date: Wed Jul 16 12:28:50 2014 +0400

    Use auth_token from keystonemiddleware

    auth_token middleware in python-keystoneclient is deprecated and has
    been moved to the keystonemiddleware repo.

    Change-Id: I42ee04171e98518f8728af4996e687b8a46cd27c
    Closes-Bug: #1342274

Changed in sahara:
status: In Progress → Fix Committed
Eoghan Glynn (eglynn)
Changed in ceilometer:
importance: Undecided → Medium
milestone: none → juno-3
Thierry Carrez (ttx)
Changed in ceilometer:
milestone: juno-3 → none
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in cinder:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in barbican:
milestone: juno-3 → none
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in zaqar:
milestone: juno-3 → none
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in ironic:
milestone: juno-3 → none
status: Fix Committed → Fix Released
milestone: none → juno-3
Thierry Carrez (ttx)
Changed in heat:
status: Fix Committed → Fix Released
Changed in sahara:
milestone: juno-3 → none
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in designate:
milestone: juno-3 → none
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in glance:
milestone: juno-2 → 2014.2
Thierry Carrez (ttx)
Changed in nova:
milestone: juno-2 → 2014.2
Thierry Carrez (ttx)
Changed in neutron:
milestone: juno-2 → 2014.2
Thierry Carrez (ttx)
Changed in trove:
milestone: juno-2 → 2014.2
Thierry Carrez (ttx)
Changed in ironic:
milestone: juno-3 → 2014.2
Revision history for this message
Steve Martinelli (stevemar) wrote :

the middleware package has been removed from keystoneclient as of version 2.1.0

Changed in python-keystoneclient:
milestone: 0.10.0 → none
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.