keystone (2:9.0.2-2) unstable; urgency=medium * Make the cron.hourly work also with a commented provider= directive (Closes: #828912). -- Thomas Goirand Wed, 29 Jun 2016 21:47:02 +0200 keystone (2:9.0.2-1) unstable; urgency=medium [ Ondřej Nový ] * d/copyright: Changed source URL to https protocol [ Thomas Goirand ] * New upstream release. * Removed CVE-2016-4911 patch applied upstream. -- Thomas Goirand Tue, 21 Jun 2016 11:00:27 +0200 keystone (2:9.0.0-2) unstable; urgency=high [ Ondřej Nový ] * Use /bin/sh as su shell in postinst script explicitly * Standards-Version is 3.9.8 now (no change) * Use /bin/sh instead of /bin/bash as default shell for "keystone" user [ Thomas Goirand ] * Fix the cron job to not run if we're not using UUID tokens, as it otherwise fail and fill-up the log file (LP: #1520321). * CVE-2016-4911: Incorrect Audit IDs in Keystone Fernet Tokens can result in revocation bypass. Add upstream patch: "Fix fernet audit ids for v2.0". (Closes: #824683). -- Thomas Goirand Thu, 19 May 2016 07:22:58 +0000 keystone (2:9.0.0-1) unstable; urgency=medium * New upstream release. -- Thomas Goirand Thu, 07 Apr 2016 17:53:48 +0200 keystone (2:9.0.0~rc2-1) unstable; urgency=medium * New upstream release. * Uploading to unstable. -- Thomas Goirand Mon, 04 Apr 2016 22:56:57 +0200 keystone (2:9.0.0~rc1-1) experimental; urgency=medium * New upstream release. * Require version >= 0.10.0 of python-migrate to make sure we have the python-decorator package installed. * Fixed (build-)depends for this release. -- Thomas Goirand Mon, 21 Mar 2016 16:12:36 +0100 keystone (2:9.0.0~b3-2) experimental; urgency=medium * Using "keystone-manage bootstrap" to create the initial admin, and then using it to further create users and endpoints. Note that through using environment variables, no passwords are leaking in /proc. -- Thomas Goirand Wed, 09 Mar 2016 21:31:44 +0000 keystone (2:9.0.0~b3-1) experimental; urgency=medium [ Ondřej Nový ] * Fixed VCS URLs (https). [ Thomas Goirand ] * New upstream release. * Fixed (build-)depends for this release. * Standards-Version: 3.9.7 (no change). * Rebased / refresh all patches. -- Thomas Goirand Thu, 03 Mar 2016 20:00:57 +0800 keystone (2:9.0.0~b2-3) experimental; urgency=medium * Added auto-creation of the Member and ResellerAdmin roles as this is needed for Swift auto-account-creation to work. -- Thomas Goirand Mon, 08 Feb 2016 08:11:14 +0000 keystone (2:9.0.0~b2-2) experimental; urgency=medium * Added git as build-depends. * Bump EPOCH to align with Ubuntu. * Remove version of init-system-helpers in keystone depends, as 1.18 is not available in Trusty. * By default, add a heat_stack_owner role. -- Thomas Goirand Mon, 25 Jan 2016 16:09:28 +0800 keystone (1:9.0.0~b2-1) experimental; urgency=medium * New upstream release. * Fixed (build-)depends for this release. * Fixed debian/copyright ordering. * Standards-Version is now 3.9.6 (no change). * Fix syntax error on an old debian/changelog entry. -- Thomas Goirand Mon, 07 Dec 2015 12:32:48 +0100 keystone (1:8.0.0-4) unstable; urgency=medium * If the debconf prompt for creating Keystone endpoint was yes, check first if there's no service already registered. * Also create a service project when creating users and tenants. * Setting-up /v2.0 as endpoint URL for Keystone to avoid compatibility issues with some services, even though we're using API v3. -- Thomas Goirand Wed, 04 Nov 2015 09:06:22 +0000 keystone (1:8.0.0-3) unstable; urgency=medium * Switching Keystone to use and configure API v3 by default. -- Thomas Goirand Mon, 02 Nov 2015 13:04:02 +0000 keystone (1:8.0.0-2) unstable; urgency=medium * Uploading to unstable. -- Thomas Goirand Fri, 16 Oct 2015 13:11:24 +0000 keystone (1:8.0.0-1) experimental; urgency=medium * New upstream release. * Now depends on pymysql. * Added a /etc/apache2/sites-available/wsgi-keystone.conf. -- Thomas Goirand Tue, 13 Oct 2015 14:56:01 +0200 keystone (1:8.0.0~rc1-1) experimental; urgency=medium * New upstream release. * Fixed (build-)depends for this release. * Rebased fixes-jsonschema-requirements.txt.patch. -- Thomas Goirand Wed, 23 Sep 2015 14:11:47 +0200 keystone (1:8.0.0~b3-4) experimental; urgency=medium * Doing the db_sync using the --noverbose option. -- Thomas Goirand Mon, 21 Sep 2015 12:40:13 +0000 keystone (1:8.0.0~b3-3) experimental; urgency=medium * Re-enabled KeystoneAdmin and KeystoneServiceAdmin roles, and using openstackclient instead of keystoneclient which is deprecated. * Stop doing pki_setup (it's not recommended upstream anymore). -- Thomas Goirand Mon, 21 Sep 2015 09:36:02 +0000 keystone (1:8.0.0~b3-2) experimental; urgency=medium * Fixed s
template_name: test-vnfd1
description: firewall1-example

service_properties:
  Id: firewall1-vnfd
  vendor: tacker
  version: 1
  type:
      - firewall1
vdus:
  vdu1:
    id: vdu1
    vm_image: sf_nsh_colorado
    instance_type: custom
    service_type: firewall1

    network_interfaces:
      management:
        network: example-net
        management: true

    placement_policy:
      # TODO: This availability zone is changed by the test case on the fly.
      # See JIRA SFC-73 for more info
      availability_zone: nova

    auto-scaling: noop
    monitoring_policy: noop
    failure_policy: respawn

    config:
      param0: key0
      param1: key1
689210). -- Thomas Goirand Mon, 01 Oct 2012 05:52:23 +0000 keystone (2012.1.1-8) unstable; urgency=low * Fixes parsing of the SQL connection in keystone.config. -- Thomas Goirand Sun, 30 Sep 2012 01:48:50 +0000 keystone (2012.1.1-7) unstable; urgency=low * Fixes band handling (eg: policy violation) of keystone.conf which was conffiles, but changed in the posinst (Closes: #687311). -- Thomas Goirand Wed, 12 Sep 2012 17:09:47 +0000 keystone (2012.1.1-6) unstable; urgency=high * CVE-2012-4413: Revoking a role does not affect existing tokens (Closes: #687428). -- Thomas Goirand Sun, 09 Sep 2012 02:21:11 +0000 keystone (2012.1.1-5) unstable; urgency=low * CVE-2012-3542: Fixes lack of authorization for adding users to tenants (Closes: #686265) * Added Chinese debconf translation thanks to ben . * Really adds the nl debconf translation this time (Closes: #685671). -- Thomas Goirand Mon, 27 Aug 2012 11:45:44 +0000 keystone (2012.1.1-4) unstable; urgency=low * Updated debian/keystone.templates, debian/control after review from the internationalization team (Closes: #683414, #679295). * Updated debconf translations with thanks to: - de: Pfannenstein Erik (Closes: #684877) - cs: Michal Šimůnek (Closes: #685434) - pl: Michał Kułach (Closes: #685431) - fr: David Prévot (Closes: #685325) - sv: Martin Bagge (Closes: #684942) - sk: helix84 (Closes: #684606) - ru: Yuri Kozlov (Closes: #684590) - da: Joe Dalton (Closes: #684565) - pt: Pedro Ribeiro (Closes: #682438) - es: SM Baby Siabef (Closes: #685435) - it: Beatrice Torracca (Closes: #685623) * Added debconf translations with thanks to: - pt_BR: Adriano Rafael Gomes (Closes: #685405) - nl: Jeroen Schot (Closes: #685671) -- Thomas Goirand Tue, 21 Aug 2012 08:06:07 +0000 keystone (2012.1.1-3) unstable; urgency=low * Re-added Debconf template which has been removed by the patch of 2012.1.1-2 from Bubulle (Closes: #683337). * Removed one occurence of a dependency declared twice: python-sqlalchemy. -- Thomas Goirand Tue, 31 Jul 2012 12:37:24 +0000 keystone (2012.1.1-2) unstable; urgency=low * Debconf templates and debian/control reviewed by the debian-l10n- english team as part of the Smith review project. Closes: #679295 * [Debconf translation updates] * Recycle translations from nova for several languages. Additionnally: * Danish (Joe Hansen). Closes: #680082 * Swedish (Martin Bagge / brother). Closes: #680847 * Spanish; (SM Baby Siabef). Closes: #681003 * Italian (Beatrice Torracca). Closes: #681249 * Slovak (Ivan Masár). Closes: #682784 * Fixed the get-vcs-source target in debian/rules. -- Thomas Goirand Thu, 19 Jul 2012 06:21:30 +0000 keystone (2012.1.1-1) unstable; urgency=low * New upstream release. -- Ghe Rivero Fri, 22 Jun 2012 09:41:24 +0200 keystone (2012.1-3) unstable; urgency=low * Add logrotate for keystone.log. Closes: #663717 -- Mehdi Abaakouk Tue, 22 May 2012 14:48:56 +0200 keystone (2012.1-2) unstable; urgency=low * Fixed python version requisites on webob and pam. Closes: #665804 -- Ghe Rivero Wed, 02 May 2012 10:17:35 +0200 keystone (2012.1-1) unstable; urgency=low * New upstream release -- Ghe Rivero Mon, 09 Apr 2012 09:06:22 +0200 keystone (2012.1~rc2-1) unstable; urgency=low * New upstream release. -- Ghe Rivero Wed, 04 Apr 2012 10:09:36 +0200 keystone (2012.1~rc1-2) unstable; urgency=low * Removed check timeout from keystone.postinst. Closes: #665739 -- Ghe Rivero Tue, 27 Mar 2012 13:12:01 +0200 keystone (2012.1~rc1-1) unstable; urgency=low * New upstream release. -- Ghe Rivero Sat, 24 Mar 2012 09:14:50 +0100 keystone (2012.1~e4+git35-g4e4f793-1) UNRELEASED; urgency=low [ Julien Danjou ] * Install egg-info This is needed at least for Swift. [ Ghe Rivero ] * Added keystone/auth-token question. Closes: #662458 -- Julien Danjou Fri, 02 Mar 2012 10:34:30 +0100 keystone (2012.1~e4-1) unstable; urgency=low * New upstream release -- Ghe Rivero Fri, 02 Mar 2012 08:38:43 +0100 keystone (2012.1~e3+git772-g6919b05-1) UNRELEASED; urgency=low [ Julien Danjou ] * Fix permissions /etc/keystone * Add projectmanager role on initial database creation * Do not run dbconfig by default That fixes LP#931236 until #607171 is fixed in dbconfig-common. Patch based on: http://bazaar.launchpad.net/~ubuntu-server-dev/keystone/essex/revision/83 -- Julien Danjou Mon, 06 Feb 2012 10:35:52 +0100 keystone (2012.1~e3-4) unstable; urgency=low * Add missing python-migrate, python-prettytable, python-mox in build deps (Closes: #658592) * Deactivate tests because they fails (upstream problem) -- Julien Danjou Mon, 06 Feb 2012 10:35:52 +0100 keystone (2012.1~e3-3) unstable; urgency=low * Add missing dependency on python-dateutil -- Julien Danjou Tue, 31 Jan 2012 12:37:35 +0100 keystone (2012.1~e3-2) unstable; urgency=low * Add dbconfig prerm -- Julien Danjou Fri, 27 Jan 2012 16:13:48 +0100 keystone (2012.1~e3-1) unstable; urgency=low * New upstream release. * Use dbconfig to configure database -- Julien Danjou Thu, 26 Jan 2012 17:03:10 +0100 keystone (2012.1~e2-4) unstable; urgency=low * Fix default location of keystone db file -- Ghe Rivero Tue, 24 Jan 2012 09:43:15 +0100 keystone (2012.1~e2-3) unstable; urgency=low * Add missing build depends on python-nose (Closes: #652805) * Remove useless python fields in control -- Julien Danjou Tue, 27 Dec 2011 11:40:18 +0100 keystone (2012.1~e2-2) unstable; urgency=low * Fix init script -- Julien Danjou Mon, 19 Dec 2011 17:16:48 +0100 keystone (2012.1~e2-1) unstable; urgency=low * New upstream release. * Disable doc building because it's currently failing. -- Julien Danjou Fri, 16 Dec 2011 11:12:44 +0100 keystone (2012.1~e1-2) unstable; urgency=low * Fix python-keystone installation file by including only keystone lib (Closes: #649907). * Add missing manpages. -- Julien Danjou Fri, 25 Nov 2011 10:43:59 +0100 keystone (2012.1~e1-1) unstable; urgency=low * New upstream release. * Cherry-pick 33c1c9390331b3bacd3791b537b6a1147715925c from upstream to fix documentation building. -- Julien Danjou Thu, 24 Nov 2011 16:21:50 +0100 keystone (2011.3-1) unstable; urgency=low * Initial release (Closes: #647611) -- Julien Danjou Tue, 15 Nov 2011 11:29:13 +0100