Skip to content

chore: release#754

Open
openstack-experimental-release-plz[bot] wants to merge 1 commit into
mainfrom
release-plz-2026-06-05T09-00-15Z
Open

chore: release#754
openstack-experimental-release-plz[bot] wants to merge 1 commit into
mainfrom
release-plz-2026-06-05T09-00-15Z

Conversation

@openstack-experimental-release-plz

@openstack-experimental-release-plz openstack-experimental-release-plz Bot commented Jun 5, 2026

Copy link
Copy Markdown
Contributor

🤖 New release

  • openstack-keystone-config: 0.1.0
  • openstack-keystone-core-types: 0.1.1
  • openstack-keystone-api-types: 0.1.0 -> 0.1.1 (✓ API compatible changes)
  • openstack-keystone-distributed-storage: 0.1.0 -> 0.1.1 (✓ API compatible changes)
  • openstack-keystone-core: 0.1.1 -> 0.1.2 (✓ API compatible changes)
  • openstack-keystone-appcred-driver-sql: 0.1.0
  • openstack-keystone-assignment-driver-sql: 0.1.0
  • openstack-keystone-catalog-driver-sql: 0.1.0
  • openstack-keystone-federation-driver-sql: 0.1.0
  • openstack-keystone-identity-driver-sql: 0.1.0
  • openstack-keystone-idmapping-driver-sql: 0.1.0
  • openstack-keystone-k8s-auth-driver-raft: 0.1.0
  • openstack-keystone-k8s-auth-driver-sql: 0.1.0
  • openstack-keystone-resource-driver-sql: 0.1.0
  • openstack-keystone-revoke-driver-sql: 0.1.0
  • openstack-keystone-role-driver-sql: 0.1.0
  • openstack-keystone-spiffe-driver-raft: 0.1.0
  • openstack-keystone-token-driver-fernet: 0.1.1
  • openstack-keystone-token-restriction-driver-sql: 0.1.0
  • openstack-keystone-trust-driver-sql: 0.1.0
  • openstack-keystone-webauthn: 0.1.0
  • openstack-keystone: 0.1.1 -> 0.1.2 (✓ API compatible changes)
  • openstack-keystone-cli-manage: 0.1.0
Changelog

openstack-keystone-config

0.1.0 - 2026-06-13

Added

  • Add inter-provider event notification system (#784)
  • Add SO_PEERCRED peer credential validation (#775)
  • Validate password for compliance conformity (#774)
  • Enforce minimum range boundaries for security
  • Add role-imply rest api (#750)
  • Add user update functionality (#747)
  • Make drivers more dynamic (#737)
  • Add keystone container with opa and policies (#738)
  • Add Admin interface over the UDS (#735)
  • Add spiffe provider (#733)
  • Introduce SecurityContext (#710)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add raft support under skaffold (#667)
  • Introduce raft backend for webauthn (#658)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Rename identity_mapping to idmapping (#788)
  • Replace Regex with str::find for db connection (#760)
  • Redesign SecurityContext with two-phase validation (#717)
  • Split out remaining sql drivers (#633)
  • Split config into standalone crate (#628)

openstack-keystone-core-types

0.1.1 - 2026-06-13

Added

  • Add endpoint CRUD to catalog provider (#785)
  • Add inter-provider event notification system (#784)
  • Add service CRUD to the catalog provider (#773)
  • Validate password for compliance conformity (#774)
  • Return 401 on roleless scoped contexts (#742)
  • Add region CRUD to catalog SQL driver (#761)
  • Add role-imply rest api (#750)
  • Add role imply API (#749)
  • Add user update functionality (#747)
  • Add spiffe binding API (#740)
  • Add Admin interface over the UDS (#735)
  • Add spiffe provider (#733)
  • Expand role info in expand_implied_roles (#730)
  • Introduce SecurityContext (#710)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Rename identity_mapping to idmapping (#788)
  • Make resolve_implied_roles optional (#764)
  • Redesign SecurityContext with two-phase validation (#717)
  • Unify state initialization in test (#642)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)

openstack-keystone-api-types

0.1.1 - 2026-06-13

Added

  • Validate password for compliance conformity (#774)
  • Add system-user-role assignments API (#762)
  • Add role-imply rest api (#750)
  • Add user update functionality (#747)
  • Add api to list user roles on project (#639)
  • Add domain CRUD operations (#743)
  • Add spiffe binding API (#740)
  • Add spiffe provider (#733)
  • Introduce SecurityContext (#710)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Improve the code (#686)

Other

  • Rename identity_mapping to idmapping (#788)
  • Further align workspace features (#772)
  • Make resolve_implied_roles optional (#764)
  • Redesign SecurityContext with two-phase validation (#717)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Introduce features in api-types crate (#624)
  • Slim down api-types crate (#622)

openstack-keystone-distributed-storage

0.1.1 - 2026-06-13

Added

  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add SetIndex/RemoveIndex storage commands (#675)
  • Add basic healthcheck endpoint (#671)
  • Add metadata for raft data (#670)
  • Add transaction support for Raft storage (#669)
  • Add initial benchmarks for the storage (#668)
  • Add raft support under skaffold (#667)
  • Introduce raft backend for webauthn (#658)
  • Prepare raft storage promotion (#659)
  • Make raft storage available through state (#657)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Update raft drivers mocking (#791)
  • Add mock raft storage for unittest (#790)
  • Make core crates a workspace dependency (#736)
  • Redesign SecurityContext with two-phase validation (#717)
  • (deps) Bump openraft to alpha17 (#641)

openstack-keystone-core

0.1.2 - 2026-06-13

Added

  • Add endpoint CRUD to catalog provider (#785)
  • Add inter-provider event notification system (#784)
  • Add service CRUD to the catalog provider (#773)
  • Validate password for compliance conformity (#774)
  • Return 401 on roleless scoped contexts (#742)
  • Add region CRUD to catalog SQL driver (#761)
  • Add timing attack protection and failed auth tracking (#758)
  • Add role-imply rest api (#750)
  • Add role imply API (#749)
  • Add user update functionality (#747)
  • Add domain CRUD operations (#743)
  • Add spiffe binding API (#740)
  • Normalize the policy enforcer structure (#741)
  • Make drivers more dynamic (#737)
  • Add Admin interface over the UDS (#735)
  • Add spiffe provider (#733)
  • Expand role info in expand_implied_roles (#730)
  • Introduce SecurityContext (#710)
  • Talk to OPA over unix socket (#701)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add basic healthcheck endpoint (#671)
  • Make raft storage available through state (#657)

Other

  • Rename identity_mapping to idmapping (#788)
  • Consolidate password update flows (#778)
  • Further align workspace features (#772)
  • Make resolve_implied_roles optional (#764)
  • Redesign SecurityContext with two-phase validation (#717)
  • (deps) bump jsonwebtoken from 10.3.0 to 10.4.0 (#707)
  • Introduce dynamic plugins (#643)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)
  • Split more drivers to separate crates (#632)
  • Drop unnecessary derives to help compilation (#631)
  • Drop unnecessary tracing directives (#627)
  • Split config into standalone crate (#628)
  • Rework http client pool (#629)
  • Make assignment sql driver a standalone crate (#626)
  • Move assignment parameters resolution to driver (#625)
  • Introduce features in api-types crate (#624)
  • Slim down api-types crate (#622)
  • Split out webauthn into crate (#621)
  • Split out token-fernet driver (#620)
  • Prepare slit out of the FernetTokenProvider (#619)
  • Move benchmark into the proper crate (#614)

openstack-keystone-appcred-driver-sql

0.1.0 - 2026-06-13

Added

  • Make drivers more dynamic (#737)

Other

  • Further align workspace features (#772)

openstack-keystone-assignment-driver-sql

0.1.0 - 2026-06-13

Added

  • Add role-imply rest api (#750)
  • Make drivers more dynamic (#737)

Other

  • Further align workspace features (#772)
  • Make resolve_implied_roles optional (#764)

openstack-keystone-catalog-driver-sql

0.1.0 - 2026-06-13

Added

  • Add endpoint CRUD to catalog provider (#785)
  • Add inter-provider event notification system (#784)
  • Add service CRUD to the catalog provider (#773)
  • Add region CRUD to catalog SQL driver (#761)
  • Make drivers more dynamic (#737)

Other

  • Further align workspace features (#772)

openstack-keystone-federation-driver-sql

0.1.0 - 2026-06-13

Added

  • Make drivers more dynamic (#737)

Other

  • Further align workspace features (#772)

openstack-keystone-identity-driver-sql

0.1.0 - 2026-06-13

Added

  • Add inter-provider event notification system (#784)
  • Add timing attack protection and failed auth tracking (#758)
  • Add role-imply rest api (#750)
  • Add user update functionality (#747)
  • Make drivers more dynamic (#737)

Other

  • Consolidate password update flows (#778)
  • Further align workspace features (#772)

openstack-keystone-idmapping-driver-sql

0.1.0 - 2026-06-13

Added

  • Make drivers more dynamic (#737)

Other

  • Rename identity_mapping to idmapping (#788)

openstack-keystone-k8s-auth-driver-raft

0.1.0 - 2026-06-13

Added

  • Add user update functionality (#747)
  • Make drivers more dynamic (#737)

Other

  • Update raft drivers mocking (#791)
  • Add mock raft storage for unittest (#790)

openstack-keystone-k8s-auth-driver-sql

0.1.0 - 2026-06-13

Added

  • Make drivers more dynamic (#737)

openstack-keystone-resource-driver-sql

0.1.0 - 2026-06-13

Added

  • Make drivers more dynamic (#737)

openstack-keystone-revoke-driver-sql

0.1.0 - 2026-06-13

Added

  • Make drivers more dynamic (#737)

openstack-keystone-role-driver-sql

0.1.0 - 2026-06-13

Added

  • Add role-imply rest api (#750)
  • Add role imply API (#749)
  • Make drivers more dynamic (#737)

openstack-keystone-spiffe-driver-raft

0.1.0 - 2026-06-13

Added

  • Add user update functionality (#747)
  • Make drivers more dynamic (#737)

Other

  • Update raft drivers mocking (#791)
  • Add mock raft storage for unittest (#790)
  • Further align workspace features (#772)

openstack-keystone-token-driver-fernet

0.1.1 - 2026-06-13

Added

  • Add user update functionality (#747)
  • Make drivers more dynamic (#737)

openstack-keystone-token-restriction-driver-sql

0.1.0 - 2026-06-13

Added

  • Make drivers more dynamic (#737)

openstack-keystone-trust-driver-sql

0.1.0 - 2026-06-13

Added

  • Make drivers more dynamic (#737)

openstack-keystone-webauthn

0.1.0 - 2026-06-13

Added

  • Add inter-provider event notification system (#784)
  • Make drivers more dynamic (#737)
  • Introduce SecurityContext (#710)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add metadata for raft data (#670)
  • Add raft support under skaffold (#667)
  • Introduce raft backend for webauthn (#658)

Other

  • Update raft drivers mocking (#791)
  • Add mock raft storage for unittest (#790)
  • Make core crates a workspace dependency (#736)
  • Redesign SecurityContext with two-phase validation (#717)
  • Split the core-types crate (#640)
  • Move assignment parameters resolution to driver (#625)
  • Introduce features in api-types crate (#624)
  • Split out webauthn into crate (#621)

openstack-keystone

0.1.2 - 2026-06-13

Added

  • Add inter-provider event notification system (#784)
  • Add service CRUD to the catalog provider (#773)
  • Add SO_PEERCRED peer credential validation (#775)
  • Return 401 on roleless scoped contexts (#742)
  • Add system-user-role assignments API (#762)
  • Add role-imply rest api (#750)
  • Add user update functionality (#747)
  • Add api to list user roles on project (#639)
  • Add domain CRUD operations (#743)
  • Add spiffe binding API (#740)
  • Normalize the policy enforcer structure (#741)
  • Make drivers more dynamic (#737)
  • Add keystone container with opa and policies (#738)
  • Add Admin interface over the UDS (#735)
  • Add spiffe provider (#733)
  • Introduce SecurityContext (#710)
  • Talk to OPA over unix socket (#701)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add basic healthcheck endpoint (#671)
  • Add raft support under skaffold (#667)
  • Introduce raft backend for webauthn (#658)
  • Make raft storage available through state (#657)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Rename identity_mapping to idmapping (#788)
  • Unify sea-orm features (#769)
  • Make resolve_implied_roles optional (#764)
  • Make core crates a workspace dependency (#736)
  • Redesign SecurityContext with two-phase validation (#717)
  • (deps) bump spiffe (#709)
  • (deps) bump spiffe-rustls-tokio from 0.2.0 to 0.3.0 (#706)
  • Add policy enforcement into group.v3 handler (#685)
  • Split api.v3.group handlers (#679)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)
  • Split more drivers to separate crates (#632)
  • Split config into standalone crate (#628)
  • Make assignment sql driver a standalone crate (#626)
  • Move assignment parameters resolution to driver (#625)
  • Introduce features in api-types crate (#624)
  • Slim down api-types crate (#622)
  • Split out webauthn into crate (#621)
  • Split out token-fernet driver (#620)
  • Prepare slit out of the FernetTokenProvider (#619)
  • Move benchmark into the proper crate (#614)

openstack-keystone-cli-manage

0.1.0 - 2026-06-13

Added

  • Make drivers more dynamic (#737)
  • Introduce SecurityContext (#710)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Add raft support under skaffold (#667)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Unify sea-orm features (#769)


This PR was generated with release-plz.

@github-actions

github-actions Bot commented Jun 5, 2026

Copy link
Copy Markdown

🦢 Load Test Results

Goose Attack Report

Plan Overview

Action Started Stopped Elapsed Users
Increasing 26-06-13 10:49:48 26-06-13 10:49:50 00:00:02 0 → 4
Maintaining 26-06-13 10:49:50 26-06-13 10:50:20 00:00:30 4
Decreasing 26-06-13 10:50:20 26-06-13 10:50:20 00:00:00 0 ← 4

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET 6537 0 13.28 9 61 217.90 0.00
Aggregated 6537 0 13.28 9 61 217.90 0.00

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET 12 12 13 17 19 19 21 61
Aggregated 12 12 13 17 19 19 21 61

Status Code Metrics

Method Name Status Codes
GET 6,537 [200]
Aggregated 6,537 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
ListUsers
0.0 0 0 0.00 0 0 0.00 0.00
0.1 4964 0 11.62 9 56 165.47 0.00
ValidateToken
1.0 0 0 0.00 0 0 0.00 0.00
1.1 1573 0 18.63 16 61 52.43 0.00
Aggregated 6537 0 13.28 9 61 217.90 0.00

Scenario Metrics

Transaction # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
ListUsers 2 4962 11.62 9 56 165.40 2481.00
ValidateToken 1 1572 18.63 16 61 52.40 1572.00
Aggregated 3 6534 13.31 9 61 217.80 4053.00

View full report

@github-actions

github-actions Bot commented Jun 5, 2026

Copy link
Copy Markdown

🐰 Bencher Report

Branchrelease-plz-2026-06-05T09-00-15Z
Testbedubuntu-latest

🚨 1 Alert

BenchmarkMeasure
Units
ViewBenchmark Result
(Result Δ%)
Upper Boundary
(Limit %)
Raft_1Node_Latency/remove/1nodeLatency
milliseconds (ms)
📈 plot
🚷 threshold
🚨 alert (🔔)
1.06 ms
(+176.89%)Baseline: 0.38 ms
1.01 ms
(105.13%)

Click to view all benchmark results
BenchmarkLatencyBenchmark Result
nanoseconds (ns)
(Result Δ%)
Upper Boundary
nanoseconds (ns)
(Limit %)
Command_Serde/apply/remove📈 view plot
🚷 view threshold
251,010.00 ns
(+70.79%)Baseline: 146,967.05 ns
485,192.41 ns
(51.73%)
Command_Serde/apply/set📈 view plot
🚷 view threshold
294,870.00 ns
(+123.08%)Baseline: 132,180.70 ns
300,096.53 ns
(98.26%)
Command_Serde/pack/delete📈 view plot
🚷 view threshold
93.22 ns
(-23.40%)Baseline: 121.70 ns
146.56 ns
(63.60%)
Command_Serde/pack/delete_index📈 view plot
🚷 view threshold
87.52 ns
(-23.15%)Baseline: 113.89 ns
137.31 ns
(63.74%)
Command_Serde/pack/set📈 view plot
🚷 view threshold
148.59 ns
(-24.64%)Baseline: 197.18 ns
241.24 ns
(61.59%)
Command_Serde/pack/set_index📈 view plot
🚷 view threshold
87.33 ns
(-23.47%)Baseline: 114.12 ns
137.25 ns
(63.63%)
Command_Serde/unpack/delete📈 view plot
🚷 view threshold
158.41 ns
(-15.38%)Baseline: 187.20 ns
229.91 ns
(68.90%)
Command_Serde/unpack/delete_index📈 view plot
🚷 view threshold
140.92 ns
(-14.47%)Baseline: 164.77 ns
205.96 ns
(68.42%)
Command_Serde/unpack/set📈 view plot
🚷 view threshold
205.36 ns
(-16.11%)Baseline: 244.81 ns
290.98 ns
(70.58%)
Command_Serde/unpack/set_index📈 view plot
🚷 view threshold
141.04 ns
(-13.24%)Baseline: 162.57 ns
203.06 ns
(69.46%)
Payload_encryption/pack/inner📈 view plot
🚷 view threshold
46.24 ns
(-26.19%)Baseline: 62.64 ns
78.33 ns
(59.03%)
Payload_encryption/pack/remove_cmd📈 view plot
🚷 view threshold
89.72 ns
(-26.04%)Baseline: 121.31 ns
156.19 ns
(57.44%)
Payload_encryption/pack/set_cmd📈 view plot
🚷 view threshold
165.68 ns
(-27.13%)Baseline: 227.37 ns
288.12 ns
(57.50%)
Payload_encryption/unpack/inner📈 view plot
🚷 view threshold
125.90 ns
(-22.64%)Baseline: 162.74 ns
191.08 ns
(65.89%)
Payload_encryption/unpack/remove_cmd📈 view plot
🚷 view threshold
175.72 ns
(-10.67%)Baseline: 196.70 ns
244.76 ns
(71.79%)
Payload_encryption/unpack/set_cmd📈 view plot
🚷 view threshold
202.90 ns
(-20.98%)Baseline: 256.77 ns
311.75 ns
(65.08%)
Raft_1Node_Latency/prefix/1node📈 view plot
🚷 view threshold
1,771,000.00 ns
(-52.69%)Baseline: 3,743,032.24 ns
6,991,269.19 ns
(25.33%)
Raft_1Node_Latency/read/1node📈 view plot
🚷 view threshold
471.88 ns
(-16.37%)Baseline: 564.27 ns
727.54 ns
(64.86%)
Raft_1Node_Latency/remove/1node📈 view plot
🚷 view threshold
🚨 view alert (🔔)
1,059,700.00 ns
(+176.89%)Baseline: 382,716.72 ns
1,007,990.77 ns
(105.13%)

Raft_1Node_Latency/write/1node📈 view plot
🚷 view threshold
748,820.00 ns
(+102.95%)Baseline: 368,966.55 ns
798,607.11 ns
(93.77%)
build_snapshot/default📈 view plot
🚷 view threshold
79,543.00 ns
(-14.21%)Baseline: 92,718.91 ns
157,450.67 ns
(50.52%)
fernet token/project📈 view plot
🚷 view threshold
1,125.80 ns
(-21.89%)Baseline: 1,441.21 ns
1,664.73 ns
(67.63%)
get_data_keyspace📈 view plot
🚷 view threshold
0.27 ns
(-14.91%)Baseline: 0.32 ns
0.38 ns
(71.67%)
get_db📈 view plot
🚷 view threshold
0.27 ns
(-14.81%)Baseline: 0.32 ns
0.38 ns
(71.66%)
get_fernet_token_timestamp/project📈 view plot
🚷 view threshold
105.68 ns
(-28.13%)Baseline: 147.03 ns
175.36 ns
(60.27%)
get_keyspace📈 view plot
🚷 view threshold
3.71 ns
(-25.31%)Baseline: 4.97 ns
9.86 ns
(37.65%)
🐰 View full continuous benchmarking report in Bencher

@openstack-experimental-release-plz openstack-experimental-release-plz Bot force-pushed the release-plz-2026-06-05T09-00-15Z branch 22 times, most recently from d04a4df to 7fe2614 Compare June 12, 2026 09:11
@openstack-experimental-release-plz openstack-experimental-release-plz Bot force-pushed the release-plz-2026-06-05T09-00-15Z branch 2 times, most recently from 612b115 to b2d6768 Compare June 13, 2026 09:22
@openstack-experimental-release-plz openstack-experimental-release-plz Bot force-pushed the release-plz-2026-06-05T09-00-15Z branch from b2d6768 to 1be934f Compare June 13, 2026 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants