Train Series Release Notes


New Features

  • The new barbican::keystone::authtoken::interface parameter has been added, which can be used to set the interface parameter in authtoken middleware.


New Features

  • Added support for a couple of new options for the PKCS#11 backend: [p11_crypto]\token_labels and [p11_crypto]\os_locking_ok.

  • Added support for two new options for Barbican’s PKCS#11 backend. The new options are [p11_crypto]token_serial_number and [p11_crypto]token_label.

  • The barbican::plugins::p11_crypto::p11_crypto_plugin_slot_id parameter has become an optional parameter instead of a required one.

  • Support for the [p11_crypto_plugin] always_set_cka_sensitive parameter has been added.


New Features

  • New hieradata, barbican::keystone::authtoken::service_token_roles, is introduced so that specific role can be assigned to the service user who can use service token feature.

  • Allow users to run the RabbitMQ heartbeat over a native python thread in the oslo.messaging RabbitMQ driver, by using the rabbit_heartbeat_in_pthread option in configuration.

Upgrade Notes

  • The deprecated pki related options check_revocations_for_cached and hash_algorithms option has been removed.


New Features

  • Add support to configure [oslo_middleware]/max_request_body_size with $max_request_body_size.


New Features

  • Added vault secret store plugin

Deprecation Notes

  • database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead.