Current Series Release Notes¶

8.0.0-13¶

Add TOTP (Time-based One-Time Password) two-factor authentication API support. The API server now detects when TOTP is required during login and provides a /login/totp endpoint to complete the second authentication step with a TOTP passcode.

Added the default.secure_proxy_addr_header configuration option. When configured, Skyline uses the trusted header’s single sanitized client address for the Forwarded header on server-side OpenStack API requests. Otherwise, Skyline uses the direct ASGI peer address.

Deployments must configure their proxy to overwrite and sanitize this header. The option takes an HTTP header name such as X-Real-IP. Skyline does not resolve or forward a full X-Forwarded-For chain. See LP#2162817.

Fixed the Skyline database schema for the revoked_token and settings tables by adding explicit primary keys through an Alembic migration. This restores compatibility with MySQL and Percona deployments that enforce primary-key requirements for DML. LP#2108940

Fixed handling of orphaned projects in resource listings. When a project is deleted but resources (snapshots, volumes, etc.) still exist, the API raised a KeyError when trying to resolve the project name. This fix uses .get() with project_id as fallback instead of direct dictionary access, preventing API errors when viewing resources from deleted projects. LP#2153555