Skip to content

chore: release#419

Open
openstack-experimental-release-plz[bot] wants to merge 1 commit into
mainfrom
release-plz-2025-12-03T10-08-58Z
Open

chore: release#419
openstack-experimental-release-plz[bot] wants to merge 1 commit into
mainfrom
release-plz-2025-12-03T10-08-58Z

Conversation

@openstack-experimental-release-plz
Copy link
Copy Markdown
Contributor

@openstack-experimental-release-plz openstack-experimental-release-plz Bot commented Dec 3, 2025

🤖 New release

  • openstack-keystone-core-types: 0.1.1
  • openstack-keystone-api-types: 0.1.0 -> 0.1.1 (✓ API compatible changes)
  • openstack-keystone-config: 0.1.0
  • openstack-keystone-distributed-storage: 0.1.0 -> 0.1.1 (✓ API compatible changes)
  • openstack-keystone-core: 0.1.1 -> 0.1.2 (✓ API compatible changes)
  • openstack-keystone-appcred-sql: 0.1.0
  • openstack-keystone-assignment-sql: 0.1.0
  • openstack-keystone-catalog-sql: 0.1.0
  • openstack-keystone-federation-sql: 0.1.0
  • openstack-keystone-identity-sql: 0.1.0
  • openstack-keystone-idmapping-sql: 0.1.0
  • openstack-keystone-k8s-auth-sql: 0.1.0
  • openstack-keystone-k8s-auth-raft: 0.1.0
  • openstack-keystone-resource-sql: 0.1.0
  • openstack-keystone-revoke-sql: 0.1.0
  • openstack-keystone-role-sql: 0.1.0
  • openstack-keystone-token-fernet: 0.1.1
  • openstack-keystone-token-restriction-sql: 0.1.0
  • openstack-keystone-trust-sql: 0.1.0
  • openstack-keystone-webauthn: 0.1.0
  • openstack-keystone: 0.1.1 -> 0.1.2 (✓ API compatible changes)
  • openstack-keystone-cli-manage: 0.1.0
Changelog

openstack-keystone-core-types

0.1.1 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • Unify state initialization in test (#642)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)

openstack-keystone-api-types

0.1.1 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Improve the code (#686)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Introduce features in api-types crate (#624)
  • Slim down api-types crate (#622)

openstack-keystone-config

0.1.0 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add raft support under skaffold (#667)
  • Introduce raft backend for webauthn (#658)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • Split out remaining sql drivers (#633)
  • Split config into standalone crate (#628)

openstack-keystone-distributed-storage

0.1.1 - 2026-05-24

Added

  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add SetIndex/RemoveIndex storage commands (#675)
  • Add basic healthcheck endpoint (#671)
  • Add metadata for raft data (#670)
  • Add transaction support for Raft storage (#669)
  • Add initial benchmarks for the storage (#668)
  • Add raft support under skaffold (#667)
  • Introduce raft backend for webauthn (#658)
  • Prepare raft storage promotion (#659)
  • Make raft storage available through state (#657)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • (deps) Bump openraft to alpha17 (#641)

openstack-keystone-core

0.1.2 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Talk to OPA over unix socket (#701)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add basic healthcheck endpoint (#671)
  • Make raft storage available through state (#657)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • (deps) bump jsonwebtoken from 10.3.0 to 10.4.0 (#707)
  • Introduce dynamic plugins (#643)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)
  • Split more drivers to separate crates (#632)
  • Drop unnecessary derives to help compilation (#631)
  • Drop unnecessary tracing directives (#627)
  • Split config into standalone crate (#628)
  • Rework http client pool (#629)
  • Make assignment sql driver a standalone crate (#626)
  • Move assignment parameters resolution to driver (#625)
  • Introduce features in api-types crate (#624)
  • Slim down api-types crate (#622)
  • Split out webauthn into crate (#621)
  • Split out token-fernet driver (#620)
  • Prepare slit out of the FernetTokenProvider (#619)
  • Move benchmark into the proper crate (#614)

openstack-keystone-appcred-sql

0.1.0 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)

Other

  • Introduce dynamic plugins (#643)
  • Split the core-types crate (#640)
  • Split more drivers to separate crates (#632)

openstack-keystone-assignment-sql

0.1.0 - 2026-05-24

Added

  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Make raft storage available through state (#657)

Other

  • Introduce dynamic plugins (#643)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)
  • Split config into standalone crate (#628)
  • Make assignment sql driver a standalone crate (#626)

openstack-keystone-catalog-sql

0.1.0 - 2026-05-24

Added

  • Improve the code (#686)

Other

  • Introduce dynamic plugins (#643)
  • Split the core-types crate (#640)
  • Split more drivers to separate crates (#632)

openstack-keystone-federation-sql

0.1.0 - 2026-05-24

Added

  • Improve the code (#686)

Other

  • Introduce dynamic plugins (#643)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Split more drivers to separate crates (#632)

openstack-keystone-identity-sql

0.1.0 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • Introduce dynamic plugins (#643)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)

openstack-keystone-idmapping-sql

0.1.0 - 2026-05-24

Added

  • Improve the code (#686)

Other

  • Introduce dynamic plugins (#643)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)

openstack-keystone-k8s-auth-sql

0.1.0 - 2026-05-24

Added

  • Improve the code (#686)

Other

  • Introduce dynamic plugins (#643)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)

openstack-keystone-k8s-auth-raft

0.1.0 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)

openstack-keystone-resource-sql

0.1.0 - 2026-05-24

Added

  • Improve the code (#686)

Other

  • Introduce dynamic plugins (#643)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Split more drivers to separate crates (#632)

openstack-keystone-revoke-sql

0.1.0 - 2026-05-24

Added

  • Improve the code (#686)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • Introduce dynamic plugins (#643)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)

openstack-keystone-role-sql

0.1.0 - 2026-05-24

Added

  • Improve the code (#686)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • Introduce dynamic plugins (#643)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)

openstack-keystone-token-fernet

0.1.1 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Improve the code (#686)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • Split the core-types crate (#640)
  • Split config into standalone crate (#628)
  • Split out token-fernet driver (#620)

openstack-keystone-token-restriction-sql

0.1.0 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Improve the code (#686)

Other

  • Introduce dynamic plugins (#643)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)

openstack-keystone-trust-sql

0.1.0 - 2026-05-24

Added

  • Introduce SecurityContext (#710)

Other

  • Introduce dynamic plugins (#643)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)

openstack-keystone-webauthn

0.1.0 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add metadata for raft data (#670)
  • Add raft support under skaffold (#667)
  • Introduce raft backend for webauthn (#658)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • Split the core-types crate (#640)
  • Move assignment parameters resolution to driver (#625)
  • Introduce features in api-types crate (#624)
  • Split out webauthn into crate (#621)

openstack-keystone

0.1.2 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Talk to OPA over unix socket (#701)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Improve the code (#686)
  • Add k8s-auth raft driver (#676)
  • Add basic healthcheck endpoint (#671)
  • Add raft support under skaffold (#667)
  • Introduce raft backend for webauthn (#658)
  • Make raft storage available through state (#657)
  • Introduce the keystone-manage cli managing raft (#656)

Other

  • Redesign SecurityContext with two-phase validation (#717)
  • (deps) bump spiffe (#709)
  • (deps) bump spiffe-rustls-tokio from 0.2.0 to 0.3.0 (#706)
  • Add policy enforcement into group.v3 handler (#685)
  • Split api.v3.group handlers (#679)
  • Small optimization of the derives (#638)
  • Split the core-types crate (#640)
  • Split out remaining sql drivers (#633)
  • Split more drivers to separate crates (#632)
  • Split config into standalone crate (#628)
  • Make assignment sql driver a standalone crate (#626)
  • Move assignment parameters resolution to driver (#625)
  • Introduce features in api-types crate (#624)
  • Slim down api-types crate (#622)
  • Split out webauthn into crate (#621)
  • Split out token-fernet driver (#620)
  • Prepare slit out of the FernetTokenProvider (#619)
  • Move benchmark into the proper crate (#614)

openstack-keystone-cli-manage

0.1.0 - 2026-05-24

Added

  • Introduce SecurityContext (#710)
  • Add skeleton for the spiffe mTLS integration (#695)
  • Implement ConfigManager for config watching (#691)
  • Add raft support under skaffold (#667)
  • Introduce the keystone-manage cli managing raft (#656)


This PR was generated with release-plz.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Dec 3, 2025

🐰 Bencher Report

Branchrelease-plz-2025-12-03T10-08-58Z
Testbedubuntu-latest
Click to view all benchmark results
BenchmarkLatencyBenchmark Result
nanoseconds (ns)
(Result Δ%)
Upper Boundary
nanoseconds (ns)
(Limit %)
Command_Serde/apply/remove📈 view plot
🚷 view threshold
81,173.00 ns
(-51.93%)Baseline: 168,850.21 ns
659,589.81 ns
(12.31%)
Command_Serde/apply/set📈 view plot
🚷 view threshold
81,256.00 ns
(-43.03%)Baseline: 142,618.46 ns
354,300.34 ns
(22.93%)
Command_Serde/pack/delete📈 view plot
🚷 view threshold
125.48 ns
(+2.46%)Baseline: 122.47 ns
147.69 ns
(84.96%)
Command_Serde/pack/delete_index📈 view plot
🚷 view threshold
115.93 ns
(+1.51%)Baseline: 114.20 ns
136.84 ns
(84.72%)
Command_Serde/pack/set📈 view plot
🚷 view threshold
208.83 ns
(+4.85%)Baseline: 199.17 ns
245.73 ns
(84.98%)
Command_Serde/pack/set_index📈 view plot
🚷 view threshold
116.38 ns
(+1.75%)Baseline: 114.37 ns
136.65 ns
(85.17%)
Command_Serde/unpack/delete📈 view plot
🚷 view threshold
212.52 ns
(+14.02%)Baseline: 186.39 ns
230.42 ns
(92.23%)
Command_Serde/unpack/delete_index📈 view plot
🚷 view threshold
185.86 ns
(+14.60%)Baseline: 162.18 ns
201.79 ns
(92.11%)
Command_Serde/unpack/set📈 view plot
🚷 view threshold
275.41 ns
(+13.17%)Baseline: 243.35 ns
290.00 ns
(94.97%)
Command_Serde/unpack/set_index📈 view plot
🚷 view threshold
178.42 ns
(+11.06%)Baseline: 160.65 ns
200.37 ns
(89.04%)
Payload_encryption/pack/inner📈 view plot
🚷 view threshold
68.27 ns
(+5.23%)Baseline: 64.87 ns
77.87 ns
(87.67%)
Payload_encryption/pack/remove_cmd📈 view plot
🚷 view threshold
120.11 ns
(-1.30%)Baseline: 121.69 ns
148.11 ns
(81.10%)
Payload_encryption/pack/set_cmd📈 view plot
🚷 view threshold
227.94 ns
(-1.91%)Baseline: 232.39 ns
294.13 ns
(77.50%)
Payload_encryption/unpack/inner📈 view plot
🚷 view threshold
163.93 ns
(+0.96%)Baseline: 162.38 ns
193.65 ns
(84.65%)
Payload_encryption/unpack/remove_cmd📈 view plot
🚷 view threshold
218.56 ns
(+11.56%)Baseline: 195.91 ns
241.54 ns
(90.49%)
Payload_encryption/unpack/set_cmd📈 view plot
🚷 view threshold
271.65 ns
(+5.35%)Baseline: 257.86 ns
319.07 ns
(85.14%)
Raft_1Node_Latency/prefix/1node📈 view plot
🚷 view threshold
4,572,900.00 ns
(+30.57%)Baseline: 3,502,319.23 ns
6,561,396.19 ns
(69.69%)
Raft_1Node_Latency/read/1node📈 view plot
🚷 view threshold
580.40 ns
(+5.56%)Baseline: 549.85 ns
772.42 ns
(75.14%)
Raft_1Node_Latency/remove/1node📈 view plot
🚷 view threshold
240,140.00 ns
(-42.27%)Baseline: 415,941.54 ns
1,257,105.90 ns
(19.10%)
Raft_1Node_Latency/write/1node📈 view plot
🚷 view threshold
247,860.00 ns
(-38.39%)Baseline: 402,321.92 ns
992,119.30 ns
(24.98%)
build_snapshot/default📈 view plot
🚷 view threshold
95,764.00 ns
(+1.52%)Baseline: 94,332.67 ns
164,168.88 ns
(58.33%)
fernet token/project📈 view plot
🚷 view threshold
1,462.00 ns
(-0.73%)Baseline: 1,472.73 ns
1,632.17 ns
(89.57%)
get_data_keyspace📈 view plot
🚷 view threshold
0.35 ns
(+10.89%)Baseline: 0.32 ns
0.37 ns
(94.05%)
get_db📈 view plot
🚷 view threshold
0.35 ns
(+11.11%)Baseline: 0.32 ns
0.37 ns
(93.96%)
get_fernet_token_timestamp/project📈 view plot
🚷 view threshold
146.83 ns
(-1.22%)Baseline: 148.64 ns
175.06 ns
(83.88%)
get_keyspace📈 view plot
🚷 view threshold
4.79 ns
(+2.46%)Baseline: 4.68 ns
8.78 ns
(54.57%)
🐰 View full continuous benchmarking report in Bencher

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Dec 3, 2025

🦢 Load Test Results

Goose Attack Report

Plan Overview

Action Started Stopped Elapsed Users
Increasing 26-05-24 07:10:52 26-05-24 07:10:54 00:00:02 0 → 4
Maintaining 26-05-24 07:10:54 26-05-24 07:11:25 00:00:31 4
Decreasing 26-05-24 07:11:25 26-05-24 07:11:25 00:00:00 0 ← 4

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET 10381 0 11.06 7 22 346.03 0.00
Aggregated 10381 0 11.06 7 22 346.03 0.00

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET 10 12 14 14 15 15 16 22
Aggregated 10 12 14 14 15 15 16 22

Status Code Metrics

Method Name Status Codes
GET 10,381 [200]
Aggregated 10,381 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
ListUsers
0.0 0 0 0.00 0 0 0.00 0.00
0.1 6282 0 9.08 7 15 209.40 0.00
ValidateToken
1.0 0 0 0.00 0 0 0.00 0.00
1.1 4099 0 14.16 11 22 136.63 0.00
Aggregated 10381 0 11.06 7 22 346.03 0.00

Scenario Metrics

Transaction # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
ListUsers 2 6280 9.08 7 15 209.33 3140.00
ValidateToken 2 4097 14.17 11 22 136.57 2048.50
Aggregated 4 10377 11.09 7 22 345.90 5188.50

View full report

@openstack-experimental-release-plz openstack-experimental-release-plz Bot force-pushed the release-plz-2025-12-03T10-08-58Z branch 11 times, most recently from 4efc7cd to c3f1e9f Compare December 9, 2025 17:50
@openstack-experimental-release-plz openstack-experimental-release-plz Bot force-pushed the release-plz-2025-12-03T10-08-58Z branch 17 times, most recently from 041fa5f to 43b82f4 Compare December 18, 2025 11:52
@openstack-experimental-release-plz openstack-experimental-release-plz Bot force-pushed the release-plz-2025-12-03T10-08-58Z branch 12 times, most recently from 13056c7 to f8f97ee Compare January 7, 2026 16:47
@openstack-experimental-release-plz openstack-experimental-release-plz Bot force-pushed the release-plz-2025-12-03T10-08-58Z branch 13 times, most recently from 8c9ef75 to 56ef52e Compare January 18, 2026 12:25
@openstack-experimental-release-plz openstack-experimental-release-plz Bot force-pushed the release-plz-2025-12-03T10-08-58Z branch 4 times, most recently from 9e82a09 to dfde80a Compare January 23, 2026 17:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants