Current Series Release Notes

26.0.0-22

New Features

• A new module, keystone.wsgi, has been added as a place to gather WSGI application objects. This is intended to ease deployment by providing a consistent location for these objects. For example, if using uWSGI then instead of:

  [uwsgi]
  wsgi-file = /bin/keystone-wsgi-public
  

  You can now use:

  [uwsgi]
  module = keystone.wsgi.api:application
  

  This also simplifies deployment with other WSGI servers that expect module paths such as gunicorn.

Upgrade Notes

• Dependency on abandoned library passlib has been dropped in favor of using bcrypt and cryptography directly. It was ensured that passwords hashed with passlib are still supported, but absence of cornercases can not be guaranteed. If users are not able to login using old password such password must be rotated.

• Python 3.8 support was dropped. The minimum version of Python now supported is Python 3.9.

Deprecation Notes

• The [DEFAULT] max_param_size option has been deprecated. This option was used in identity v2 APU but identity v2 API was removed in 13.0.0 release.

• This is the last release where passwords hashed using sha512_crypt algorithm are supported. Since even support of that is being dropped in python 3.13 it would be physically dropped from Keystone in the next release (Epoxy).