Open Stack

We are jazzed to announce the release of:

openstack-ansible-os_keystone 15.0.0: os_keystone for OpenStack
Ansible

This release is part of the ocata release series.

Download the package from:

    https://tarballs.openstack.org/openstack-ansible-os_keystone/

For more details, please see below.

15.0.0
^^^^^^

New Features

* Capping the default value for the variable
  "keystone_wsgi_processes" to 16 when the user doesn't configure this
  variable. Default value is half the number of vCPUs available on the
  machine with a capping value of 16.

* The os_keystone role now performs a rolling upgrade without
  downtime during installation. The process for rolling upgrades is
  documented here
  (http://docs.openstack.org/developer/keystone/upgrading.html
  #upgrading-without-downtime).

Changes in openstack-ansible-os_keystone 14.0.0.0rc2..15.0.0
------------------------------------------------------------

fddd964 Install python2-pyOpenSSL package on CentOS
4e6caba Split out Keystone upgrade into it's own script
5769dc4 Benchmark requests during upgrade testing
82eb0e6 Cap the number of worker threads
5b5aa1e Only run token_flush on 1 host
594605e Fix erroneous release note
ba542ba Remove 3DES from keystone_ssl_cipher_suite
3ab6d48 Implementing stricter permissions on config files
7fefe7e Work around Trusty CI bindep issue
fb9e7ed Update repo for stable/ocata
6f1403a Resolved Keystone Federation bugs
c2e1ae4 Update UPPER_CONSTRAINTS_FILE for stable/ocata
7db8e4d Update .gitreview for stable/ocata
0414459 Shorten tox job names for keystone.
cbeae22 Split upgrade test into its own play
bbb6f5a Update paste, policy and rootwrap configurations 2017-01-19
0c57099 Change permission for conf folder
dd2f1f9 Fix tox.ini to work with ansible 2.2.1.0
2f63386 Bring consistency to tags
e253b87 Cleanup of developer mode logic
ec6824f Fix 404 for os_keystone
c1ab96b Add which in CentOS package list
464db72 Additional fix for venv build fallback
672b69e Disable WSGIScriptReloading
f80f78b Allow Apache ports to be specified per VHost
88bbcc8 Fix venv build fallback mechanism
83e7c28 Update and clean up run_tests.sh
2635e43 [docs] Updating 404 link for os_keystone
7b8b435 Update paste, policy and rootwrap configurations 2016-12-23
3aef25d Update repository with reference to role git location
b82d81c Include fernet config block only when fernet tokens are used
6a6e377 Remove Trusty support from os_keystone role
6a96998 All handlers should be tagged "config"
d180506 Delete deprecated Hacking in tox.ini
a32f14c Updated from global requirements
e31dc2d Point roles docs bugs to openstack-ansible LP
dbf5a35 Fix virtualenv-tools issue
1b5c70b Use new ansible package module to install distro packages.
6c90338 Do not listen on port 80
faa2fc6 Show team and repo badges on README
1766414 Using updated tempest method for keystone.
9f7c2f0 Update paste, policy and rootwrap configurations 2016-11-18
fc01718 Update URL for LDAP integration guide
04737f5 Implement zero downtime upgrades
68fd798 Reinitialize venv upon install
56b547e CentOS: Only install Federation IDP/SP Packages when necessary
6635f6e Use ansible_service_mgr fact
d8668a5 Remove join filter from pip module tasks
bd33f3d Use updated get_url module checksum functionality
320e0e6 Workaround upstream issue with apache2_module
b11ec3e Updated from global requirements
2ba5dd4 Fix linting issues for ansible-lint 3.4.1
c5a0cce Simplify pip options/constraints mechanism
18700d7 Use upper constraints for all tox targets
cd31c6b [DOCS] Added release-name as a watermark to Docs.
6c902fc Remove 'ignore_errors: true' in favor of 'failed_when: false'
4d720c9 Use centralised Ansible test scripts
403d5b8 Enable release notes translation
60dac15 Enable apache2 service.
bc00f07 Fix bare variable in handler
2b7e68d Updated from global requirements
ff30ce0 Update reno for stable/newton
0c4bb0f Use centralised test scripts


Diffstat (except docs and test files)
-------------------------------------

.gitignore                                         |   5 +-
.gitreview                                         |   1 +
README.rst                                         |   9 +
Vagrantfile                                        |   2 +-
bindep.txt                                         |   2 +-
defaults/main.yml                                  |  20 +-
handlers/main.yml                                  |  96 +++++++-
library/keystone_sp                                |   6 +-
manual-test.rc                                     |   2 +-
meta/main.yml                                      |   3 +-
.../capping_keystone_workers-e284a47fc4dcea38.yaml |   6 +
...one-zero-downtime-upgrade-5f19ab84183490b9.yaml |   5 +
.../remove-requirements-git-bdf5691b8390ed7c.yaml  |   7 +
releasenotes/source/conf.py                        |   3 +
releasenotes/source/index.rst                      |   1 +
releasenotes/source/newton.rst                     |   6 +
tasks/keystone_apache.yml                          | 110 +++++----
tasks/keystone_credential_distribute.yml           |  15 +-
tasks/keystone_db_setup.yml                        |  27 +-
tasks/keystone_federation_sp_setup.yml             |  80 +++---
tasks/keystone_fernet_keys_distribute.yml          |  15 +-
tasks/keystone_idp_metadata.yml                    |   6 +-
tasks/keystone_idp_self_signed_create.yml          |   3 +-
tasks/keystone_idp_self_signed_distribute.yml      |   3 +-
tasks/keystone_init_common.yml                     |   7 +-
tasks/keystone_init_systemd.yml                    |   5 +-
tasks/keystone_init_upstart.yml                    |  31 ---
tasks/keystone_install.yml                         | 273 ++++++++++++++-------
tasks/keystone_install_apt.yml                     | 119 ---------
tasks/keystone_install_yum.yml                     | 154 ------------
tasks/keystone_ldap_setup.yml                      |  16 +-
tasks/keystone_nginx.yml                           |  17 +-
tasks/keystone_post_install.yml                    |  31 ++-
tasks/keystone_pre_install.yml                     |   4 +-
tasks/keystone_service_setup.yml                   |   1 +
tasks/keystone_ssl_key_create.yml                  |   6 +-
tasks/keystone_ssl_user_provided.yml               |   9 +-
tasks/keystone_token_cleanup.yml                   |  14 +-
tasks/keystone_uwsgi.yml                           |  12 +-
tasks/main.yml                                     |  32 +--
templates/keystone-httpd.conf.j2                   |   4 +
templates/keystone-paste.ini.j2                    |  13 +-
templates/keystone-ports.conf.j2                   |   6 +-
templates/keystone-uwsgi_upstart.conf.j2           |  44 ----
templates/keystone.conf.j2                         |   5 +-
templates/policy.json.j2                           |   3 +-
test-requirements.txt                              |  10 +-
tox.ini                                            | 193 ++++-----------
vars/redhat-7.yml                                  |   9 +-
vars/ubuntu-14.04.yml                              |  70 ------
70 files changed, 1181 insertions(+), 918 deletions(-)


Requirements updates
--------------------

diff --git a/test-requirements.txt b/test-requirements.txt
index 8fdd8d8..a5433f9 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0
-requests>=2.10.0 # Apache-2.0
+requests!=2.12.2,>=2.10.0 # Apache-2.0
@@ -12,2 +12,3 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD
-sphinx!=1.3b1,<1.3,>=1.2.1 # BSD
-oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0
+sphinx!=1.3b1,<1.4,>=1.2.1 # BSD
+oslosphinx>=4.7.0 # Apache-2.0
+openstackdocstheme>=1.5.0 # Apache-2.0
@@ -15 +16,2 @@ doc8 # Apache-2.0
-reno>=1.8.0 # Apache2
+reno>=1.8.0 # Apache-2.0
+sphinxmark>=0.1.14 # Apache-2.0