Open Stack

We contentedly announce the release of:

puppet-keystone 15.0.0: Puppet module for OpenStack Keystone

This release is part of the train release series.

The source is available from:

    https://opendev.org/openstack/puppet-keystone

Download the package from:

    https://tarballs.openstack.org/puppet-keystone/

Please report issues through:

    https://bugs.launchpad.net/puppet-keystone/+bugs

For more details, please see below.

15.0.0
^^^^^^


New Features
************

* Add support to configure
  *[keystone_authtoken]/service_token_roles* with
  *$service_token_roles* in the *keystone::resource::authtoken*
  resource.


Upgrade Notes
*************

* The deprecated parameters main_port and admin_port in
  keystone::federation::openidc is now removed.

* The keystone::federation::openidc::keystone_url parameter is now
  mandatory and does not fallback on the keystone::public_endpoint
  value.

* The deprecated parameters in keystone::wsgi::apache is removed,
  see below for what parameters you should use instead.

     * Removed "servername_admin" please use "servername"

     * Removed "public_port" and "admin_port" please use "api_port"

     * Removed "admin_bind_host" please use "bind_host"

     * Removed "public_path" and "admin_path" please use "path"

     * Removed "ssl_cert_admin" and "ssl_key_admin" please use
       "ssl_cert" and "ssl_key"

     * Removed "wsgi_admin_script_source" and
       "wsgi_public_script_source" please use "wsgi_script_source"

     * Removed "custom_wsgi_process_options_main" and
       "custom_wsgi_process_options_admin" please use
       "custom_wsgi_process_options"

* The deprecated resources keystone_paste_ini,
  keystone::config::keystone_paste_config,
  keystone::disable_admin_token_auth, keystone::disable_v2_api and
  keystone::paste_config is removed.


Deprecation Notes
*****************

* database_idle_timeout is deprecated and will be removed in a
  future release. Please use database_connection_recycle_time instead.

Changes in puppet-keystone 14.4.0..15.0.0
-----------------------------------------

54dd622 Prefix memcached_servers IPv6 address with `inet6:`
3bebe58 Clear out keystone package config on ubuntu
5d32d64 Fix client spec test
b081ee8 Remove deprecated keystone::federation::openidc params
ad4ea7b Remove deprecated keystone::wsgi::apache params
553b03a Remove paste
ce7fd5d Fix database test in keystone class test
870e338 Port puppet-keystone-tripleo-standalone to os_tempest
49f89f3 Deprecate idle_timeout option
4cdcf63 Remove duplicated owner key in test
70e2b4e Add service_token_roles for keystone authtoken config
b5df9ea Move to opendev
0ee612d Fix Repository
47f7e92 Replace git.openstack.org with opendev.org/openstack
70689f0 OpenDev Migration Patch
c41a1d3 Add Beaker-Rspec to the table of contents
6114f19 Bump version for the start of Train
ebb358c Update master for stable/stein
717d407 enable oauth support in keystone::fededation::openidc
dcbd368 fix typo in templates/openidc.conf.erb
e17812f Don't use proc in title patterns
1b5c8d6 Add support for configuring caching in mod_auth_openidc


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   2 +-
.zuul.yaml                                         |   7 +-
Gemfile                                            |   2 +-
README.md                                          |  13 +--
.../provider/keystone_paste_ini/ini_setting.rb     |  28 -----
lib/puppet/type/keystone_paste_ini.rb              |  50 ---------
lib/puppet/type/keystone_user_role.rb              |  20 ++--
manifests/config.pp                                |  13 +--
manifests/db.pp                                    |  54 ++++++----
manifests/deps.pp                                  |   6 --
manifests/disable_admin_token_auth.pp              |  18 ----
manifests/disable_v2_api.pp                        |  15 ---
manifests/federation/openidc.pp                    | 103 +++++++++++-------
manifests/init.pp                                  |  22 ++--
manifests/resource/authtoken.pp                    |  14 ++-
manifests/wsgi/apache.pp                           | 118 ++++-----------------
metadata.json                                      |   8 +-
.../add-service_token_roles-0439534920042962.yaml  |   5 +
...te_idle_timeout_parameter-bf3a271c03bb12df.yaml |   4 +
...remove-deprecated-openidc-845cea167976f90e.yaml |   8 ++
.../remove-deprecated-wsgi-15e14f2f65a2c2ae.yaml   |  13 +++
.../notes/remove-paste-9b4a67cbe869e2bf.yaml       |   6 ++
releasenotes/source/index.rst                      |   1 +
releasenotes/source/stein.rst                      |   6 ++
spec/classes/keystone_client_spec.rb               |   3 +
spec/classes/keystone_db_spec.rb                   |  54 +++++-----
spec/classes/keystone_federation_openidc_spec.rb   |  66 +++++++++++-
spec/classes/keystone_init_spec.rb                 |  25 ++---
spec/classes/keystone_wsgi_apache_spec.rb          |  15 +++
spec/defines/keystone_resource_authtoken_spec.rb   |  14 +++
.../keystone_paste_ini/ini_setting_spec.rb         |  29 -----
spec/unit/type/keystone_paste_ini_spec.rb          |  35 ------
spec/unit/type/keystone_user_role_spec.rb          |   4 +-
templates/openidc.conf.erb                         |  45 ++++++--
tox.ini                                            |   2 +-
35 files changed, 378 insertions(+), 450 deletions(-)