Open Stack

We are amped to announce the release of:

puppet-keystone 18.1.0: Puppet module for OpenStack Keystone

This release is part of the wallaby release series.

The source is available from:

    https://opendev.org/openstack/puppet-keystone

Download the package from:

    https://tarballs.openstack.org/puppet-keystone/

Please report issues through:

    https://bugs.launchpad.net/puppet-keystone/+bugs

For more details, please see below.

18.1.0
^^^^^^


New Features
************

* Adds db_sync_timeout parameter to db sync.

* The new "keystone::bootstrap::bootstrap" parameter has been added,
  to disable "keystone-manage bootstrap" command. This is useful to
  generate "/etc/keystone/puppet.conf" on multiple nodes while running
  bootstrap command on a single node.

* The new "keystone::policy::enforce_scope" parameter has been added
  to support the corresponding parameter in oslo.policy library.


Upgrade Notes
*************

* "keystone-public-keystone-admin" is no longer supported as a valid

     service_name. Use "keystone/openstack-keystone" or "httpd"
     instead.


Deprecation Notes
*****************

* allow_insecure_clients option is now deprecated for removal, the
  parameter has no effect.

* The following options have been deprecated, as those options have
  been moved to keystone::db class.

  * "keystone::database_connection"

  * "keystone::database_idle_timeout"

  * "keystone::database_max_overflow"

  * "keystone::database_max_pool_size"

  * "keystone::database_max_retries"

  * "keystone::database_retry_interval"

Changes in puppet-keystone 18.0.0..18.1.0
-----------------------------------------

56c39a7 Prepare Wallaby M1
767d291 Allow db sync timeouts to be configurable
106f2c5 Replace deprecated UPPER_CONSTRAINTS_FILE variable
9d734ce Build containers for single consumer job
3eb8b2b Deprecate allow_insecure_clients option
5c1632c Unset memcached_servers by default
3cb756c Fix outdated files
84996ba Fix keystone::bootstrap password comment
64cf6c1 Add support for the oslo_policy/enforce_scope parameter
92101bd Add missing dependencies about keystone_puppet_config
b8515bc Add a new parameter to enable/disable bootstrap
a33a4b0 Deprecate database options from the keystone class
ee60ff1 Drop support for 'keystone-public-keystone-admin' service_name


Diffstat (except docs and test files)
-------------------------------------

.zuul.yaml                                         |   1 +
README.md                                          |   7 +-
manifests/bootstrap.pp                             | 123 +++++++++++----------
manifests/db/sync.pp                               |  10 +-
manifests/deps.pp                                  |   6 +
manifests/federation/openidc.pp                    |   6 +-
manifests/init.pp                                  | 104 ++++++++++-------
manifests/messaging/amqp.pp                        |  33 +++---
manifests/policy.pp                                |  14 ++-
manifests/service.pp                               |  34 ++----
metadata.json                                      |   8 +-
.../add_db_sync_timeout-b07f8c72f30ec148.yaml      |   3 +
...w_insecure_clients-option-9988aab2c5b381de.yaml |   4 +
...eprecate_database_options-4d58b217d4cf21fd.yaml |  12 ++
.../keystone-bootstrap-flag-9eac9280f6f6d7ed.yaml  |   7 ++
...oslo_policy-enforce_scope-99b33bde5542e66d.yaml |   5 +
...one-public-keystone-admin-b707640b1a8ec8c3.yaml |   5 +
spec/classes/keystone_bootstrap_spec.rb            |  40 +++++++
spec/classes/keystone_db_sync_spec.rb              |   9 +-
spec/classes/keystone_messaging_amqp_spec.rb       |   3 -
spec/classes/keystone_policy_spec.rb               |   8 +-
spec/classes/keystone_service_spec.rb              |  52 ---------
templates/openidc.conf.erb                         |   2 +-
tox.ini                                            |   2 +-
24 files changed, 286 insertions(+), 212 deletions(-)