We are stoked to announce the release of: puppet-keystone 27.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. Changes in puppet-keystone 26.0.0..27.0.0 ----------------------------------------- 1288c11 Bump upper cap of puppetlabs-apache dcaec81 Prepare 2025.2 release b1af02c Remove packaging files e13958a Refactor api service management 4ecc855 Import base parameter types for ::policy bccb220 Remove unused variable in unit tests 22c1e47 Validate ensure parameter for package resources 9ae9ffa metadata.json: Support Debian 13 7e364bc Switch to namespace sdtlib functions 9e06944 Remove support for [oslo_messaging_rabbit] heartbeat_in_pthread 24ac676 Fix lint error 0f082bc Replace wsgi script cdd558c Prepare for voxpupuli-puppet-lint-plugins 114b0c3 Remove puppet 7 support 4662868 Fix remaining lint error fb48977 Prepare for new lint plugins 76c92f2 Use common default value for auth_url a498906 Fix ignored unit test cases dd5a174 Add queue_manager and stream_fanout 1baf68c security_compliance: Support password hash options f733193 Allow multiple OIDCCryptoPassphrase fb66e2c Add support for [ldap] connection_timeout 9cab1ae Drop global r from domain specific config file 27a8ea0 Drop duplicate sections from changelog file 5f7f116 ldap: Remove deprecated core driver options 0f0d6c4 Stop purging [catalog] template_file 12a3303 Remove watch_log_file 90d291e Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- CHANGELOG.md | 5 - examples/apache_dropin.pp | 2 +- examples/k2k_sp_shib.pp | 4 +- examples/ldap_backend.pp | 2 +- .../user_project_user_role_composite_namevar.pp | 31 ++- examples/v3_basic.pp | 1 - manifests/bootstrap.pp | 7 +- manifests/cache.pp | 5 +- manifests/config.pp | 1 - manifests/cors.pp | 1 - manifests/cron/fernet_rotate.pp | 5 +- manifests/cron/trust_flush.pp | 5 +- manifests/db.pp | 1 - manifests/db/mysql.pp | 3 +- manifests/db/postgresql.pp | 3 +- manifests/db/sync.pp | 9 +- manifests/federation.pp | 1 - manifests/federation/identity_provider.pp | 42 ++- manifests/federation/mellon.pp | 3 +- manifests/federation/shibboleth.pp | 3 +- manifests/healthcheck.pp | 1 - manifests/init.pp | 132 ++++----- manifests/ldap.pp | 142 +++++----- manifests/ldap_backend.pp | 136 +++++----- manifests/logging.pp | 12 +- manifests/params.pp | 15 +- manifests/policy.pp | 18 +- manifests/resource/authtoken.pp | 91 ++++--- manifests/resource/service_identity.pp | 5 +- manifests/resource/service_user.pp | 41 ++- manifests/security_compliance.pp | 28 +- manifests/wsgi/apache.pp | 12 +- manifests/wsgi/uwsgi.pp | 5 +- metadata.json | 14 +- .../ldap-connection_timeout-f64a4ca37a228886.yaml | 6 + .../ldap-remove-driver-opts-d3810ceb0c6fc51e.yaml | 8 + ...manager-and-stream_fanout-dabbfb058758f9f9.yaml | 5 + .../notes/remove-puppet-7-4cbd38fc350d3285.yaml | 4 + ...bbit_heartbeat_in_pthread-3b12a812f1d2e1fd.yaml | 4 + .../remove-watch_log_file-38134d535cf37731.yaml | 4 + ...ort-invalid-password-hash-bd7d3393f67475c1.yaml | 10 + releasenotes/source/2025.1.rst | 6 + releasenotes/source/conf.py | 1 - releasenotes/source/index.rst | 1 + setup.cfg | 15 -- setup.py | 21 -- spec/classes/keystone_bootstrap_spec.rb | 11 +- .../keystone_federation_identity_provider_spec.rb | 35 +-- spec/classes/keystone_federation_mellon_spec.rb | 6 +- spec/classes/keystone_federation_openidc_spec.rb | 31 ++- .../classes/keystone_federation_shibboleth_spec.rb | 31 +-- spec/classes/keystone_federation_spec.rb | 6 - spec/classes/keystone_init_spec.rb | 300 ++++++++++----------- spec/classes/keystone_ldap_spec.rb | 5 - spec/classes/keystone_security_compliance_spec.rb | 12 + spec/classes/keystone_wsgi_apache_spec.rb | 17 +- spec/defines/keystone_ldap_backend_spec.rb | 45 +++- spec/defines/keystone_resource_authtoken_spec.rb | 17 +- .../defines/keystone_resource_service_user_spec.rb | 11 +- templates/openidc.conf.erb | 4 + tox.ini | 5 - 61 files changed, 705 insertions(+), 702 deletions(-)