We are tickled pink to announce the release of: puppet-keystone 22.0.0: Puppet module for OpenStack Keystone This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. Changes in puppet-keystone 21.0.0..22.0.0 ----------------------------------------- 1624b81 Prepare 2023.1 release 038bef3 Add strict validation about boolean parameters eab0404 Expose executor_thread_pool_size 7d526b2 Remove TripleO job 5a6378c Fix access to configs hash symbol in get_auth_endpoint 486d7f1 Replace legacy facts and use fact hash 43331ea Bump upper version of puppetlabs-apache fe95db4 Use puppetlabs-apache to load auth modules. 6c52159 OIDC: Make sure the dependent auth modules are loaded 0f8158a Replace mocha by rspec-mocks caa8c1a Expose policy_default_rule 3898276 apache: Remove deprecated api_port parameter bad291f Fix OIDCRedirectURI value 649dcab Switch to Ubuntu Jammy (22.04) 2d6bab8 Fix wrong indent 76505f1 Remove deprecated keystone::service aa394b1 Remove keystone_puppet_config resource type b99810d Remove deprecated parameters for [ssl] options e19a4c3 Remove deprecated keystone::log_* parameters 0157544 Update master for stable/zed Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 19 -- examples/apache_dropin.pp | 4 +- examples/apache_with_paths.pp | 4 +- examples/k2k_sp_shib.pp | 4 +- lib/puppet/provider/keystone.rb | 2 +- .../provider/keystone_puppet_config/ini_setting.rb | 8 - lib/puppet/type/keystone_puppet_config.rb | 14 -- manifests/bootstrap.pp | 2 + manifests/cache.pp | 116 +++++------ manifests/cors.pp | 24 +-- manifests/db.pp | 32 +-- manifests/deps.pp | 6 - manifests/federation.pp | 8 +- manifests/federation/identity_provider.pp | 18 +- manifests/federation/mellon.pp | 23 ++- manifests/federation/openidc.pp | 20 +- manifests/federation/shibboleth.pp | 6 +- manifests/healthcheck.pp | 16 +- manifests/init.pp | 221 ++++++++------------- manifests/ldap.pp | 202 +++++++++---------- manifests/ldap_backend.pp | 193 +++++++++--------- manifests/logging.pp | 82 ++++---- manifests/messaging/amqp.pp | 28 +-- manifests/params.pp | 8 +- manifests/policy.pp | 18 +- manifests/resource/authtoken.pp | 146 +++++++------- manifests/resource/service_identity.pp | 8 +- manifests/resource/service_user.pp | 48 ++--- manifests/security_compliance.pp | 36 ++-- manifests/service.pp | 48 ----- manifests/wsgi/apache.pp | 24 +-- manifests/wsgi/uwsgi.pp | 6 +- metadata.json | 10 +- .../bug-1967717-cleanup-d7ef777a60ffbce0.yaml | 11 + ...executor_thread_pool_size-9da1d6c17a448e38.yaml | 4 + .../policy_default_rule-4600db5f90a7303c.yaml | 4 + .../remove-base-log-params-f3d1724b60c3fa74.yaml | 5 + ...tone-service-defined-type-639c799d5a266d1c.yaml | 4 + ...ve-keystone_puppet_config-2eba1350a2d2fd85.yaml | 4 + .../notes/ubuntu-jammy-4a6a5b84be39036d.yaml | 8 + ...ache-to-load-auth-modules-175642ed1b2b0df8.yaml | 8 + ...sgi-apache-params-cleanup-c7cd7f1723fc8648.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 6 + spec/classes/keystone_client_spec.rb | 2 +- .../keystone_federation_identity_provider_spec.rb | 4 +- spec/classes/keystone_federation_mellon_spec.rb | 15 +- spec/classes/keystone_federation_openidc_spec.rb | 15 +- .../classes/keystone_federation_shibboleth_spec.rb | 6 +- spec/classes/keystone_init_spec.rb | 32 ++- spec/classes/keystone_ldap_spec.rb | 2 +- spec/classes/keystone_policy_spec.rb | 2 + spec/classes/keystone_service_spec.rb | 59 ------ spec/classes/keystone_wsgi_apache_spec.rb | 8 +- spec/defines/keystone_ldap_backend_spec.rb | 2 +- spec/defines/keystone_resource_authtoken_spec.rb | 2 +- spec/shared_examples.rb | 14 +- spec/spec_helper.rb | 2 + .../provider/keystone_domain/openstack_spec.rb | 56 +++--- .../keystone_domain_config/openstack_spec.rb | 2 +- .../provider/keystone_endpoint/openstack_spec.rb | 108 +++++----- .../keystone_identity_provider/openstack_spec.rb | 74 +++---- .../keystone_puppet_config/ini_setting_spec.rb | 41 ---- spec/unit/provider/keystone_role/openstack_spec.rb | 10 +- .../provider/keystone_service/openstack_spec.rb | 14 +- spec/unit/provider/keystone_spec.rb | 88 ++++---- .../provider/keystone_tenant/openstack_spec.rb | 66 +++--- spec/unit/provider/keystone_user/openstack_spec.rb | 74 +++---- .../provider/keystone_user_role/openstack_spec.rb | 62 +++--- spec/unit/type/keystone_identity_provider_spec.rb | 5 +- spec/unit/type/keystone_puppet_config_spec.rb | 64 ------ templates/openidc.conf.erb | 33 +-- 72 files changed, 1027 insertions(+), 1299 deletions(-)