We contentedly announce the release of: puppet-keystone 15.0.0: Puppet module for OpenStack Keystone This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * Add support to configure *[keystone_authtoken]/service_token_roles* with *$service_token_roles* in the *keystone::resource::authtoken* resource. Upgrade Notes ************* * The deprecated parameters main_port and admin_port in keystone::federation::openidc is now removed. * The keystone::federation::openidc::keystone_url parameter is now mandatory and does not fallback on the keystone::public_endpoint value. * The deprecated parameters in keystone::wsgi::apache is removed, see below for what parameters you should use instead. * Removed "servername_admin" please use "servername" * Removed "public_port" and "admin_port" please use "api_port" * Removed "admin_bind_host" please use "bind_host" * Removed "public_path" and "admin_path" please use "path" * Removed "ssl_cert_admin" and "ssl_key_admin" please use "ssl_cert" and "ssl_key" * Removed "wsgi_admin_script_source" and "wsgi_public_script_source" please use "wsgi_script_source" * Removed "custom_wsgi_process_options_main" and "custom_wsgi_process_options_admin" please use "custom_wsgi_process_options" * The deprecated resources keystone_paste_ini, keystone::config::keystone_paste_config, keystone::disable_admin_token_auth, keystone::disable_v2_api and keystone::paste_config is removed. Deprecation Notes ***************** * database_idle_timeout is deprecated and will be removed in a future release. Please use database_connection_recycle_time instead. Changes in puppet-keystone 14.4.0..15.0.0 ----------------------------------------- 54dd622 Prefix memcached_servers IPv6 address with `inet6:` 3bebe58 Clear out keystone package config on ubuntu 5d32d64 Fix client spec test b081ee8 Remove deprecated keystone::federation::openidc params ad4ea7b Remove deprecated keystone::wsgi::apache params 553b03a Remove paste ce7fd5d Fix database test in keystone class test 870e338 Port puppet-keystone-tripleo-standalone to os_tempest 49f89f3 Deprecate idle_timeout option 4cdcf63 Remove duplicated owner key in test 70e2b4e Add service_token_roles for keystone authtoken config b5df9ea Move to opendev 0ee612d Fix Repository 47f7e92 Replace git.openstack.org with opendev.org/openstack 70689f0 OpenDev Migration Patch c41a1d3 Add Beaker-Rspec to the table of contents 6114f19 Bump version for the start of Train ebb358c Update master for stable/stein 717d407 enable oauth support in keystone::fededation::openidc dcbd368 fix typo in templates/openidc.conf.erb e17812f Don't use proc in title patterns 1b5c8d6 Add support for configuring caching in mod_auth_openidc Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 7 +- Gemfile | 2 +- README.md | 13 +-- .../provider/keystone_paste_ini/ini_setting.rb | 28 ----- lib/puppet/type/keystone_paste_ini.rb | 50 --------- lib/puppet/type/keystone_user_role.rb | 20 ++-- manifests/config.pp | 13 +-- manifests/db.pp | 54 ++++++---- manifests/deps.pp | 6 -- manifests/disable_admin_token_auth.pp | 18 ---- manifests/disable_v2_api.pp | 15 --- manifests/federation/openidc.pp | 103 +++++++++++------- manifests/init.pp | 22 ++-- manifests/resource/authtoken.pp | 14 ++- manifests/wsgi/apache.pp | 118 ++++----------------- metadata.json | 8 +- .../add-service_token_roles-0439534920042962.yaml | 5 + ...te_idle_timeout_parameter-bf3a271c03bb12df.yaml | 4 + ...remove-deprecated-openidc-845cea167976f90e.yaml | 8 ++ .../remove-deprecated-wsgi-15e14f2f65a2c2ae.yaml | 13 +++ .../notes/remove-paste-9b4a67cbe869e2bf.yaml | 6 ++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++ spec/classes/keystone_client_spec.rb | 3 + spec/classes/keystone_db_spec.rb | 54 +++++----- spec/classes/keystone_federation_openidc_spec.rb | 66 +++++++++++- spec/classes/keystone_init_spec.rb | 25 ++--- spec/classes/keystone_wsgi_apache_spec.rb | 15 +++ spec/defines/keystone_resource_authtoken_spec.rb | 14 +++ .../keystone_paste_ini/ini_setting_spec.rb | 29 ----- spec/unit/type/keystone_paste_ini_spec.rb | 35 ------ spec/unit/type/keystone_user_role_spec.rb | 4 +- templates/openidc.conf.erb | 45 ++++++-- tox.ini | 2 +- 35 files changed, 378 insertions(+), 450 deletions(-)