We are happy to announce the release of: puppet-keystone 21.0.0: Puppet module for OpenStack Keystone This release is part of the zed release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. Changes in puppet-keystone 20.3.0..21.0.0 ----------------------------------------- c8685a4 Prepare Zed RC1 fd2ab9f openidc/mellon: Use static Location for protected endpoints e8a5859 Remove warning message for old change 19b541d Debian: Ensure keystone service is stopped when httpd is used 91483e5 Make WSGI process display-name configurable f5cb861 Fix a typo in parameter description 16309d9 Fix inconsistent port parameter name 2163a8f Fix dependency to purge default vhost config 7465a11 Allow customizing --date option for trust_flush cron job d5309ec Cap upper version of puppetlabs-apache ae0b8a6 Remove old puppet.conf resource in bootstrap class bdcc72e Fix unit test failure caused by puppetlabs-apache 8.0.0 4095780 Remove unused items from platform_params a5402c1 Adapt to new type validation in puppetlabs-apache eba3b93 Revert "CentOS 9: Disable unit tests dependent on puppet-postgresql" bae7938 Fix wrong test description b8dfd90 Remove parse logic for openstacclient < 1.9.0 71807e1 Add acceptance tests for config management resources 4351201 Expose request_headers option of apache::vhost c76bfbe Ensure key contents are hidden c6a3840 Fix several typos in parameter descriptions. fd5b32a Make sure keystone package name is asserted 1c68ab1 Remove support for CentOS 8 Stream 05c5605 Deprecate keystone::service 6d90c87 Add support for [DEFAULT] notification_opt_out c4cc44b Avoid hard-coding OS user/group in each manifest 0f82664 federation: Use $::os_service_default by default a6380e6 Clean up admin_endpoint 0fd586f Remove member_role_id/name 8d8b6cc Remove logic for old Ubuntu version 472d22e apache+mod_wsgi: Disable SSL by default afc28df Remove keystone::federation::openidc_httpd_configuration 9bb3834 Add description support to keystone_user fc9cd07 keystone_user: Use un-scoped token to verify password 0954fea Remove [ssl] parameters a917236 Update master for stable/yoga 59b4544 keystone::ldap_backend: Use $::os_service_default instead of undef 1f13f9e Deprecate ineffective keystone::log_* parameters 58aec9d identity_provider: Use $::os_service_default instead of undef Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/keystone.rb | 11 +- lib/puppet/provider/keystone_endpoint/openstack.rb | 2 +- .../keystone_identity_provider/openstack.rb | 30 +-- lib/puppet/provider/keystone_user/openstack.rb | 25 +-- lib/puppet/type/keystone_domain_config.rb | 2 +- lib/puppet/type/keystone_user.rb | 4 + manifests/bootstrap.pp | 11 +- manifests/cache.pp | 6 +- manifests/cron/fernet_rotate.pp | 6 +- manifests/cron/trust_flush.pp | 19 +- manifests/db/sync.pp | 4 +- manifests/deps.pp | 4 +- manifests/federation.pp | 17 +- manifests/federation/identity_provider.pp | 32 +-- manifests/federation/mellon.pp | 2 +- .../federation/openidc_httpd_configuration.pp | 17 -- manifests/healthcheck.pp | 4 +- manifests/init.pp | 236 ++++++++++----------- manifests/ldap_backend.pp | 198 ++++++++--------- manifests/logging.pp | 2 +- manifests/params.pp | 7 +- manifests/service.pp | 3 + manifests/wsgi/apache.pp | 74 ++++--- metadata.json | 10 +- .../notes/apache-headers-2947bd0cc0c91602.yaml | 5 + .../notes/bug-1967717-9775a5b195672923.yaml | 12 ++ .../notes/bug-1979672-003a5939f3bd6f67.yaml | 5 + ...deprecate-base-log-params-76ad74cdeed86393.yaml | 5 + ...eprecate-keystone-service-980e93e5908d24eb.yaml | 5 + .../notes/disable-apache-ssl-58975d0ddabc49a5.yaml | 5 + ...istent-wsgi-apache-params-1aabe5c54b8f4ca1.yaml | 5 + ...user-provider-description-18806553c4b2be3f.yaml | 4 + .../notification_opt_out-5c87151211fe8840.yaml | 4 + .../remove-admin_endpoint-00973a0b88f4e611.yaml | 4 + .../notes/remove-centos-8-a0c1fa3c4b9794f0.yaml | 4 + ...enidc_httpd_configuration-ffdc462518bfb912.yaml | 5 + .../notes/remove-member_role-1e0ebbdf80881de6.yaml | 5 + .../notes/token_flush-age-a4b11555aac09a2e.yaml | 4 + ...wsgi_process_display_name-fe58f3cb9067c783.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 + ...gi_apache_spec.rb => 10_basic_keystone_spec.rb} | 13 +- ..._keystone_federation_identity_provider_spec.rb} | 0 ...b => 21_keystone_federation_shibboleth_spec.rb} | 0 ..._spec.rb => 30_keystone_default_domain_spec.rb} | 0 spec/acceptance/99_keystone_config_spec.rb | 62 ++++++ spec/classes/keystone_bootstrap_spec.rb | 24 +-- spec/classes/keystone_cron_trust_flush_spec.rb | 40 +++- spec/classes/keystone_db_postgresql_spec.rb | 10 +- .../keystone_federation_identity_provider_spec.rb | 3 +- spec/classes/keystone_federation_spec.rb | 35 +-- spec/classes/keystone_init_spec.rb | 65 +++--- spec/classes/keystone_wsgi_apache_spec.rb | 48 ++--- spec/defines/keystone_resource_authtoken_spec.rb | 2 +- spec/shared_examples.rb | 2 +- .../keystone_identity_provider/openstack_spec.rb | 50 +---- spec/unit/provider/keystone_spec.rb | 2 +- spec/unit/provider/keystone_user/openstack_spec.rb | 131 +++++------- spec/unit/type/keystone_config_spec.rb | 2 +- spec/unit/type/keystone_puppet_config_spec.rb | 2 +- spec/unit/type/keystone_uwsgi_config_spec.rb | 2 +- templates/mellon.conf.erb | 4 +- templates/openidc.conf.erb | 10 +- 63 files changed, 700 insertions(+), 617 deletions(-)