Open Stack

We are satisfied to announce the release of:

puppet-keystone 16.0.0: Puppet module for OpenStack Keystone

This release is part of the ussuri release series.

The source is available from:

    https://opendev.org/openstack/puppet-keystone

Download the package from:

    https://tarballs.openstack.org/null/

Please report issues through:

    https://bugs.launchpad.net/puppet-keystone/+bugs

For more details, please see below.

16.0.0
^^^^^^


New Features
************

* Adds interface parameter to keystone::resource::authtoken allow
  services to configure the interface to use for the Identity API
  endpoint. Valid values are "public", "internal" or "admin".


Deprecation Notes
*****************

* The service validation in keystone::service is deprecated so the
  following parameters in keystone::service has no effect anymore,
  validate, admin_token, admin_endpoint, retries, delay, insecure,
  cacert.

* The service validation in ::keystone is deprecated so the
  following parameters has no effect validate_service,
  validate_insecure, validate_auth_url and validate_cacert.

* The user_allow_create, user_allow_update, user_allow_delete,
  group_allow_create, group_allow_update and group_allow_delete
  parameters in keystone::ldap_backend is deprecated, has no effect
  and will be removed in a later release.

Changes in puppet-keystone 15.4.0..16.0.0
-----------------------------------------

155b665 Prepare Ussuri M1
fa11274 Convert all class usage to relative names
d8ab010 Remove writable ldap configs from examples and spec
3c95205 Remove keystone::service validation
a811b43 Fix rabbitmq dependency
a8f3616 New keystone::resource::authtoken::interface parameter
cd6f0b6 Update master for stable/train


Diffstat (except docs and test files)
-------------------------------------

examples/apache_dropin.pp                          |  14 +--
examples/apache_with_paths.pp                      |  16 +--
examples/k2k_sp_shib.pp                            |  16 +--
examples/ldap_backend.pp                           |  16 +--
examples/ldap_full.pp                              |  10 +-
examples/ldap_identity.pp                          |   7 +-
examples/v3_basic.pp                               |  10 +-
examples/v3_domain_configuration.pp                |  10 +-
manifests/client.pp                                |   2 +-
manifests/config.pp                                |   2 +-
manifests/cors.pp                                  |   2 +-
manifests/cron/fernet_rotate.pp                    |   2 +-
manifests/cron/token_flush.pp                      |   2 +-
manifests/db.pp                                    |   2 +-
manifests/db/mysql.pp                              |   2 +-
manifests/db/postgresql.pp                         |   2 +-
manifests/db/sync.pp                               |   2 +-
manifests/endpoint.pp                              |   2 +-
manifests/federation.pp                            |   2 +-
manifests/federation/identity_provider.pp          |   4 +-
manifests/federation/mellon.pp                     |   6 +-
manifests/federation/openidc.pp                    |   6 +-
manifests/federation/shibboleth.pp                 |   6 +-
manifests/init.pp                                  |  99 ++++++----------
manifests/ldap.pp                                  |   2 +-
manifests/ldap_backend.pp                          |  93 +++++++++------
manifests/logging.pp                               |   2 +-
manifests/messaging/amqp.pp                        |   2 +-
manifests/params.pp                                |   2 +-
manifests/policy.pp                                |   4 +-
manifests/resource/authtoken.pp                    |  11 +-
manifests/resource/service_identity.pp             |   2 +-
manifests/resource/service_user.pp                 |   4 +-
manifests/roles/admin.pp                           |   2 +-
manifests/security_compliance.pp                   |   2 +-
manifests/service.pp                               |  70 ++++-------
manifests/wsgi/apache.pp                           |   2 +-
metadata.json                                      |   8 +-
.../authtoken_interface-2e8ccbd3e961e0fb.yaml      |   6 +
...recate-service-validation-35fd28183776f94f.yaml |   9 ++
...ove-writable-ldap-configs-020f66d8b93003bc.yaml |   6 +
releasenotes/source/index.rst                      |   1 +
releasenotes/source/train.rst                      |   6 +
spec/acceptance/default_domain_spec.rb             |  10 +-
.../keystone_federation_identity_provider_spec.rb  |  10 +-
.../keystone_federation_shibboleth_spec.rb         |  10 +-
spec/acceptance/keystone_wsgi_apache_spec.rb       |  10 +-
spec/classes/keystone_init_spec.rb                 |  37 +-----
spec/classes/keystone_service_spec.rb              | 131 ++++++++++++++++-----
spec/classes/keystone_wsgi_apache_spec.rb          |   2 +-
spec/defines/keystone_ldap_backend_spec.rb         |  12 --
spec/defines/keystone_resource_authtoken_spec.rb   |   3 +
52 files changed, 360 insertions(+), 341 deletions(-)