Open Stack

We are overjoyed to announce the release of:

puppet-keystone 17.2.0: Puppet module for OpenStack Keystone

This release is part of the victoria release series.

The source is available from:

    https://opendev.org/openstack/puppet-keystone

Download the package from:

    https://tarballs.openstack.org/puppet-keystone/

Please report issues through:

    https://bugs.launchpad.net/puppet-keystone/+bugs

For more details, please see below.

17.2.0
^^^^^^


New Features
************

* The new "keystone::cron::trust_flush" class was added to configure
  a cron job to purge expired or soft-deleted trusts.


Upgrade Notes
*************

* The following deprecated options for PKI token have been removed.

  * "keystone::cache_dir"

  * "keystone::resource::authtoken::hash_algorithms"

  * "keystone::resource::authtoken::check_revocations_for_cached"

* The classes keystone::endpoint and keystone::roles::admin is
  removed, use the new keystone::bootstrap class directly.

* The password parameter in keystone::bootstrap is required and does
  not default to undef.

* The deprecated parameters admin_token, admin_password and
  enable_bootstrap in the keystone class is removed.


Deprecation Notes
*****************

* The "keystone::cron::token_flush" class has been deprcated and has
  no effect.

* The use of keystone-public-keystone-admin for the keystone service
  name is deprecated, please use simply keystone instead.

* The "keystone::federation::mellon::trusted_dashboards" has been
  removed.


Bug Fixes
*********

* Fixed a bug where the keystone::resource::authtoken resource would
  not install the proper python memcache bindings when using python3.

Changes in puppet-keystone 17.1.0..17.2.0
-----------------------------------------

57e0353 Prepare Victoria M2
8f5c683 Convert more to rspec-puppet-facts
fc30737 Always pass --name when flushing keystone_service
fec22db Change to relative includes
d5196db Use relative name for class inclusion
4cca233 Add support for trust_flush cron job
fd8badd Deprecate keystone::cron::token_fush
e421e3a Remove deprecated bootstrap code
5ba56d4 Ensure fernet keys are created before bootstrap


Diffstat (except docs and test files)
-------------------------------------

examples/apache_with_paths.pp                      |   1 -
lib/puppet/provider/keystone_service/openstack.rb  |   3 +
manifests/bootstrap.pp                             | 184 +++---------------
manifests/client.pp                                |   2 +-
manifests/cron/token_flush.pp                      |  57 ++----
manifests/cron/trust_flush.pp                      |  91 +++++++++
manifests/deps.pp                                  |   4 +
manifests/endpoint.pp                              |  74 --------
manifests/init.pp                                  |  28 +--
manifests/roles/admin.pp                           | 102 ----------
metadata.json                                      |   6 +-
.../notes/cron-trust_flush-9a85af706076f55d.yaml   |   5 +
...eprecate-cron-token_flush-b76a1db6715a818b.yaml |   5 +
...move-deprecated-bootstrap-2b81ba7a7b0b4d5d.yaml |  11 ++
.../keystone_federation_identity_provider_spec.rb  |   4 -
.../keystone_federation_shibboleth_spec.rb         |   4 -
spec/acceptance/keystone_wsgi_apache_spec.rb       |   4 -
...h_spec.rb => keystone_cron_trust_flush_spec.rb} |  16 +-
.../keystone_federation_identity_provider_spec.rb  | 175 ++++++++++--------
spec/classes/keystone_federation_openidc_spec.rb   |   4 +-
spec/classes/keystone_federation_spec.rb           |   5 +-
spec/classes/keystone_init_spec.rb                 |   2 +
spec/classes/keystone_ldap_spec.rb                 | 205 +++++++++++----------
spec/classes/keystone_wsgi_apache_spec.rb          |   1 -
spec/spec_helper.rb                                |   1 -
25 files changed, 397 insertions(+), 597 deletions(-)