Open Stack

We joyfully announce the release of:

puppet-keystone 20.1.0: Puppet module for OpenStack Keystone

This release is part of the yoga release series.

The source is available from:

    https://opendev.org/openstack/puppet-keystone

Download the package from:

    https://tarballs.openstack.org/puppet-keystone/

Please report issues through:

    https://bugs.launchpad.net/puppet-keystone/+bugs

For more details, please see below.

20.1.0
^^^^^^


New Features
************

* The "keystone::admin_endpoint" parameter has been deprecated
  because it has not been used for several releases.

* The "system_scope" parameter has been added to the following
  resource types.

  * "keystone::resource::authtoken"

  * "keystone::resource::service_user"

* The "keystone_user_role" resource type supports creating a system
  role.


Upgrade Notes
*************

* Default value of the "keystone::enable_credential_setup" parameter
  has been updated from "false" to "true".

* The "keystone::cron::token_flush" class has been removed.

* The "keystone::resource::service_identity::ignore_default_tenant"
  parameter has been removed.

* The following parameters of the "keystone::ldap" class have been
  removed.

     * "project_tree_dn"

     * "project_filter"

     * "project_objectclass"

     * "project_id_attribute"

     * "project_member_attribute"

     * "project_name_attribute"

     * "project_desc_attribute"

     * "project_enabled_attribute"

     * "project_domain_id_attribute"

     * "project_attribute_ignore"

     * "project_allow_create"

     * "project_allow_update"

     * "project_allow_delete"

     * "project_enabled_emulation"

     * "project_enabled_emulation_dn"

     * "project_additional_attribute_mapping"

     * "role_tree_dn"

     * "role_filter"

     * "role_objectclass"

     * "role_id_attribute"

     * "role_name_attribute"

     * "role_member_attribute"

     * "role_attribute_ignore"

     * "role_allow_create"

     * "role_allow_update"

     * "role_allow_delete"

     * "role_additional_attribute_map"


Deprecation Notes
*****************

* The "member_role_id" parameter and the "member_role_name"
  parameter of the "keystone" class have been deprecated and have no
  effect now. These parameters will be removed in a future release.

Changes in puppet-keystone 20.0.0..20.1.0
-----------------------------------------

92f9de2 Prepare Yoga M2
e331df0 Ensure keystone packages are installed before configuring apache
258bd8c Enable trust flush cron job after database is initialized
ddfc000 Load libraries in a single place
5457be7 Add support for system scope
b4e600b Enable credential setup by default
aeb2861 Deprecate unused admin_endpoint
f4bba71 Deprecate support for member_role_id/name
c1e3ff8 Enforce usage of specific endpoint in providers
01c96c0 Fix dependencies related to openstacklib::policy
b634950 Clean up deprecated parameters of keystone::ldap
cdd116e Remove keystone::cron::token_fush
26827ea Clean up deprecated ignore_default_tenant


Diffstat (except docs and test files)
-------------------------------------

lib/puppet/provider/keystone.rb                    |   4 +
.../provider/keystone_user_role/openstack.rb       |   4 +-
lib/puppet/type/keystone_user_role.rb              |  41 ++++-
manifests/bootstrap.pp                             |   5 +
manifests/cron/token_flush.pp                      |  77 ---------
manifests/cron/trust_flush.pp                      |   2 +-
manifests/deps.pp                                  |   2 +-
manifests/init.pp                                  |  73 ++++----
manifests/ldap.pp                                  | 183 ---------------------
manifests/resource/authtoken.pp                    |  25 ++-
manifests/resource/service_identity.pp             |  41 +++--
manifests/resource/service_user.pp                 |  25 ++-
manifests/wsgi/apache.pp                           |  12 +-
metadata.json                                      |   6 +-
.../deprecate-admin_endpoint-d8ea2cc9c7423bf4.yaml |   5 +
.../deprecate-member_role-e99b3344b50af47b.yaml    |   6 +
...redental-setup-by-default-98fcc7d80cfdb39a.yaml |   5 +
.../remove-cron-token_flush-d28b5744c18ee66d.yaml  |   4 +
...ove-ignore_default_tenant-8d4ff41eb7c0a507.yaml |   5 +
...eystone-ldap-options-left-4616148f71c57b24.yaml |  33 ++++
.../notes/system_scope-44a1249c18aa3631.yaml       |  11 ++
spec/classes/keystone_bootstrap_spec.rb            |  10 ++
spec/classes/keystone_cron_trust_flush_spec.rb     |   4 +-
spec/classes/keystone_init_spec.rb                 |  50 +++---
spec/defines/keystone_resource_authtoken_spec.rb   |  28 ++--
.../keystone_resource_service_identity_spec.rb     |  29 ++++
.../defines/keystone_resource_service_user_spec.rb |  33 ++--
spec/spec_helper.rb                                |   3 +-
.../keystone_config/openstackconfig_spec.rb        |  27 ---
.../keystone_domain_config/openstack_spec.rb       |  16 --
.../keystone_puppet_config/ini_setting_spec.rb     |  16 --
.../keystone_uwsgi_config/ini_setting_spec.rb      |  16 --
spec/unit/type/keystone_puppet_config_spec.rb      |  14 --
spec/unit/type/keystone_user_role_spec.rb          |  23 ++-
34 files changed, 371 insertions(+), 467 deletions(-)