Commit Graph

13 Commits

Author SHA1 Message Date
Takashi Kajinami ba81a15371 Retire puppet-glare - Step 2: Remove Project Content
Depends-on: https://review.opendev.org/790056
Change-Id: Id76e00fafd171f3d77b70817c5cfd103cb207b0e
2021-05-07 01:08:33 +09:00
Takashi Kajinami ba039b45ec Add support for the keystone_authtoken/service_type parameter
Change-Id: Iacf60927f83761973b77dd9b5f876b14a58eb0d6
2020-11-03 17:53:49 +09:00
ZhongShengping 6034694981 Add service_token_roles for keystone authtoken config
Add the ability to configure service_token_roles.

Change-Id: I29e8d699eb34c4d89302d9b0ff08562353c1e4a1
Closes-Bug: #1892284
2020-08-20 10:41:27 +08:00
Lewis Denny ede6fbf786 Add support for the interface parameter in authtoken middleware
This patch adds support for [keystone_authtoken] interface parameter,
so that operators can define which endpoint should be used by authtoken
middleware.

Change-Id: Idbaf877352d93a9713a87b4ceadd18feb770ad6d
2020-07-16 11:27:40 +10:00
ZhongShengping ca01ea1047 Service_token_roles_required missing in the server config file
Service_token_roles_required missing in the server config file which
allows backwards compatibility to ensure that the service tokens are
compared against a list of possible roles for validity.

Change-Id: Ic7613f0e384bc7ec7e0122b26a1abed5d659dd0a
Closes-Bug: 1778198
2019-02-15 10:03:03 +08:00
ZhongShengping f67462cce2 Deprecate pki related options
check_revocations_for_cached and hash_algorithms are deprecated for
removel because of PKI token format is no longer supported.
Update warning message and add a release note.

Change-Id: Idf08b1283b64f1d6707fd6d7a87b0b1c39f5d319
Closes-Bug: #1804562
Closes-Bug: #1804720
2018-11-23 10:22:26 +08:00
melissaml 6afae87cf1 Replace port 35357 with 5000 for "auth_url"
Based on the change in Keystone Install Guide [1],
this patch replace port 35357 with 5000 for "auth_url".

For more details, please check similar changes which have been done
on other projects: Nova [2], Neutron [3], Cinder [4], Glance [5].

[1] https://review.openstack.org/#/c/541857
[2] https://review.openstack.org/#/c/562812
[3] https://review.openstack.org/#/c/566491
[4] https://review.openstack.org/#/c/565464
[5] https://review.openstack.org/#/c/558932

Change-Id: I4663576274830a7d6fa0b1a06d357cae58c771c7
2018-05-21 14:50:53 +08:00
ZhongShengping 98651fc002 Deprecate auth_uri option
Option auth_uri from group keystone_authtoken is deprecated[1].
Use option www_authenticate_uri from group keystone_authtoken.

[1]https://review.openstack.org/#/c/508522/

Change-Id: I5e84034ada8dffad946ae32746a11cb31488bfec
Depends-On: I4c82a63baabd6b9304b302c97cd751a0103d8316
Closes-Bug: #1759098
2018-04-03 16:55:00 +08:00
ZhongShengping 7c15fd5d0f Configure *_domain_name to Default by default
Keystone v2.0 API was removed so we have no choice but configuring
user_domain_name and project_domain_name otherwise it fallbacks to
Keystone v2.0 and it fails. This patch sets the default value so we make
sure Keystone v3 will be used out of the box for our users.

Change-Id: I9ae04aa57983e60bd902f20a61a91cf1cfbd9c1c
2017-10-13 14:33:16 +08:00
ZhongShengping d9d775fc51 Deprecate revocation_cache_time option
The revocation_cache_time is deprecated for removel because of PKI
token format is no longer supported.
Update warning message and add a release note.

Change-Id: Icad365825b3c134267493efb3ee692cfce364399
Closes-Bug: #1717144
2017-09-14 11:28:01 +08:00
Matthew J. Black c974042a07 Allow python-memcache install from authtoken class
The python-memcache package is required if using memcached. By
default the package is not installed and the define has it set to
false. This change allows managing the python-memcache package
install from the authtoken class.

Change-Id: I6a931622004e59ab8f7754487caa866d2f383fb6
2017-01-12 07:58:21 -05:00
ZhongShengping 0cdecba911 Remove signing_dir option
The signing_dir is deprecated for removel because PKI token format
is no longer supported.

Change-Id: Id83c69395d4e2e5b76ee16e04e1bb21ffc4a89d4
Closes-Bug: #1652700
2016-12-28 13:54:13 +08:00
Denis Egorenko 564c1f7930 puppet-glare: Initial commit
This is the initial commit for puppet-glare.
It has been automatically generated using cookiecutter[1] and msync[2]

[1] https://github.com/openstack/puppet-openstack-cookiecutter
[2] https://github.com/openstack/puppet-modulesync-configs

Change-Id: I614a3d93947705a7a74820017bc568c6de197bea
2016-09-14 17:05:00 +03:00