charm-keystone/templates
Frode Nordahl 1e991dc28b
Add initial support for Fernet tokens
Starting OpenStack Rocky the currently used `uuid` token format
is no longer supported and we need to change to use `fernet` tokens.

This change provides basic functionalty to initialize fernet token
repository and distribute keys to non-leader units.

A configuration option is also added allowing change of token format
in a controlled manner prior to upgrading to OpenStack Rocky.

Further work is required to implement key rotation, actions etc. and
these topics will be addressed in separate commits.

The commit also fixes a instance of missing release check for writing
of `policy.json`, and a few places where writing of `policy.json`
previously was omitted.

Change-Id: I1d0ff22a5f091b02f5700412745572c246103e9e
2018-07-25 15:23:47 +02:00
..
essex [hopem,r=] 2015-02-19 11:26:28 +00:00
folsom [trivial] Fix policy backend for releases < grizzly 2014-04-17 08:54:31 +01:00
grizzly [trivial] Switch back to using UUID token format - lost during redux 2014-04-16 22:42:49 +01:00
havana [trivial] Switch back to using UUID token format - lost during redux 2014-04-16 22:42:49 +01:00
icehouse Remove references to `pki` and `pkiz` tokens in templates 2018-07-24 12:40:49 +02:00
kilo Remove references to `pki` and `pkiz` tokens in templates 2018-07-24 12:40:49 +02:00
liberty Enable Keystone v3 API 2016-03-09 11:05:33 +00:00
mitaka Remove references to `pki` and `pkiz` tokens in templates 2018-07-24 12:40:49 +02:00
newton Revert change of role for v3 service accounts 2017-01-12 07:59:06 +01:00
ocata Add initial support for Fernet tokens 2018-07-25 15:23:47 +02:00
parts add support for Federated IDentity (FID) and WebSSO 2018-05-11 21:09:47 +03:00
queens Update policy.json for Queens 2018-06-06 12:58:00 +02:00
rocky Update keystone.conf and policy.json for Rocky 2018-07-24 12:44:35 +02:00
keystone-token-flush Fix missing keystone user in cron job. 2016-05-05 22:00:51 -07:00
openstack_https_frontend.conf add support for Federated IDentity (FID) and WebSSO 2018-05-11 21:09:47 +03:00
wsgi-openstack-api.conf add support for Federated IDentity (FID) and WebSSO 2018-05-11 21:09:47 +03:00