- Cookstyle fixes
- Refactor Berksfile to use groups so we can exclude integration testing
cookbooks
- Update documentation
- Cleanup line wraps
- Enable sensitive resources for the
template[/etc/designate/designate.conf], to resources improve
security.
- Update delivery configuration to exclude integration cookbooks
- Fix ChefSpec output.
- Add missing ChefSpec tests
- Switch package installations to send packages as arrays instead of individual
package resources. This generally speeds up chef runs.
- Cleanup array syntax using %w() instead of []
Depends-On: https://review.opendev.org/701027
Depends-On: https://review.opendev.org/706101
Depends-On: https://review.opendev.org/706151
Depends-On: https://review.opendev.org/708059
Change-Id: I354db77f2d9486805713ac8688fcc552489c0a77
fog-openstack-1.x already appends "auth/tokens" so we no longer need to
do that.
Change-Id: I5d6f13d420b761ad14cda546119fda7ee4e9f8a3
Signed-off-by: Lance Albertson <lance@osuosl.org>
Per the Keystone Install Guide[1] the admin endpoint is superseded in
favor of a single public endpoint. Although internal goes through the
same instance, we should differentiate for project traffic and OpenStack
service traffic.
[1] https://docs.openstack.org/keystone/queens/install/keystone-install-ubuntu.html#install-and-configure-components
Depends-On: Id74966d9f1279f725bc41c08e434230a7845bbc1
Change-Id: I1adb3066c83aaffe8b22f2f2553f634483371974
Implements: blueprint simplify-identity-endpoint
This patch removes the openstack_user resource with :grant_domain
action. A user is always created within a specific domain; such a
mmembership cannot be tacked on later. This resource gave the user the
role intended for their project for the domain (i.e., for the Default
domain instead of for the service project).
We add the domain_name attribute that creates the designate user in
the desired domain. Note that this change needs a sufficiently recent
openstackclient cookbook -- otherwise the domain_name attribute is
ignored (which does not matter as long as the designate user is to be
created in the Default domain).