Commit Graph

351 Commits

Author SHA1 Message Date
OpenStack Release Bot 4063447941 Update master for stable/2024.1
Add file to the reno documentation build to show release notes for
stable/2024.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.1.

Sem-Ver: feature
Change-Id: I210280e91ebc719ed735cd55852b298de62c3a27
2024-04-18 10:46:21 +00:00
Sam Morrison ac752a4ee1 Support max_password_length config option
Change-Id: Ic00419f12a922d866b490e351d0eb87c96380315
2024-04-17 09:03:25 +00:00
Zuul 39f908f43e Merge "reno: Update master for unmaintained/xena" 2024-04-12 13:05:28 +00:00
OpenStack Release Bot c492a828f4 reno: Update master for unmaintained/xena
Update the xena release notes configuration to build from
unmaintained/xena.

Change-Id: If3d868cb280075085a753527c61fedff95d75476
2024-04-12 12:32:22 +00:00
OpenStack Release Bot 32e247057a reno: Update master for unmaintained/wallaby
Update the wallaby release notes configuration to build from
unmaintained/wallaby.

Change-Id: I8f88c1df8422b6b271227e146e3aba97af566cce
2024-04-12 12:24:14 +00:00
Zuul cc26f22ff1 Merge "Deprecate support for [DEFAULT] catalog_template_file" 2024-04-11 17:20:54 +00:00
Zuul aacacdc154 Merge "Allow omitting admin/internal endpoint" 2024-03-18 16:19:17 +00:00
Takashi Kajinami 274ecb90d4 Allow omitting admin/internal endpoint
Keystone v3 API does not require that all the three endpoint types are
given and allows using only specific endpoint types(eg. only public, or
public and internal). This allows users to omit specific endpoint types
by setting endpoint url options to ''.

Change-Id: Ifef2070ad25cadf961466ca9f384965d03c08f81
2024-03-18 16:18:14 +09:00
Zuul 85ea68eecc Merge "Expose rabbit_transient_quorum_queue" 2024-03-15 04:09:17 +00:00
Takashi Kajinami 29a32c74a6 Deprecate support for [DEFAULT] catalog_template_file
The templated catalog driver has been deprecated in keystone, so we
should deprecate support for the driver options.

Change-Id: I5f3482397883e00d447eb08bed4c57821041826c
2024-03-15 01:48:41 +09:00
Takashi Kajinami 5e79239531 Deprecate amqp messaging driver support
... because the driver has been deprecated in oslo.messaging.

Change-Id: I5c55a06b39118156db845c4ee6d415cb4d695ea0
2024-03-14 09:35:53 +09:00
Takashi Kajinami da2bc869a3 Expose rabbit_transient_quorum_queue
Depends-on: https://review.opendev.org/911021
Change-Id: Ibe989d7a9bb10d6dff72b001c0e689bb029960b5
2024-03-14 09:34:06 +09:00
Zuul 50b5260cc6 Merge "openidc: Support more redis cache options" 2024-03-08 15:03:28 +00:00
Takashi Kajinami 3e8788c94e cache: Support new redis options
The oslo.cache 3.7.0 release introduced some options for redis backend
and redis sentinel backend. This introduces for these parameters.

Depneds-on: https://review.opendev.org/910629
Change-Id: Ie5e6e7b8dfa0753ccca1094f06a745fdb0acb5bc
2024-03-07 22:53:04 +09:00
Takashi Kajinami 6469c223f8 openidc: Support more redis cache options
Change-Id: I70cc5c2d0ecf10b4aa4e07e4af91609d1ad7cee3
2024-03-05 17:55:46 +09:00
Takashi Kajinami 76422b5a30 cache: Support options for SASL mechanism in memcached
Depends-on: https://review.opendev.org/910122
Change-Id: Icdee612d5680ff4f0c1f04d236809a423e2817c2
2024-02-29 23:56:48 +09:00
Takashi Kajinami 5886b4fe23 healthcheck: Expose ignore_proxied_requests parameter
Depends-on: https://review.opendev.org/909807
Change-Id: I36065f01f7e945596b5d23cd8078381c0dccedf3
2024-02-26 01:21:58 +09:00
OpenStack Release Bot cdef36e88f reno: Update master for unmaintained/yoga
Update the yoga release notes configuration to build from
unmaintained/yoga.

Change-Id: Ie7f99b4fb5a05d19a58adf11bda29a50bd45f008
2024-02-21 16:46:21 +00:00
Zuul 68ae4c5e3d Merge "healthcheck: Expose allowed_source_ranges" 2024-01-18 16:48:30 +00:00
Takashi Kajinami b370f83843 healthcheck: Expose allowed_source_ranges
... which was added to puppet-oslo recently.

Depends-on: https://review.opendev.org/905557
Change-Id: I7a239c556c9e5615ed7668ae2d5ad6c0bf73b624
2024-01-17 15:23:54 +09:00
Takashi Kajinami 30e759b35e Support [cache] memcache_pool_flush_on_reconnect
Depends-on: https://review.opendev.org/902861
Change-Id: Ib488afff91a994791b911d7c2cf79cad9aa99d85
2023-12-14 17:54:57 +09:00
Takashi Kajinami 01ffd0e4c3 Add resource to manage implied roles
Keystone supports implied roles, and some of the default roles imply
different roles. (eg. admin implies manager)

This introduces a resource type to manage implied roles, and also
ensures the implied roles are created in bootstrap.

Depends-on: https://review.opendev.org/900138
Change-Id: I36ef3ddfcb2f60bdca8674ea8055b6f57a149512
2023-11-06 14:38:08 +09:00
OpenStack Release Bot 58f5d04f08 Update master for stable/2023.2
Add file to the reno documentation build to show release notes for
stable/2023.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.2.

Sem-Ver: feature
Change-Id: Icdf9527b60d35e72602fa982a3ed236ba7f1bea0
2023-10-16 15:17:14 +00:00
Takashi Kajinami 7a84c30fd1 RabbitMQ: Add support for quorum queue options
Depends-on: https://review.opendev.org/894866
Change-Id: Ia52ed95999a66efdf3eaa0f645d93595392426ac
2023-09-15 11:25:30 +09:00
Takashi Kajinami 7e8c3de8ed service_identity: Fix incomplete usage of domain parameters
This fixes the ignored project_domain parameter, and also ensures
the user_domain parameter is used when creating a role assignment.

Closes-Bug: #2029035
Change-Id: I2a2d9c648fff1b940952700b492af6a09974ee5c
2023-07-31 00:43:52 +09:00
Takashi Kajinami 42add12c9e Remove support for creating endpoints without service type
Creating endpoint without service type was deprecated multiple cycles
ago. This removes the logic to support that old usage.

Change-Id: Ifaebb3658254bb91130807153624480df78443aa
2023-06-26 09:50:16 +09:00
Takashi Kajinami b50bfe61d0 Remove deprecated catalog_type parameter
... because it was deprecated a few cycles ago[1].

This also removes the hard-coded default of [catalog] driver because
the value currently hard-coded is same as the service default.

[1] cd9f931c45

Change-Id: Ifeadb331d118e2c6e61048b6ace6d6b3d8afcf3e
2023-06-20 15:54:32 +09:00
Takashi Kajinami f271472b48 Deprecate client class
The python-keystoneclient package removed CLI long ago so installing
the package is now useless. It provides only library implementations
and should be installed by package dependencies.

Change-Id: I46b09092847eeb821f97172e1a912ad8a1b8a2e3
2023-05-30 01:02:18 +00:00
Takashi Kajinami 43611b77b7 Remove support for Puppet 6
... because Puppet 6 reached its EOL in February 2023.

Change-Id: I517630dc0e1515942d58eff3bd7464a07fb3656c
2023-05-22 12:23:59 +09:00
Takashi Kajinami 3e7fe620db Remove deprecated package_ensure parameters
These were deprecated during the previous cycle and have had no effect
since then[1].

[1] fe95db4cb0

Change-Id: I75e5d92a6eebb74f0e0c728ff3298d169725b84c
2023-05-15 16:25:30 +09:00
OpenStack Release Bot c3e8e5a2f5 Update master for stable/2023.1
Add file to the reno documentation build to show release notes for
stable/2023.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.1.

Sem-Ver: feature
Change-Id: Iaabd2a7bde79bc07d15929b9853eba375f13c498
2023-04-05 15:31:16 +00:00
Takashi Kajinami eab0404ff3 Expose executor_thread_pool_size
This option has been supported by puppet-oslo but has not been
configurable.

Change-Id: Iadb2308d8a7f6c32e01395ca17861b172217f3d6
2023-03-13 11:47:42 +09:00
Takashi Kajinami fe95db4cb0 Use puppetlabs-apache to load auth modules.
... so that we don't have to maintain the required logics to enable
the module in our modules.

Related-Bug: #2006924
Change-Id: Ia46deea226a58638e74eee0c0172f0c3c5fa62e7
2023-02-13 16:55:39 +09:00
Zuul 7b51c9178a Merge "Expose policy_default_rule" 2023-01-24 18:29:01 +00:00
Takashi Kajinami caa8c1a5f6 Expose policy_default_rule
The option has been managed by the underlying puppet-oslo module but
has not been configurable. This introduces the parameter to customize
the option.

Change-Id: Ia91f1558f6f5b77f3fcd77149dc61cafd621308e
2023-01-23 14:27:22 +09:00
Takashi Kajinami 38982763a8 apache: Remove deprecated api_port parameter
The parameter was deprecated in favor of the port parameter during
the previous cycle.

Change-Id: Ib8073213164e0af0a901771a484e066f093608dd
2023-01-23 10:19:34 +09:00
Takashi Kajinami 649dcabb71 Switch to Ubuntu Jammy (22.04)
... because Focal no longer supports the recent releases such as Zed.

Change-Id: I05743e760ee4a12fbbe8ee56f3952904ea2fa157
2023-01-15 22:23:11 +09:00
Zuul c66ba58ecd Merge "Remove deprecated keystone::service" 2022-11-30 07:20:27 +00:00
Takashi Kajinami 76505f1c12 Remove deprecated keystone::service
This defined resource type was deprecated during the past cycle[1] and
can be removed.

[1] 05c5605e98

Change-Id: Ib4c7565462e32be2d4dab4b0c538410ad98aefaf
2022-11-25 13:10:49 +09:00
Takashi Kajinami aa394b1775 Remove keystone_puppet_config resource type
This is no longer used since we replaced the configuration file by
clouds.yaml. The resource was already deprecated by [1] in the past
cycle so can be removed.

[1] c140a44aeb

Change-Id: I631c0a14cc0ee5b56e7864980da9a651d6bf7d9b
2022-11-25 12:05:58 +09:00
Takashi Kajinami b99810d6f9 Remove deprecated parameters for [ssl] options
These parameters were deprecated during the previous cycle[1].

[1] 0954fea1d6

Change-Id: I67755c4181868e137928f9444fae4be09f511c36
2022-11-18 10:43:28 +09:00
Takashi Kajinami e19a4c3151 Remove deprecated keystone::log_* parameters
These parmaeters have had no effect for a while and were deprecated
formally during the previous cycle[1].

[1] 1f13f9ed6b

Change-Id: Iff34bd86a92d4f92ea46115889f83e37b68aba31
2022-11-15 11:39:41 +09:00
OpenStack Release Bot 015754446c Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.

Sem-Ver: feature
Change-Id: I0de59b3fc8cc10ebe335e30af059320fb4fe0a4e
2022-10-20 11:06:08 +00:00
Zuul 31c42f0dd6 Merge "Allow customizing --date option for trust_flush cron job" 2022-09-09 11:11:43 +00:00
Takashi Kajinami 91483e50e8 Make WSGI process display-name configurable
Change-Id: I3bfbd0283d1e9005719085d86cd00729c9002c43
2022-08-28 00:35:52 +09:00
Takashi Kajinami 16309d9d06 Fix inconsistent port parameter name
The keystone::wsgi::apache class takes the api_port parameter but
the other modules uses the port parameter instead.

This change fixes the inconsistent interface.

Change-Id: Ib6a643eedbb2ecd5050c10cc5ae98ffaabb441f5
2022-08-27 22:59:25 +09:00
Takashi Kajinami 7465a117bd Allow customizing --date option for trust_flush cron job
This change introduces the new age parameter so that --date options is
enabled when running the trust_flush cron job.

Change-Id: I7d4a5a08c73683fff8fd270e5bc991531f8dda48
2022-08-27 00:31:23 +09:00
Zuul 6fd26895a3 Merge "Expose request_headers option of apache::vhost" 2022-07-30 15:56:05 +00:00
Takashi Kajinami 4351201d51 Expose request_headers option of apache::vhost
... in addition to headers option which is currently supported.

Change-Id: I595dbf046aebabb3eea93b9ebcefc07bcff953f4
2022-06-30 10:42:50 +09:00
Takashi Kajinami c76bfbe41f Ensure key contents are hidden
By default, the file resource shows differences when the file changes.
This change disables that for the key files so that key contents are
not displayed in output.

Closes-Bug: #1979672
Change-Id: Ic0398cfbb14782ce16710a838e5428be50f2a0b3
2022-06-24 01:22:43 +09:00