## 8.0.0 and beyond From 8.0.0 release and beyond, release notes are published on [docs.openstack.org](http://docs.openstack.org/releasenotes/puppet-keystone/). ## 8.0.0 and beyond From 8.0.0 release and beyond, release notes are published on [docs.openstack.org](http://docs.openstack.org/releasenotes/puppet-keystone/). ##2015-11-24 - 7.0.0 ###Summary This is a backwards-incompatible major release for OpenStack Liberty. ####Backwards-incompatible changes - move openstackclient install to keystone::client - add composite namevar for tenant, user, user_role (see examples/*.pp and documentation) - remove deprecated mysql_module - deletes tenant parameter from keystone_user (it was deprecated) ####Features - add support for RabbitMQ connection heartbeat - add tag to package and service resources - validate service_identity resources - add an ability to manage use_stderr parameter - clarify the origin of provider warning messages - reflect provider change in puppet-openstacklib - adding wsgi log formatting - if running eventlet, send deprecation warning - authentication URLs and endpoint clarity re-factor - add additional memcache configuration options - add custom fragment to vhost - keystone_endpoint provider for Keystone v3 api - db: use postgresql lib class for psycopg package - replace indirection calls which should help speed up performance when you have many users, tenants, and role assignments - put all the logging related parameters to the logging class - K2K federation support - domain checking to deprecate no domain name usage: (all Keystone domain scoped resources should have a domain specified e.g. keystone_user { 'name': domain => 'some_domain' } ) - allow customization of db sync command line - introduce keystone::db class - endpoints can be APIs version-less - keystone_endpoint match service by name/type. ####Bugfixes - fix module install reference - rely on autorequire for config resource ordering - use Ubuntu provided wsgi.py for keystone.wsgi - fix default domain - fix *_workers config settings - wsgi: make sure keystone service is stopped before starting httpd ####Maintenance - acceptance: bump to Liberty release - initial msync run for all Puppet OpenStack modules - acceptance/eventlet: make sure apache is stopped - try to use zuul-cloner to prepare fixtures ##2015-10-15 - 6.1.0 ###Summary This is a features and bugfixes release in the Kilo series. ####Features - Allow to change archive destination - admin_user_domain and admin_project_domain can now be equal ####Bugfixes - Allow to use the wrong resource name for Keystone_user and Keystone_tenant - Allow to use the wrong value for default_domain_id - Fixes get_section for future use - Domain name from id lookups return empty - Fixes get_section for future use - WSGI: use real service name in restart_keystone Exec - v3: make sure default domain is created before any other resource - Use an Anchor when service is managed ####Maintenance - Authentication URLs and endpoint clarity re-factor - Purely cosmetic change on keystone provider - Fix rspec 3.x syntax - acceptance: run keystone in a WSGI server - acceptance: checkout stable/kilo puppet modules ##2015-07-08 - 6.0.0 ###Summary This is a backwards-incompatible major release for OpenStack Kilo. ####Backwards-incompatible changes - Remove deprecated parameters - MySQL: change default MySQL collate to utf8_general_ci - Move openstackclient to openstacklib ####Features - Puppet 4.x support - Support Keystone v3 API - Allow disabling or delaying the token_flush cron - Migrate postgresql backend to use openstacklib::db::postgresql - Add max_token_size optional parameter - Add admin_workers and public_workers configuration options - Add support for LDAP connection pools - Add a package ensure for openstackclient - Enable setting the revoke/token driver - Add manage_service feature - Makes distinct use of url vs auth_url - Create a sync_db boolean for Keystone - LDAP: add support to configure credential driver - Support notification_format - Allow custom file source for wsgi scripts - Decouple sync_db from enabled - Add support for Fernet Tokens ####Bugfixes - Crontab: ensure the script is run with bash shell - Copy latest keystone.py from Keystone upstream - Fix deprecated LDAP config options - Fix service keystone conflict when running in apache ####Maintenance - Acceptance tests with Beaker - Fix spec tests for RSpec 3.x and Puppet 4.x - Restructures authentication for resource providers ##2015-06-17 - 5.1.0 ###Summary This is a features and bugfixes release in the Juno series. ####Features - Allow disabling or delaying the token_flush cron - Use openstackclient for keystone_* providers - Switch to TLSv1 - Handle missing project/tenant when using ldap backend - Add support for LDAP connection pools - Support the ldap user_enabled_invert parameter - Tag packages with 'openstack' - Add ::keystone::policy class for policy management - New option replace_password for keystone_user - Set WSGI process display-name - Add native types for keystone paste configuration ####Bugfixes - crontab: ensure the script is run with shell - service_identity: add user/role ordering - Fix password check for SSL endpoints - Add require json for to_json dependency - Sync keystone.py with upstream to function with Juno - Allow Keystone to be queried when using IPv6 ::0 ####Maintenance * spec: pin rspec-puppet to 1.0.1 * Pin puppetlabs-concat to 1.2.1 in fixtures * Update .gitreview file for project rename ##2014-11-24 - 5.0.0 ###Summary This is a backwards-incompatible major release for OpenStack Juno. ####Backwards-incompatible changes - Update token driver, logging, and ldap config parameters for Juno - Make UUID the default token provider - Migrate the keystone::db::mysql class to use openstacklib::db::mysql, adding dependency on openstacklib ####Features - Change admin_roles parameter to accept an array in order to configure multiple admin roles - Add new parameters to keystone class to configure pki signing - Add parameters to control whether to configure users - Deprecate the mysql_module parameter - Enable setting cert and key paths for PKI token signing - Add parameters for SSL communication between keystone and rabbitmq - Add parameter ignore_default_tenant to keystone::role::admin - Add parameter service_provider to keystone class - Add parameters for service validation to keystone class ####Bugfixes - Install python-ldappool package for ldap - Change keystone class to inherit from keystone::params - Change pki_setup to run regardless of token provider - Stop managing _member_ role since it is created automatically - Stop overriding token_flush log file - Change the usage of admin_endpoint to not include the API version - Allow keystone_user_role to accept email as username - Add ability to set up keystone using Apache mod_wsgi - Make keystone_user_role idempotent - Install python-memcache when using token driver memcache ##2014-10-16 - 4.2.0 ###Summary This is a feature and bugfix release in the Icehouse series. ####Features - Add class for extended logging options - Add parameters to set tenant descriptions ####Bugfixes - Fix rabbit password leaking - Fix keystone user authorization error handling ##2014-06-19 - 4.1.0 ###Summary This is a feature and bugfix release in the Icehouse series. ####Features - Add token flushing with cron ####Bugfixes - Update database api for consistency with other projects - Fix admin_token with secret parameter - Fix deprecated catalog driver ##2014-05-05 - 4.0.0 ###Summary This is a major release for OpenStack Icehouse but contains no API-breaking changes. ####Features * Add template_file parameter to specify catalog * Add keystone::config to handle additional custom options * Add notification parameters * Add support for puppetlabs-mysql 2.2 and greater ####Bugfixes - Fix deprecated sql section header in keystone.conf - Fix deprecated bind_host parameter - Fix example for native type keystone_service - Fix LDAP module bugs - Fix variable for host_access dependency - Reduce default token duration to one hour ##2014-04-15 - 3.2.0 ###Summary This is a feature and bugfix release in the Havana series. ####Features - Add ability to configure any catalog driver ####Bugfixes - Ensure log_file is absent when using syslog ##2014-03-28 - 3.1.1 ###Summary This is a bugfix release in the Havana series. ####Bugfixes - Fix inconsistent variable for mysql allowed hosts ##2014-03-26 - 3.1.0 ###Summary This is a feature and bugfix release in the Havana series. ####Features - Add ability to disable pki_setup - Add log_dir param, with option to disable - Add support to enable SSL ####Bugfixes - Load tenant un-lazily if needed - Update endpoint argument - Remove setting of Keystone endpoint by default - Relax regex when keystone refuses connections ##2014-01-16 - 3.0.0 ###Summary This is a backwards-incompatible major release for OpenStack Havana. ####Backwards-incompatible changes - Move db_sync to its own class - Remove creation of Member role - Switch from signing/format to token/provider ####Features - Create memcache_servers option to allow for multiple cache servers - Enable serving Keystone from Apache mod_wsgi - Improve performance of Keystone providers - Update endpoints to support paths and ssl - Add support for token expiration parameter ####Bugfixes - Fix duplicated keystone endpoints - Refactor keystone_endpoint to use prefetch and flush paradigm ##2013-10-07 - 2.2.0 ###Summary This is a feature and bugfix release in the Grizzly series. ####Features - Optimized tenant and user queries - Added syslog support - Added support for token driver backend ####Bugfixes - Various bug and lint fixes ##2013-08-06 - 2.1.0 ###Summary This is a bugfix release in the Grizzly series. ####Bugfixes - Fix allowed_hosts contitional statement - Select keystone endpoint based on SSL setting - Improve tenant_hash usage in keystone_tenant - Various cleanup and bug fixes ####Maintenance - Pin dependencies ##2013-06-18 - 2.0.0 ###Summary Initial release on StackForge. ####Backwards-incompatible changes ####Features - keystone_user can be used to change passwords - service tenant name now configurable - keystone_user is now idempotent ####Bugfixes - Various cleanups and bug fixes