openstack
/
puppet-keystone
Code Issues Proposed changes

OIDC: Make sure the dependent auth modules are loaded 

The following two modules are required to use auth_openidc.
 - authn_core
 - authz_user

This ensures these modules are loaded.

Closes-Bug: #2006924
Change-Id: I13c36b10d80e9518d1d4af44c0b8a69fcfe911d3
(cherry picked from commit 6c52159c7b)
(cherry picked from commit 6e56955c88)
This commit is contained in:
Takashi Kajinami 2023-02-10 19:07:24 +09:00
parent 6a0ca3f0f5
commit 26e0525c2a
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
manifests/federation/openidc.pp
View File

@ -164,6 +164,9 @@ class keystone::federation::openidc (
) {
include apache
include apache::mod::authn_core
include apache::mod::authz_user
include keystone::deps
include keystone::params

2
spec/classes/keystone_federation_openidc_spec.rb
View File

@ -72,6 +72,8 @@ describe 'keystone::federation::openidc' do
end
it { is_expected.to contain_package(platform_parameters[:openidc_package_name]) }
it { is_expected.to contain_class('apache::mod::authn_core') }
it { is_expected.to contain_class('apache::mod::authz_user') }
context 'with only required parameters' do
it 'should have basic params for openidc in Keystone configuration' do