openstack
/
puppet-keystone
Code Issues Proposed changes

OIDC: Make sure the dependent auth modules are loaded 

The following two modules are required to use auth_openidc.
 - authn_core
 - authz_user

This ensures these modules are loaded.

Closes-Bug: #2006924
Change-Id: I13c36b10d80e9518d1d4af44c0b8a69fcfe911d3
(cherry picked from commit 6c52159c7b)
(cherry picked from commit 6e56955c88)
This commit is contained in:
Takashi Kajinami 2023-02-10 19:07:24 +09:00
parent 6a0ca3f0f5
commit 26e0525c2a
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
manifests/federation/openidc.pp
View File

@ -164,6 +164,9 @@ class keystone::federation::openidc (
) { ) {
include apache include apache
include apache::mod::authn_core
include apache::mod::authz_user
include keystone::deps include keystone::deps
include keystone::params include keystone::params

2
spec/classes/keystone_federation_openidc_spec.rb
View File

@ -72,6 +72,8 @@ describe 'keystone::federation::openidc' do
end end
it { is_expected.to contain_package(platform_parameters[:openidc_package_name]) } it { is_expected.to contain_package(platform_parameters[:openidc_package_name]) }
it { is_expected.to contain_class('apache::mod::authn_core') }
it { is_expected.to contain_class('apache::mod::authz_user') }
context 'with only required parameters' do context 'with only required parameters' do
it 'should have basic params for openidc in Keystone configuration' do it 'should have basic params for openidc in Keystone configuration' do