The memcache_servers has been deprecated a long time and should have
been removed in Newton and the memcache/servers option in keystone.conf
does not exist anymore.
This removes the memcache_servers parameter and removed the behavior
that automatically changed cache_backend and cache_enabled when that
option was specified.
Users must now explicitly set cache_backend, cache_enabled and
cache_memcache_servers to enable the presence of caching.
Change-Id: I3f5a4acd76b312ada2ae65dd10e4a426cb22c131
Keystone no longer uses it's paste ini file or
uses the paste deploy parts so we deprecate all
that now. [1]
Unfortunately this should probably have been done
in Rocky but got missed, in Stein keystone will
effectively remove the paste ini file. [1]
[1] https://docs.openstack.org/releasenotes/keystone/rocky.html
Change-Id: Ifefea626f754d247b376745fbb2791e725ebafbc
Closes-Bug: 1794045
* It overrrides the tripleo-standalone featureset override
to run Identity specific tempest tests and install
keystone tempest plugin.
* It will help to detect the puppet-keystone tempest specific
issues early in gates.
Depends-On: https://review.openstack.org/#/c/609666
Change-Id: I896a20abc09579286cea56299bfaa7a9c158ee59
Adds the manage_backend_package parameter that is sent
to the oslo::cache class that determines if we should
install the backend python library for caching.
The default value is not changed and defaults to true
same as the oslo::cache class does.
Change-Id: I8a99eee7622e25847c2d729fa97d0500fe27d8f4
Adds the password_hash_algorithm and
password_hash_rounds configuration options.
These can be used to configure the password
hash algorithm and the amount of rounds on the
hash that keystone should do.
Change-Id: I5160e59522b5cf96eb80f83ab7f2ca593b64fe54
The commands used by constraints need at least tox 2.0. Update to
reflect reality, which should help with local running of constraints
targets.
Change-Id: I5166432f683f9b8555ee5dad8ac38f7ecdd2d364
Developers run all sorts of different tools within Git repositories,
any of which can leave their own special trashfiles all over the
place. We can't every hope to catalog them all, so better to
recommend developers simply configure a global core.excludesfile to
filter the irrelevant files which tend to get created by their
personal choice of tools. Add a comment block explaining this, for
clarity, and remove the one current editor-specific entry present.
We can, and should of course, continue to list files created by the
tools recommended by our workflow (test frameworks, documentation
and packaging builds, et cetera).
This change is a port of Ib58a57267b064e4142686de6c37a70dbff04b9a7
from the openstack-dev/cookiecutter repository.
Change-Id: I8f6f7375b1adf7b6aeb056db35caff21d7558d01
This is a mechanically generated patch to switch the documentation
jobs to use the new PTI versions of the jobs as part of the
python3-first goal.
See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html
Change-Id: I1c218da39bd623d8ba97332ebb88351d644e29cc
Story: #2002586
Task: #24325
This is a mechanically generated patch to complete step 1 of moving
the zuul job settings out of project-config and into each project
repository.
Because there will be a separate patch on each branch, the branch
specifiers for branch-specific jobs have been removed.
Because this patch is generated by a script, there may be some
cosmetic changes to the layout of the YAML file(s) as the contents are
normalized.
See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html
Change-Id: Idc79c459d6b214466b564ea0e076681e81e4d847
Story: #2002586
Task: #24325
The PE requirement in metadata.json is not
supported anymore and puppet-lint will throw:
The 'pe' requirement is no longer supported by the Forge.
Change-Id: I3019b2836e9f9bc1183f04a358006e6aa66e1bd3
Add new parameter "amqp_durable_queues", to indicate whether to use
durable queues in AMQP
Change-Id: Id7d16fa1958404da4d50b8609bd948e50fff0f77
Closes-Bug: #1786029
Now that the v2.0 API has been removed, we don't have a reason to
include deployment instructions for two separate applications on
different ports.
Change-Id: Ifb06f5f66db45312c87b07aa77195c77d9a2668c
Service_token_roles_required missing in the authtoken which
allows backwards compatibility to ensure that the service tokens are
compared against a list of possible roles for validity.
Change-Id: I67a358e921bd2a85caf242464327033562c46adc
Implements: bug service_token_roles_required missing
Closes-Bug: 1779389
Keystone roles are not case sensitive, so while handling
roles we need to ignore case.
Change-Id: I0a1a0779b9609185a9208dc3204d23a5fcce255a
Closes-Bug: #1777451
Ensure the Keystone package is installed before the apache service stuff.
Depends-On: I723bb97310dfb2a737ddcdb79caa2a02ef4e211b
Change-Id: I255a3cd973d310e5c401c2eb3e9f1013f710b097