5 Commits

Author SHA1 Message Date
Sebastien Badia
c453d7f313 Add Puppet 4.x lint checks
The puppet-lint requirement is now changed, so we can use puppet-lint
plugins. Most of these plugins are for 4.x compat, but some just catch
common errors.

Change-Id: I988929331e3f0cbef5e10ec9116cdba9ded16967
2015-03-16 09:16:00 +01:00
Mathieu Gagné
29b6875331 Remove deprecated parameters
* keystone::endpoint::public_port (deprecated since 4.0.0)
* keystone::endpoint::public_protocol (deprecated since 4.0.0)
* keystone::endpoint::public_address (deprecated since 4.0.0)
* keystone::endpoint::internal_address (deprecated since 4.0.0)
* keystone::endpoint::internal_port (deprecated since 4.0.0)
* keystone::endpoint::admin_address (deprecated since 4.0.0)
* keystone::endpoint::admin_port (deprecated since 4.0.0)
* keystone::sql_connection (deprecated since 4.1.0)
* keystone::idle_timeout (deprecated since 4.1.0)
* keystone::bind_host (deprecated since 4.0.0)
* keystone::token_format (deprecated since 3.0.0)

Change-Id: I8b8ed42d4d81aa8091f2fae38f05cb74428051a9
2014-11-25 14:18:10 -05:00
François Charlier
2f3627e5e2 Allow binding apache to a specific IP address
Add a 'bind_host' parameter to keystone::wsgi::apache to allow binding
to a specific IP address.

Fixes Bug #1273697

Change-Id: I4e94336c15132900dbe42052e46d0c7f2e36f91f
2014-01-28 17:14:43 +01:00
François Charlier
9cc9e347d5 Updated endpoints to support paths and ssl
- Add {public,admin,internal}_url parameters to override other
  {public,admin,internal}_ parameters.
- Also change some 'real_' prefix into '_real' suffix to respect the
coding guide.
- Fixed parsing the ssl/enable value in the provider.
- Update examples

Change-Id: I78d2695eb5cb1287538afe154668da9fe23e62a3
2013-12-09 14:48:17 +01:00
François Charlier
e35a6dc6ee Enable serving keystone from apache mod_wsgi
Serving keystone from a wsgi container is recommended for production
setups. SSL is enabled by default.

See the following URLs for explanations:
    http://adam.younglogic.com/2012/03/keystone-should-move-to-apache-httpd/
    https://etherpad.openstack.org/havana-keystone-performance

Documentation in manifests/wsgi/apache.pp

Apache can be configured as a drop in replacement for keystone (using
    ports 5000 & 35357) or with paths using the standard SSL port. See
examples in examples/apache_*.pp

- Also change some 'real_' prefix into '_real' suffix to respect the
coding guide.
- Added the '--insecure' option to keystone client in the provider to
allow using self-signed certificates.
- Fixed parsing the ssl/enable value in the provider.

There is no integer verification done in the manifests
and to get around a bug in rspec, which has been fixed
in https://github.com/rodjek/rspec-puppet/pull/107,
certain parameters that should be integer are treated as
strings

files/httpd/keystone.py updated with lastest from keystone git repo

Change-Id: Ide8c090d105c1ea75a14939f5e8ddb7d24ca3f1c
2013-11-21 13:35:31 -05:00