e9bb58efcf
Keystone deprecated the project and role ldap drivers in Kilo [0] and removed it in Mitaka. We can simplify the puppet variables by staging these options for removal like we did with writeable user and group support: https://review.opendev.org/#/c/695079/ [0] https://docs.openstack.org/releasenotes/keystone/mitaka.html#deprecation-notes Co-Authored-By: Dave Wilde <dwilde@redhat.com> Change-Id: I8c4d6e695597548fff49a14b070bf4f96596d0a9
38 lines
1.3 KiB
YAML
38 lines
1.3 KiB
YAML
---
|
|
deprecations:
|
|
- |
|
|
The following puppet variables are deprecated and staged for removal.
|
|
Keystone removed LDAP support for projects and roles in Mitaka. Even if
|
|
these options are set in keystone's configuration file, they're silently
|
|
ignored. We will remove these options in a future release:
|
|
|
|
- ``project_tree_dn``
|
|
- ``project_filter``
|
|
- ``project_objectclass``
|
|
- ``project_id_attribute``
|
|
- ``project_member_attribute``
|
|
- ``project_name_attribute``
|
|
- ``project_desc_attribute``
|
|
- ``project_enabled_attribute``
|
|
- ``project_domain_id_attribute``
|
|
- ``project_attribute_ignore``
|
|
- ``project_allow_create``
|
|
- ``project_allow_update``
|
|
- ``project_allow_delete``
|
|
- ``project_enabled_emulation``
|
|
- ``project_enabled_emulation_dn``
|
|
- ``project_additional_attribute_mapping``
|
|
- ``role_tree_dn``
|
|
- ``role_filter``
|
|
- ``role_objectclass``
|
|
- ``role_id_attribute``
|
|
- ``role_name_attribute``
|
|
- ``role_member_attribute``
|
|
- ``role_attribute_ignore``
|
|
- ``role_allow_create``
|
|
- ``role_allow_update``
|
|
- ``role_allow_delete``
|
|
- ``role_additional_attribute_map``
|
|
- ``credential_driver``
|
|
- ``assignment_driver``
|