charm-keystone:stable/18.02

Last commit made on 2019-04-19
Get this branch:
git clone -b stable/18.02 https://git.launchpad.net/charm-keystone

Branch merges

Branch information

Name:
stable/18.02
Repository:
lp:charm-keystone

Recent commits

6c0d495... by OpenDev Sysadmins <email address hidden>

OpenDev Migration Patch

This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

9053e73... by David Ames

Read in ca certificate as binary for PY3

The comparison of bytes vs string of the CA certificate produces a
false negative. This leads to rewriting certificates and affecting
connectivity to services. The writing of the file was changed to bytes
in https://github.com/juju/charm-helpers/pull/58/.

Read in the certificate as bytes as well for a bytes vs bytes
comparison.

Change-Id: I64eb2b90776bb1e37de009208f016f176bd6a82a
Closes-Bug: #1762431

c5b98f1... by David Ames

Run identity client relations when db is complete

When keystone is deployed with multiple units but without hacluster one
off scenarios occur where one non-leader unit will fail to update its
client relations.

This change runs all identity client relations when the database
relation is complete thus guaranteeing all keystone units update there
identity relation data with clients.

Small timing fix to amulet tests.

Closes-Bug: #1761562
Change-Id: I338e500dbc155b75c75b9261a9b5b471bd73088a
(cherry picked from commit a240c520a520ca92f338efa3717b2a09f4a7281d)

463fe64... by Alex Kavanagh

Change permissions on SSL keys to 640

This tightens up the security on the SSL keys stored in
/etc/apache2/ssl/<service> to be no longer world readable.

This is a backport from master:
cherry-pick: 6470d6dd2c261a74c128004ad1a75e6f134b6691

Change-Id: I5c6349d421f9ee0627dc95797291a466dee7fe37
Related-Bug: #1761305

49dffb7... by Ryan Beisner

Update tox.ini to stop using unverified package

As of pip 10.0, --allow-unverified is not permitted.

Use of the flag in this repo was previously used to force
installation of python-apt to accommodate certain unit tests.

The unverified package, python-apt, is no longer necessary
for test execution.

Related-Bug: #1760720

Change-Id: Ieca3f4978e947ce52d645ddab0f4523c90d03c75
(cherry picked from commit 0c6bfe96e9f127e62b0e9e6ffea6cbbd38b37b89)

3a4faf4... by Corey Bryant

Update SSL/https documentation

The README documentation implies that use-https and
https-service-endpoints are required when enabling SSL/https
with your own CA, SSL cert, and key. Update the README and
config.yaml to explain that config options use-https and
https-service-endpoints should not be set when using ssl_*
config options.

Change-Id: I2e0140f909ef2c57182895f37cf191b6bc80157b
Closes-Bug: #1754682
(cherry picked from commit 3384ddcb87a2c7621719c8844cf5a24a25936d48)

b81582a... by David Ames

Updates for stable branch 18.02 creation

Set default branch for git review/gerrit.

Switch amulet tests to stable.

Switch to using stable charm-helpers branch.

Change-Id: I26a8a8114ede93aa9d1931d6c69140551c6e430c

bd29991... by James Page

Provide service domain id for v3 deployments

The glance swift store configuration requires use of the domain
id for the service domain; update data set for identity-service
relation to include service_domain_id.

Change-Id: Ie6e2733f34de10a4d34b18dbf1fd9ba623af0e18
Closes-Bug: 1752027

984d341... by Zuul <email address hidden>

Merge "Create Keystone V3 Deployment Class"

5f16698... by Ryan Beisner

Sync charm-helpers

Change-Id: I28e9aa3687e24cacb70a2a54f1306f6be86f4c74