puppet-barbican 20.2.0 release

meta:version: 20.2.0
meta:diff-start: -
meta:series: yoga
meta:release-type: release
meta:pypi: no
meta:first: no
meta:release:Author: Takashi Kajinami <tkajinam@redhat.com>
meta:release:Commit: Takashi Kajinami <tkajinam@redhat.com>
meta:release:Change-Id: I1fe667a3a1af784b33565fcd4a4e1d19092861f0
meta:release:Code-Review+2: Thierry Carrez <thierry@openstack.org>
meta:release:Code-Review+2: Elod Illes <elod.illes@est.tech>
meta:release:Workflow+1: Elod Illes <elod.illes@est.tech>

Update the version metadata for Yoga milestone M3

Change-Id: Id5078f641e6f9d6504dfec7caaf9448f50e7d333

... because these operating systems are now verified by unit tests and
integration tests.

Change-Id: I09fb4f7de3a301a7a46a11755f91d8d860d531b8

and replace hard-codes by definition in params.pp .

Change-Id: I778a1b705acfc224ffabd36384b9d6a2c6727ace

The puppt-postgresql module does not support CentOS 9 yet and requires
some version parameters to be run on CentOS 9. This change disables
unit tests requiring that module, until the module supports CentOS 9.

Change-Id: Icff8be15e0180d620488a80504208c12b8be6aac

... because it was deprecated during Ussuri cycle.

Change-Id: I8b6ec1d9d4b4302a49c169966ad6c949f4a462f9

Use the whole resource type instead of its individual resources, to
rely on interface instead of implementation of the dependent module.

Change-Id: I21e05882b2685d8d312f4d6cc516ebcaf2ba6677

... so that any change in puppet-oslo would not directly break unit
tests.

Change-Id: I2582c9d0df640c3fd7f7f7d6ecae981b0b9591a5

It turned out defining dependency for openstacklib::wsgi::apache
doesn't properly enforce resource order and the default vhost file
is not purged properly.
This change adds the more explicit dependency to enforce the order
properly.

Change-Id: I790cbfec3244c18cd48436a42887e9c6ce134701

Usage of service_name='barbican-api' in RHEL/CentOS was deprecated
during Victoria cycle[1]. This change removes that deprecated usage and
enforces the actual service name which is 'openstack-barbican-api', as
is done in the other modules.

[1] 67e4879c

Change-Id: I696b3e3b1daa346b6667b288c21b5389d59eeac2

Change-Id: If8f1baacf56cc5a78032a72c8b24f1db487feb58

Update the version metadata for Yoga milestone M2

Change-Id: I6f9930efc8775d98a9575df48589fd43056f5d7a

Currently we support usage of distro packages only, and this custom
fact can be simply replaced by the default fact.

Change-Id: Ib8f47ce0bbe34970f9324289210fdb74da6f2098

The apache class by default purge all default vhost config files, and
the other modules expect the default files are purged by that behavior.

This change removes the logic to replace the default vhost config file,
which is implemented only in a few modules, to make implementation
of all modules more consistent.

Change-Id: I0160bd0b7b8d5495031838119d401e44b3ddf7fa

To use the keystone notification feature, we need an independent
keyston-listner service. This change implements the missing capability
to manage the service and its package.

Closes-Bug: #1956397
Change-Id: Iedda0e9fe7b091b510ea9033db86921e4d2b4184

The 'barbican-api' tag is never used. This change replaces usage of
that invalid tag to ensure the relevant packages are installed.

Change-Id: Ied1d936d753658de403606d511aad7acd8adeb88

This change refactors how the dependent libraries are loaded during
unit tests, and load the libraries in the base spec_helper to avoid
duplicate and redundant implementations.

Change-Id: Ief4a1c70a69661cb0e5cb6d2650a5771f5d2d7b7

Change-Id: Ifd6539b1a4bbcd03e659c67aa9cf5ddd5bc49f84

This change removes direct reference to some classes in
puppetlabs-apache. Details are explained below.

- The api class doesn't need access to anything defined in
  apache::params

- The following classes are included by the openstacklib::wsgi::apache
  resource type, and current inclusions are just redundant.

Change-Id: Ib49308e63b18751ac4586f85dbac6d7b2775ca61

... because the same dependencies are already implemented in
puppet-keystone and puppet-barbican is not the proper place to define
these.

Change-Id: I649d870a81cae88b801307fe3e3e7a1feff1c276

Since [1] was merged, not only openstacklib::poliy::base but also
openstacklib::policy::default is included to manage the policy file.
This change ensure openstacklib::policy::default is executed after
the packages are installed.

[1] 46265f57

Change-Id: I65b8ec68e68207650dc409c4eb3933b2f4e25634

This change is the first step to support secure RBAC and allows usage
of system scope credentials for Keystone API request.

This change covers the following two items.
 - assignment of system scope roles to system user
 - credential parameters for authtoken middleware

Depends-on: https://review.opendev.org/804325
Change-Id: Ifbdde0718d1b6a6782c4f098fd152c3f636aa2c4

Change-Id: Ie8a5a259444b6a816977a4d296a1fe1ec4b181ad

Currently the <service>::wsgi::apache::ssl parameters have inconsistent
default values. Some parameters default to true while the other default
to false.

Based on the following points, false is considered to be the more
reasonable default.
 - Usage of SSL is optional and is not always required
 - There are other methods(like load-balancer) to implement SSL
   termination
 - Enabling SSL doesn't work with the default values currently
   defined, and requires additional parameters like ssl_cert.
 - false is the default value defined in the base implementation in
   puppet-openstacklib.

This change is the preparation to change the default value, and
introduces a warning message to make users aware of the future change.

Change-Id: I0e802f714405a2dda6ead11be70090a8d754b059

Depends-on: https://review.opendev.org/816117
Change-Id: I6ca9efbfcf07c72cc8611acdcda8f090e3b7729e

puppet-barbican 19.4.0 release

meta:version: 19.4.0
meta:diff-start: -
meta:series: xena
meta:release-type: release
meta:pypi: no
meta:first: no
meta:release:Author: Takashi Kajinami <tkajinam@redhat.com>
meta:release:Commit: Takashi Kajinami <tkajinam@redhat.com>
meta:release:Change-Id: Ic6a640fa4e4f2de6dabd45e017bba284eacca006
meta:release:Code-Review+1: Tobias Urdin <tobias.urdin@binero.com>
meta:release:Code-Review+2: Hervé Beraud <herveberaud.pro@gmail.com>
meta:release:Code-Review+1: yatin <ykarel@redhat.com>
meta:release:Code-Review+1: Alex Schultz <aschultz@redhat.com>
meta:release:Code-Review+2: Elod Illes <elod.illes@est.tech>
meta:release:Workflow+1: Elod Illes <elod.illes@est.tech>