add template_file parameter to specify catalog

this lets you set the catalog to use when catalog_type
is set to 'template'.
Also added some tests according to catalog settings.

Change-Id: I48c3b903ceafe94f2ec31b49d617e5a9951de7f9
Fix deprecated section header in keystone.conf

In Icehouse, the [sql] section in keystone.conf has been replaced with
a section called [database] instead to improve consistency across projects.
This patch modifies the puppet-keystone module so that it populates
the [database] section instead of the [sql] section.

Change-Id: I452601cc41d57a78b3390e9516b0b0bef44ceb19
Closes-Bug: #1308861
Fixed database service resource

Version 2.2+ of the puppetlabs-mysql moudule starts the MySQL database
with the Service resource name mysqld [1]. The puppet-keystone module
lists a requirement for a Service resource with name mysql. This will
lead to an undefined resource error.

This patch corrects the dependency.

[1] https://github.com/puppetlabs/puppetlabs-mysql/blob/master/manifests/server/service.pp#L15

Change-Id: I2165b2c0529c0ecd9e9ba9853f3d15d5f86b0135
fix typo in comment.

Change-Id: Ib29af18fa902faad17e7d1ab690ebb95b0858904
Merge "Fixed database service resource"
4.0.0 - 2014.1.0 - Icehouse Release

Updated Modulefile and README.md for 4.0.0 release.

Change-Id: Id08419c22add23ff7494ca447d9b99e42a52173c
fix deprecated catalog driver

In Icehouse
keystone.catalog.backends.templated.TemplatedCatalog
is deprecated in favor of
keystone.catalog.backends.templated.Catalog

Change-Id: I2e026cb0361b6ceeae801d9b434188a71a12e23a
Merge "4.0.0 - 2014.1.0 - Icehouse Release"
Add service validation and encapsulation

This patch moves the keystone service resource
to a new class, keystone::service, and adds
a new resource that uses the admin credentials
to confirm the keystone server is accepting
connections and functioning well from the client
perspective. This validation resource is optional
and if specified will be required by all keystone
custom types.

In order to take advantage of this change, consumers
of the keystone service should depend on this class
instead of the keystone service.

Change-Id: Ibd92a7c40658bb242b3b55980489949cb5835145
Add ignore_default_tenant parameter to keystone::role::admin class

Exposing the ignore_default_tenant parameter for the admin keystone_user resource.

Change-Id: If7ede3efd7718a5756adce7db60c0091d091ba83
Closes-Bug: #1319510
Merge "Add service validation and encapsulation"
fix admin_token with secret parameter

Using secret => true requires a space after the parameter, otherwise the
catalog fails to compile.

Change-Id: I025112c5989359d0bb1a2668ddcb640c3b1b0f59
Merge "Add ignore_default_tenant parameter to keystone::role::admin class"
Make service provider as changeble incoming parameter.

This change need for using Keystone with alternative service systems.
For example -- a corosync/pacemaker clustering solution. or another.

Change-Id: I4b7fe3e1a25d1017c53726cf8ce69338d060beb7
enabling tokens flushing using cron

This patch is for configuring a flush token cron when using database as
backend for tokens storage.
While potentially useful for auditing in production environments,
the accumulation of expired tokens will considerably
increase database size and may decrease service performance,
particularly in test environments with limited resources.
It's recommanded to create a crontab to flush tokens every hour.

Change-Id: Icd819cc95b3440f43c5b588f9f2dd6ca47b25a71
Signed-off-by: Emilien Macchi <emilien.macchi@enovance.com>
Merge "enabling tokens flushing using cron"
Allow blank email address for keystone_user type

Adjust the newvalues() regex to allow for a blank string for the email
parameter to keystone_user resources.

Change-Id: I36b3eb54fcc39f810861f217dcf1b02e58265aef
Closes-Bug: #1319464
SSL for communication between keystone and rabbitmq

Currently, Keystone can not be configured via Puppet to communicate with
rabbitmq using SSL. Most other puppet component already have this feature.
This commit enable this feature for Keystone.

Change-Id: Idd207a58a71c001e581d17c5b97965189e20869f
Use secret parameter for rabbit_password

Rabbit_password configuration was not using secret parameter so it
was visible on the logs.

Change-Id: Idad892f0c461fce53eaa81ec8a7f3cfe871a9d00
Closes-Bug: 1328448
Merge "Allow blank email address for keystone_user type"