Switch from signing/format --> token/provider.

Keystone Havana has now deprecated the old signing format config
file format. It now uses token/provider instead.

token_format is now deprecated.

Closes-Bug #1223265

Change-Id: Ia7c089b51823ad2a559a435b08dfca7364de2979
Fix duplicated keystone endpoints

Duplicated endpoints were created when updating 2 or more URLs.

Refactor keystone_endpoint to use prefetch and flush paradigms.

Closes-bug: #1234480
Change-Id: I91340995297c6afaf9c8841bc7ae71a8e25b1eb7
Merge "Switch from signing/format --> token/provider."
Merge "Fix duplicated keystone endpoints"
Preparing or 3.0.0 Havana release

Updated Modulefile with latest version.
Updated README.md with release notes.

Change-Id: Ia80a49a5422908373e5ca458b5eac39d4352e372
Moved keystone db sync to its own class

This will decouple allowing for additions, like the apache wsgi
patch, so it can be included or triggered elsewhere.

Original author is François Charlier<francois.charlier@enovance.com>

Change-Id: I9ae544d58034ca30ddb0a4c616ff794ccd432d7f
Enable serving keystone from apache mod_wsgi

Serving keystone from a wsgi container is recommended for production
setups. SSL is enabled by default.

See the following URLs for explanations:
    http://adam.younglogic.com/2012/03/keystone-should-move-to-apache-httpd/
    https://etherpad.openstack.org/havana-keystone-performance

Documentation in manifests/wsgi/apache.pp

Apache can be configured as a drop in replacement for keystone (using
    ports 5000 & 35357) or with paths using the standard SSL port. See
examples in examples/apache_*.pp

- Also change some 'real_' prefix into '_real' suffix to respect the
coding guide.
- Added the '--insecure' option to keystone client in the provider to
allow using self-signed certificates.
- Fixed parsing the ssl/enable value in the provider.

There is no integer verification done in the manifests
and to get around a bug in rspec, which has been fixed
in https://github.com/rodjek/rspec-puppet/pull/107,
certain parameters that should be integer are treated as
strings

files/httpd/keystone.py updated with lastest from keystone git repo

Change-Id: Ide8c090d105c1ea75a14939f5e8ddb7d24ca3f1c
Create memcache_servers option

Permits use of one or more memcache servers for token storage.
Use to override default server (localhost:11211) when token_driver
is keystone.token.backends.memcache.Token.

Change-Id: Iaeb0c896d4907fd520db9b60e3af002b3711bc75
(cherry picked from commit 364ddff9ea6fcb20797936dff87d039bf85de607)
Update for 3.0.0-rc2

Updated .gitreview to point to stable/havana. Updated release notes
in README.md. Updated Modulefile with latest rc version.

Change-Id: I8507fa444169f434e5f460389d442aa42f36ffc3
Fix remove_warnings

Method lib/puppet/provider/keystone.rb/self.remove_providers does not
support multi line warnings and client results having more than one
column. This patch is fixing it (not sure how module can work with such
bug before anyway).

Change-Id: I19c3ce68ef786a2641d1e2808cb4db9979bdcfed
(cherry picked from commit e100e057bb2f6517fc6c5caad46a053864aa5328)
Fix puppet syntax in README.md

Per puppet-lint, booleans should not be quoted.

Change-Id: I2f8c6a004a87487022b12d17e370f8c3b642613f
Signed-off-by: Paul Belanger <paul.belanger@polybeacon.com>
(cherry picked from commit 9fae4ababdadc64df5e3bfb069eb57fa491a41a8)
License for Keystone not Swift

Change-Id: I1baaba019b0a0bf18a6abcdcb8e9df08e7166553
Signed-off-by: Paul Belanger <paul.belanger@polybeacon.com>
(cherry picked from commit 8c8360ada596cd59c02126b604a6a27ed1fdda6d)
Creating token_expiration parameter

Sets keystone token lifetime (default 86400 seconds).

Change-Id: I9f8df93049865a9d67941e5e7d45b89d2aa5131b
(cherry picked from commit abce4d4f24082f20b50ca0f5e79a2a9445440666)
Don't create Member role

Creating the "_member_" role and "Member" role creates confusion.
"_member_" has special significance to keystone, so we keep that.

Horizon is modified to use "_member_" as the default role in [1].
This change should be merged after that.

See also rhbz#984294 [2]

[1] https://review.openstack.org/#/c/60462/
[2] https://bugzilla.redhat.com/show_bug.cgi?id=984294

Change-Id: If4ed1c2c72ca67acad7b70651e68ff7ce68157dd
(cherry picked from commit 1dd4297243d6ce25115828d87302a72e9d3e1f72)
Refactor keystone_user_role to be lazier

Currently, the entire list of user roles are
cached ASAP. Trying to pre-determine these
is very slow b/c there is no user role list
command in keystone, so you must iterate through
all tenant/user combinations to retrieve the list.

This patch makes the retrieval of all state info
lazy.

Partial-Bug: 1224179
Change-Id: I80a85f3ddf2c41fe447df5682ad31ac4df8f8b59
(cherry picked from commit a0a359801e7248b24d15b3acef3b398d5a2fb65f)
Updated endpoints to support paths and ssl

- Add {public,admin,internal}_url parameters to override other
  {public,admin,internal}_ parameters.
- Also change some 'real_' prefix into '_real' suffix to respect the
coding guide.
- Fixed parsing the ssl/enable value in the provider.
- Update examples

Change-Id: I78d2695eb5cb1287538afe154668da9fe23e62a3
(cherry picked from commit 9cc9e347d5c65a387393995420c7a17a83fbda5a)
Merge "License for Keystone not Swift" into stable/havana
Merge "Fix puppet syntax in README.md" into stable/havana
Merge "Fix remove_warnings" into stable/havana
Merge "Updated endpoints to support paths and ssl" into stable/havana