Relax regex when keystone refuses connections

Seems newer python-keystoneclient have a different excpetion message,
specifically they dropped the HTTP prefix.  Now we allow both messages to be
trapped.

Add some additional cases that are common regex now covers
 (HTTP 400)
 [Errno 111] Connection refused
 503 Service Unavailable
 Max retries exceeded
 HTTP Unable to establish connection
 Unable to establish connection to http://...

Change-Id: I71fada12b3dbb681288c7ef2891603f970910736
Signed-off-by: Paul Belanger <paul.belanger@polybeacon.com>
Signed-off-by: Andrew Woodward <awoodward@mirantis.com>
Add support for puppetlabs-mysql 2.2

Puppetlabs-mysql has been rewritten to be much
cleaner. This patch adds a new parameter for the
keystone mysql and init classes allowing users to
use the new version. Previous behavior will continue
as normal when using the old version (0.9)

Change-Id: Idf7c46d9aab8db7cca7d8377431c60b24ae4c9c6
Closes-bug: #1266241
ensure log_file is absent when using syslog

When using syslog, we don't need to write in keystone.log file, so
log_file param should be absent to avoid any write in the file.

Example: run keystone-manage db_sync will write in ~/keystone.log
instead of /var/log/syslog.

Closes-bug #1292619
Signed-off-by: Emilien Macchi <emilien.macchi@enovance.com>
Change-Id: I9b2613294625f3df27a70f45bd964688a425c88e
Merge "ensure log_file is absent when using syslog"
Merge "Add support for puppetlabs-mysql 2.2"
Fixed gate by Updating Gemfile to pin Rake to 10.1.1

The latest Rake update requires Ruby >= 1.9. Bundler in the
current gate uses 1.8.x. This update fixes the gate by pinning
Rake to the last known working version.

Change-Id: Iac17385f45319e98253a7513182370005240621c
Add notification related params

This patch is aim to add notification and rabbit related params
in keystone class to manage configuration of notification options in keystone.

Closes-bug: #1280071

Change-Id: I8a999a85666c905571f5d8d2b9262e03d38adff0
bind_host got deprecated for admin_bind_host

If admin_bind_host is restricted to something else
than 0.0.0.0 or 127.0.0.1, the keystone manifest fails
since the client tries to connect to 127.0.0.0 -
which is not bound:

(/Stage[main]/Keystone::Roles::Admin/Keystone_role[_member_]) \
Could not evaluate: Execution of '/usr/bin/keystone --os-endpoint \
http://127.0.0.1:35357/v2.0/ role-list' returned 1: Unable to establish \
connection to http://127.0.0.1:35357/v2.0/OS-KSADM/roles

Change-Id: I7b13410670b479a004ed69609a03a1140f6939c7
Merge "Add notification related params"
Full support for Keystone LDAP integration

Adding full support for integrating Keystone via LDAP. Enables
support for managing all LDAP related Keystone options.

 - Add two examples of LDAP configuration, although LDAP environments
   are highly variable, these will help get everyone started
 - Modify the keystone::ldap class to support all LDAP related options
 - Check sane defaults in the keystone::ldap class to hopefully reduce mistakes
 - Add a dependency on the python-ldap package
 - Modify the LDAP test to match the new class
 - Make the default-tenant optional since some LDAP backends do not
   support this

Change-Id: Ie6879eb4816fd2b906f72cac8deb3b62bd4b2430
Merge "bind_host got deprecated for admin_bind_host"
Merge "Full support for Keystone LDAP integration"
Use correct variable for host_access dependency

The keystone::db::mysql resource declares resources using
`$real_allowed_hosts` which is a copy of `$allowed_hosts` minus `$host`.
But then it declares dependencies using `$allowed_hosts` which includes
`$host` and will fail catalog compilation due to a missing dependency

This bug only affects users if the value of `$host` is included in the
array of `$allowed_hosts`

Change-Id: Ifdd8793bcf36178efd1a083ee35649d56dc3d768
Updated to match semver and release notes.

Before this update the Modulefile was not following semver in
relation to stable/havana, and the README files were not in sync.
This update introduces proper semver and consistency.

Keystone in fixtures tracks master. Fix modulefile to match
this dependency and be consistent with Horizon dependency

Change-Id: I622ef84b5c50abd1da96a75e9935265cd947ca6a
Merge "Updated to match semver and release notes."
Fixing several errors in the LDAP module

 - The same attribute was mistakenly written to incorrect fields
 - A few tenant_ attributes were missing
 - The test was incomplete
 - The tenant_mail_attribute was mistakenly included, it doesn't exist

Change-Id: I57a05bce9b9246036f586bc80bc0b0c7f8b4694a
Merge "Use correct variable for host_access dependency"
Reduce default token duration to one hour

Keystone has reduced it's default token duration to 1 hour for
Icehouse.  The same should be done in the Keystone puppet module.

Change-Id: Ia790682a3f7693b863193cc1b60e17d971af7e75
Implements: blueprint reduce-default-token-duration
Closes-bug: 1299334
Merge "Fixing several errors in the LDAP module"
Merge "Reduce default token duration to one hour"