Add testcase for coverage of 002_add_endpoint_groups

There wasn't unit test coverage for (keystone.contrib.
endpoint_filter.migrate_repo.versions.002_add_endpoint_groups).

Change-Id: I902ff28a82a964f19835d2b16e46501e45fb1371
Updates package comment to be more accurate.

Change-Id: I980b9fb37516f5775f11a01d93e82d5349b8850a
Fix fakeldap search_s documentation

FakeLdap's search_s documentation said it only supported base and
subtree, but it also supports onelevel.

Change-Id: I7536855d5a94a5d570e993be1a1e3da92ddd9e0f
Refactor FakeLdap to share delete code

FakeLdap is changed to implement delete_s using delete_ext_s.

Change-Id: Ibf63f6e13da830b57a9f7ea5b9689d52d7bdf690
Remove unused cache functions from token.core

With the move of functionality from token.core to token.persistence
the cache functions and import are no longer needed in token.core.

Change-Id: I97c96fff64b5c952155c4054df05b1b3ec3a83c5
Address some late comments for memcache clients

This change addresses some late comments from the following review:
https://review.openstack.org/#/c/119452/31

Change-Id: I031620f9085ff914aa9b99c21387f953b6ada171
Related-Bug: #1360446
wrong logic in assertValidRoleAssignmentListResponse method

According to current logic, we always use the last of entities to
compare with ref. And, actually, we provide another method
assertRoleAssignmentInListResponse to judge whether the ref in the
list. So, the ref parameter could be removed.

Change-Id: I3f8786baa6964c0f17add2d669aa736732698ea7
Fix tests comparing tokens

There were tests that verified that the PKI token body could be
encrypted with CMS and compared to the token ID in the response.
This test isn't safe because the token body may be different than
the token encrypted with CMS since the order of items in the dict
can change.

The fix is to change the test to decode the PKI token ID and
compare that to the response body JSON instead.

Change-Id: Icc649b96071ff084d5c76f2ea2bcf3ecb08a0351
revise docs on default _member_ role

Closes-Bug: 1330132
Change-Id: I3d9647ee6e537b304191dfa5e34e56122c11cd68
Add an XML code directive to a shibboleth example

By using the code directive the doc generated adds some basic
syntax highlighting, making it much easier to read.

Change-Id: I865085b833dbeba841a4de9111167d5e7aafba98
Merge "Remove unused cache functions from token.core"
Remove identity and assignment kvs backends

As part of deprecating the kvs backends, this patch removes those
for identity and assignment.

Partially implements: bp removed-as-of-kilo

Change-Id: I02566b3168b5f1792149b67e582d8e97ff02f8a6
Remove OS-STATS monitoring

One time change to fully remove anything OS-STATS related.

implements bp removed-as-of-kilo

Change-Id: I31416d3e9bd4ea68f56f12269a3c68191403f197
Remove images directory from docs

I can't find a single place these images are used in our docs.
Best I can tell is that middleware docs have a few of them:
http://docs.openstack.org/developer/keystonemiddleware/middlewarearchitecture.html

Change-Id: I6dc36b506452f99488c2a202da5eea518cc51b68
Merge "Fix tests comparing tokens"
Remove deprecated TemplatedCatalog class

Use keystone.catalog.backends.templated.Catalog instead

implements bp removed-as-of-kilo

Change-Id: I0415852991e504677d1d1a81740c72f0bd8fc8bb
Switch LdapIdentitySqlAssignment to use oslo.mockpatch

Referenced bug has been fixed in oslotest 1.1.0

Change-Id: I355798d1024399aca194e826ed8048812e44612b
Fixes an error deleting an endpoint group project

Deleting a endpoint group project fails because the router specifies
a controller method that doesn't exist. This returns a 500 error to
the user for what should be a successful operation.

Change-Id: I3b91d8023d31555893fb944da73633a69d8e286f
Closes-bug: #1377304
Validates controller methods exist when specified

It was possible to specify an invalid controller method in a router.
This will not cause an error until runtime. This change catches the
error much earlier in the application lifecycle. In fact with this
change errors should not be able to pass unit tests even if there is
no specific test for the behavior.

Related-bug: #1377304
Change-Id: Icc5646c143a234127a8b4ac8a74342ef3dca7e80
Use openstackclient examples in configuration documentation

We should start encouraging the use of openstackclient in the
Keystone documentation. However, maintain some references to
keystoneclient's CLI for backwards compatability purposes.

Change-Id: I16fa302c2cd5bf3592725ef7f3ef6c5ba6e83354