enabling tokens flushing using cron

This patch is for configuring a flush token cron when using database as
backend for tokens storage.
While potentially useful for auditing in production environments,
the accumulation of expired tokens will considerably
increase database size and may decrease service performance,
particularly in test environments with limited resources.
It's recommanded to create a crontab to flush tokens every hour.

Change-Id: Icd819cc95b3440f43c5b588f9f2dd6ca47b25a71
Signed-off-by: Emilien Macchi <emilien.macchi@enovance.com>
(cherry picked from commit 6aa7a17941056a7de2a7bdeeb99024b5c714f882)
fix admin_token with secret parameter

Using secret => true requires a space after the parameter, otherwise the
catalog fails to compile.

Change-Id: I025112c5989359d0bb1a2668ddcb640c3b1b0f59
(cherry picked from commit bc0628db04c6c5591772b61ef637d57c151dae9c)
Prefix database parameters with database_ for consistency

Although database configurations were moved to the new database
section, parameters were not renamed accordingly.

This change renames those parameter for consistency with the other
modules and actual database configuration names.

Conflicts:
  manifests/init.pp

Change-Id: I34855839963faa4c60f482df014b4986c7acab92
(cherry picked from commit 585a417fc99c1971823408fce25eb926faee268c)
Release 4.1.0

Updated database API, added cron job to flush tokens, bug fixes.

Change-Id: Ib9458ed28704c68dad6a2b2f19ee791bbee2ee2e
Fix password update for users

Newer versions of keystone-client have changed the error message when an
invalid password is passed in. Update the logic so that puppet can
update passwords for users.

Change-Id: I090f7e2ee62ee189f37921c091fe51b6d587cd74
Closes-Bug: 1340447
(cherry picked from commit 1e21f7cbc28adbc28089b967c253f15e1e86d75d)
allow setting the tenant descriptions

This allows one to change the descriptions for the default admin and
service tenant.

Change-Id: Ic6e8f07e8523a46612a7a6bc4dd2fa9c38775b2f
Merge "Fix password update for users" into stable/icehouse
Use secret parameter for rabbit_password

Rabbit_password configuration was not using secret parameter so it
was visible on the logs.

Change-Id: Idad892f0c461fce53eaa81ec8a7f3cfe871a9d00
Closes-Bug: 1328448
(cherry picked from commit cbac8130da6732a1e8ad1dbcf9aec6ba75b7c20d)
Add extended logging options.

There is a range of extended logging options in Openstack services that use
openstack.common.logger (Ceilometer, Cinder, Heat, Keystone, Nova). Adding
keystone::logging to support them. This change is identical to
<https://review.openstack.org/#/c/113560/> but it applies to puppet-keystone
instead of puppet-ceilometer.

No blueprint/spec, as discussed in the IRC meeting on 08-11-2014.

Change-Id: I88fcf025b9467090d21d1a10a5af9b270f8ef11e
(cherry picked from commit f277297080251ec2fe789363c3c5dd0877c9435d)
Release 4.2.0

Changes:
- Added class for extended logging options
- Fixed rabbit password leaking
- Added parameters to set tenant descriptions
- Fixed keystone user authorization error handling

Change-Id: If8c279cf544e1886428432c2feb4bdd2303e5185
Add native types for keystone paste configuration

so that pipeline configuration can be updated from
Puppet for keystone.

Change-Id: I6bcbddca5dcfd625a325917174339f7be5206827