Fix fauxhai platform versions for suse and redhat

Change-Id: Ib5f7a01a58043f59ffa480d02c2ba536467af05c
Partial-Bug: #1344199
Add format documentation to Strainer file for better output

Change-Id: I54dffb4d2f7bf2be59f035bc23915424d3e0960f
Setting up repo for master Juno Branch

* Update metadata version
* Adding Gemfile.lock to .gitignore
* Removing Strainer file
* Updating Gems
  * chef (11.12.0)
  * chefspec (4.0.0)
  * rspec (3.0.0)

Change-Id: I15718d45fb2feb5f42f0e71fa201992df5508aee
Partial-Bug: 1349865
Updated berkshelf to 3.1.5

Updated berkshelf from 2.0.18 to 3.1.5 in Gemfile and added supermarket source to Berksfile

Change-Id: Ic8e6a14fc91212b1b5d3cdbf88b19af38e425cc5
Implements: blueprint update-berkshelf
Update Testing.md to factor out Strainer

* remove refs to Strainer
* add steps for testing
* remove knife test as it's not used in gates anymore

Change-Id: I103824e0008723d49670f9b23e988e6eaf8ec6f9
Partial-Bug: #1350470
internalURL should use the internalURL variable

This patches what appears to be a typo where the internalURL passed to
openstack_identity_register with the "adminURL" variable instead of the
internalURL variable that is defined earlier in the code.

This was noticed as the cookbook was setting up the endpoints with the
internalURL defined to the admin endpoint.  This is opposite to
OpenStack documentation and breaks operations of other openstack
projects which rely on internalURL.  For example the admin pipeline does
not have user_CRUD, while the public one does, breaking dashboard.

Following the inclusion of this patch the identity-internal endpoint
will need to be added to cookbook-chef-common.  Following that addition
the number of node.set for the identity-internal endpoint can be
reduced.

Partial-Bug: #1356732

Change-Id: I4bc3d49fd15b7254976a5ed8e964a4b3e3af02c6
Merge "Update Testing.md to factor out Strainer"
Update keystone conf files for Juno

* Update paste.ini
* Update keystone.conf
  - Add in description comments
  - Add project_ for deprecated ldap tenant_
  - Remove unused user and group _domain_id_attributes
* Update specs as needed

Change-Id: Ifbd5fac220fff7723b3de349ca57cd96a4b6910a
Closes-bug: #1351459
Allow admin and public workers to be configured

* Add 2 new attributes for admin_workers and public_workers
* Add specs

Change-Id: I408463a16782dafc53bead2526c74d59ea4aea40
Closes-Bug: #1353569
Allow list_limit to be configured

Add list_limit for default, assignment, catalog, identity and policy
sections.

Change-Id: I817827510984d0d46cc83045d91ce93154e6dbad
Closes-Bug: #1354490
add '--insecure' to keystone command in register

When keystone service need cafile verification, can not
do registration work, we can use insecure mode to do all
registration work only in OpenStack installation process.

Change-Id: I246700aace69b192716982f2985856381cfee029
Closes-Bug: #1369241
Update keystone.conf permission

To avoid other users to access scecret in keystone.conf, set the
file permission to 640 instead of 644

Fix bug 1369446
Change-Id: I26af2ae803de9ba909d3356c27a33563fba68af3
Register provider succeeds when failures occur

The provider actions where capturing the keystone cmd error and just
logging them as errors to the log, resulting in a converged node that
is unusable.  These errors should be raised as exceptions to allow
for these configuration errors to be debugged earlier.

Change-Id: I0990dc8386f5999dc96b6cedfca86a762f031953
Closes-Bug: #1370678
Merge "Update keystone.conf permission"
Allow hash_algorithm to be configurable

We may want to set hash_algorithm to be 'sha2', so we
should allow hash_algorithm to be configurable.

Change-Id: I9be1afb1df9705f5d96c5c3c1caf4f5e4b563042
Closes-Bug: #1370825
Merge "Register provider succeeds when failures occur"
Allow admin_bind_host to be settable in the keystone.conf

Change server recipe and template to allow the admin_bind_host
to be set to the identity_admin endpoint defined in Common.

Change-Id: I1043d8e9137ea2a6c8f84ee3a2da4f98e3c82521
Closes-Bug: #1368282
Bump Chef gem to 11.16

blueprint bump-chef-to-11-16

Change-Id: I075349935634aa5e840afb2e9289b67d9cde39f7
add a Rakefile to structure test runs

Having a Rakefile will allow us to change the actual test commands on
our side rather than relying on changes to the openstack-infra
repository. This should make it a lot faster to change things, but also
easier to test since the jenkins jobs are actually run in this
repository, not the openstack-infra one.

This commit defines the jobs we previously had defined in Jenkins and
uses 'high-level' naming consistently (i.e. lint, style vs. foodcritic,
rubocop).

There is also a :clean task to help with deleting the files generated by
the other jobs.

Also changed foodcritic to run on the source cookbook rather than the
one installed by berks, see
e.g. https://github.com/berkshelf/berkshelf/issues/931#issuecomment-29668369

Change-Id: I6e007888e1b37a54628ab5c09e62f636a0b622ed
blueprint: rakefile
Add saml attribute section

Add new saml section to keystone.conf for
federation support.

Change-Id: Ic9bf5385ef679b072adf94d52f99106d81ed3f90
Closes-Bug: #1374620