2025.2 Series Release Notes

27.0.0-3

New Features

• Added new parameter keystone:federation::openid::openidc_xforwarded_headers that can be used to configure the OIDCXForwardedHeaders configuration for the httpd mod_auth_openidc plugin.

27.0.0

New Features

• The new connection_timeout parameter has been added to the keystone::ldap class and the keystone::ldap_backend defined resource type.

• The keystone class now has two new parameters rabbit_use_queue_manager and rabbit_stream_fanout.

• The following parameters have been added to the keystone::security_compliance class.

  • report_invalid_password_hash

  • invalid_password_hash_secret_key

  • invalid_password_hash_function

  • invalid_password_hash_max_chars

Upgrade Notes

• The following parameters of the keystone::ldap class have been removed.

  • identity_driver

  • assignment_driver

  • credential_driver

• Puppet 7 is no longer supported. Use Puppet 8 instead.

• The keystone::rabbit_heartbeat_in_pthread parameter has been removed.

• The keystone::logging::watch_log_file parameter has been removed.