Ian Cordasco 9e4a02482d Add support for deploying Keystone with Fernet ... This change adds a number of new tasks that are dependent on the value of the Keystone token provider (keystone_token_provider) user variable. If the keystone_token_provider user_variable is set to keystone.token.providers.fernet.Provider then the playbooks will appropriately create the fernet keys and distribute them to the rest of the keystone containers. This also implements key rotation for generated fernet keys similar to how the os_nova roles implement key rotation. Finally, we also need to build cryptography from master for now. Currently, 0.8.x and 0.9.x use versions of cffi<1.0 which causes a bug when used with mod_wsgi and Apache. This is fixed in cryptography master and will be released in 1.0. Closes-bug: 1463569 Change-Id: I8605e0490a8889d57c6b1b7e03e078fb0da978ab		2015-06-22 08:53:53 -05:00
..
keystone-httpd.conf.j2	Genericize how we update SSL settings for Apache	2015-04-10 15:02:53 +00:00
keystone-ports.conf.j2	Convert existing roles into galaxy roles	2015-02-18 10:56:25 +00:00
keystone.conf.j2	Add support for deploying Keystone with Fernet	2015-06-22 08:53:53 -05:00
keystone.Default.conf.j2	Updated ldap config to support multi domain	2015-05-08 18:18:46 +00:00