[api] document /auth/tokens/OS-PKI/revoked

[Steve Martinelli]

The /auth/tokens/OS-PKI/revoked API is undocumented: https://github.com/openstack/keystone/blob/8a56c161ee29e34e70c6334b048881e8fbbd7514/keystone/auth/routers.py#L36

Likewise, for v2, the /tokens/revoked API is undocumented too: https://github.com/openstack/keystone/blob/8a56c161ee29e34e70c6334b048881e8fbbd7514/keystone/token/routers.py#L25

[Steve Martinelli (stevemar)]

See https://review.openstack.org/#/c/138566/2 for a patch that went into the old XML doc books

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/390904

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/390913

[OpenStack Infra (hudson-openstack)]

Change abandoned by Samuel Pilla (<email address hidden>) on branch: master
Review: https://review.openstack.org/390913

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/390904
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=095ed9187b627a0c90e58af551349cbddee32c17
Submitter: Jenkins
Branch: master

commit 095ed9187b627a0c90e58af551349cbddee32c17
Author: Tin Lam <email address hidden>
Date: Wed Oct 26 10:43:20 2016 -0500

    Add api-ref /auth/tokens/OS-PKI/revoked (v3)

    The v3 endpoint documentation /v3/auth/tokens/OS-PKI/revoked is missing
    in /api-ref. This patch set adds the documentation for v3.
    A separate patch set will be submitted for v2.

    Change-Id: I3db3356d24cc8885012756016a90a0996fcf14f5
    Partial-Bug: #1626778

[Samuel de Medeiros Queiroz (samueldmq)]

Changing to fix release as the v3 docs are merged and https://review.openstack.org/#/c/390913 is gating

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/390913
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=c70baa0a7a1f16d1e3cb36abc8666626633133db
Submitter: Jenkins
Branch: master

commit c70baa0a7a1f16d1e3cb36abc8666626633133db
Author: Samuel Pilla <email address hidden>
Date: Wed Oct 26 10:19:48 2016 -0500

    Document v2 Revoked Token Route

    Adds documentation for /v2.0/tokens/revoked in /api-ref.

    Patch for v3: https://review.openstack.org/#/c/390904

    Change-Id: I2a09eba3484299a63b30d936e5677a9e1d922c04
    Partial-Bug: #1626778

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/374479
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=8a66ef635400083fa426c0daf477038967785caf
Submitter: Jenkins
Branch: master

commit 8a66ef635400083fa426c0daf477038967785caf
Author: Steve Martinelli <email address hidden>
Date: Mon Aug 8 18:51:24 2016 -0500

    Remove support for PKI and PKIz tokens

    This is the first step of several to remove PKI token support in
    keystone. A large issue in removing PKI support is support for the
    revocation list must be maintained.

    This patch removes support for the token format, it's surrounding tests
    and examples that are generated. Additionally, some wording has been
    changed around the CLI and config options to make the distinction
    between keys and certs used for PKI tokens and those used for getting
    the revocation list (a list of tokens that are revoked, which is signed).

    Future patches will:

    - Remove the keystone-manage commands for generating certs

    - Modify the revocation list (at /auth/tokens/OS-PKI/revoked) to return
    a 403 if pki is not configured (instead of raising a 500). We cannot
    remove the API as that would break an API contract.

    - Options to configure PKI will be marked as deprecated

    - If PKI is configured a normal signed list will be returned (same
    behavior as today)

    - Follow up patch to keystonemiddleware will make sure auth_token does
    not rely on the revocation api at all.

    Related-Bug: 1626778
    Related-Bug: 1626779

    Co-Authored-By: Boris Bobrov <email address hidden>
    bp removed-as-of-ocata
    Change-Id: Icf1ebced44a675c88fb66a6c0431208ff5181574

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.openstack.org/392883