Sahara: add support for the new [trustee] configuration section

[Luigi Toscano]

As the configuration values from keystone_middleware section are really private for keystone, since https://review.openstack.org/#/c/524936/ (so queens) sahara uses a new trustee section to set the keystone settings needed by trusts.

There is some magic to make sure that the new section is read anymore, but it uses private APIs and it's likely to break (it already did with oslo.config 6.0.1). So at least in Rocky new setup should have this new [trustee] section filled with the correct information.

Hopefully also upgrades clusters should use the new section, but maybe this is out of scope for this project.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/569886

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/570012

[OpenStack Infra (hudson-openstack)]

Change abandoned by David Wilde (<email address hidden>) on branch: master
Review: https://review.openstack.org/570012
Reason: Not sure why the vagrant file changed

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/569886
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-os_sahara/commit/?id=832b8ee246a9ac6d958a1d8365fd3f27988c4497
Submitter: Zuul
Branch: master

commit 832b8ee246a9ac6d958a1d8365fd3f27988c4497
Author: d34dh0r53 <email address hidden>
Date: Mon May 21 17:01:20 2018 -0700

    Add trustee section by default

    Added [trustee] section and variables based on the changes outlined
    in https://review.openstack.org/#/c/524936/13/devstack/plugin.sh

    Change-Id: I3b8d7dcb57d4373c415e11266a4672c86ccb9166
    Closes-Bug: #1763361

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/643899

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/643899
Committed: https://git.openstack.org/cgit/openstack/puppet-sahara/commit/?id=ee9cf369a64f78f5de7c0fae482c3c34547a4295
Submitter: Zuul
Branch: master

commit ee9cf369a64f78f5de7c0fae482c3c34547a4295
Author: Luigi Toscano <email address hidden>
Date: Mon Mar 18 18:35:31 2019 +0100

    Configuration: populate the [trustee] section too

    Sahara have been (mis)using few values from keystone_authtoken to set the
    configuration for trust for a long while. This is not a recommended
    practice as those values are for private use of keystonemiddelware.

    During the queens release a new configuration section (trustee)
    was introduced to collect those parameters:
    https://review.openstack.org/#/c/524936/
    The existing parameters are still read if [trustee] is not available,
    but the behavior is fragile and unsupported, so it is officially deprecated
    in Sahara as well.

    The trustee section is populated from the same values used for
    keyston_authtoken, so the same class is re-used in order to write
    the content of the section.

    Closes-Bug: #1763361
    Change-Id: I8c63c32d995cbe4140680d826869c25d855e77d1

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/puppet-sahara 15.0.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_sahara rocky-eol release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_sahara stein-eol release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_sahara train-eol release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_sahara ussuri-eol release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_sahara yoga-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_sahara victoria-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_sahara wallaby-eom release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible-os_sahara xena-eom release.