This commit adds Keystone audit middleware API logging to the Cinder
charm in versions Yoga and newer to allow users to configure their
environment for CADF compliance. This feature can be enabled/disabled
and is set to 'disabled' by default to avoid bloat in log files.
The logging output is configured to /var/log/apache2/cinder_error.log.
This commit builds on previous discussions:
https://github.com/juju/charm-helpers/pull/808.
Related-Pr: https://github.com/juju/charm-helpers/pull/893
func-test-pr: https://github.com/openstack-charmers/zaza-openstack-tests/pull/1200
Closes-Bug: 1856555
Change-Id: Ia7dbd6af2305e92eaa9a65890644c4a324ab2c65
Bug LP 1863232 introduced a new Apache configuration option called
WSGISocketRotation which allows users to disable wsgi socket
rotation. This patch makes this configurable with a new
wsgi-socket-rotation config option that defaults to the Apache
default and can optionally be set to False.
Closes-Bug: #2021550
Change-Id: Ieca45a470e7f827194780b2fee9f8c6049b94da3
Fix up organisation of storage backends in particular.
Make a corresponding minor change to config.yaml.
Apply README template.
Change-Id: Ic01bac2758f6659cd6cd821cb9672dd58804fdcc
* sync charm-helpers to classic charms
* change openstack-origin/source default to zed
* align testing with zed
* add new zed bundles
* add zed bundles to tests.yaml
* add zed tests to osci.yaml and .zuul.yaml
* update build-on and run-on bases
* add bindep.txt for py310
* sync tox.ini and requirements.txt for ruamel
* use charmcraft_channel 2.0/stable
* drop reactive plugin overrides
* move interface/layer env vars to charmcraft.yaml
Change-Id: Ie133bc41bf789e07d4d777e128617b21d822de30
Add new config option: `scheduler-default-filters`.
This is unset by default, so cinder retains the default value for
scheduler_default_filters.
Closes-Bug: #1956727
Change-Id: I9777bf8fe5ddbb69689db60c2790e8a4be57e1ab
Deprecate LVM support in the README and point to the
cinder-lvm charm instead. Edit config.yaml accordingly.
The CDG will soon be updated by having a page in the
'Special charm procedures' section included.
Include a section on NetApp support in the cinder-netapp
charm.
Links to the two cinder-* charms are momentarily broken.
And that's ok.
Edits according to the latest charm README template.
Change-Id: Ie4a0f337277ed14388f1b5c189efbbab568a29b7
Support new configuration to turn on image volume cache in Cinder
service. User can control the maximum size and count from
configuration too.
Closes-Bug: #1869903
Change-Id: If96dbb9c0974bfa1f6d67405bb430a7cd251f821
It's useful when multiple storage backends to be connected to Cinder.
The corresponding volume type must be created after a deployment via API
to take effect, e.g., `openstack volume type create VOLUME_TYPE
--property volume_backend_name=BACKEND_NAME`
Please note that there is a regression in upstream as LP: #1879578, so
it doesn't work for Train or later releases until the issue gets fixed.
The other way to have the similar effect is to edit the definition of
__DEFAULT__ volume type via API (available for Train or later releases).
Howevers it's not as flexible as the option in cinder.conf since it
doesn't allow any modification unless all of the volumes with the
__DEFAULT__ type get deleted.
Change-Id: I031a6bf2a066bb9d3157e545bb9df782a76551f3
Closes-Bug: #1884548
This patch adds a configuration option for oslo notification topics.
Charm Helpers can accept this option to fill the configuration
template appropriately.
Change-Id: Ia76a5c6524d6682efba9eaa2fb2d2e80dad458aa
Signed-off-by: Stamatis Katsaounis <skatsaounis@admin.grnet.gr>
This patchset implements policy overrides for cinder. It uses the
code in charmhelpers.
It also fixes several bugs in the bundles where the actual version of
cinder that was being installed was the distro default rather than the
one that the bundle described.
Change-Id: Ic979dcb96ddb931fadb1fa4a4b36108244ddf306
Closed-Bug: #1741723
Drop support for deployment from Git repositories, as deprecated
in the 17.02 charm release. This feature is unmaintained and has
no known users.
Change-Id: Icd464e950c6f53470311e3c110b530a69bff6e2f
The default HAProxy timeout values are fairly strict. On a busy cloud
it is common to exceed one or more of these timeouts. The only
indication that HAProxy has exceeded a timeout and dropped the
connection is errors such as "BadStatusLine" or "EOF." These can be
very difficult to diagnose when intermittent.
This charm-helpers sync pulls in the change to update the default
timeout values to more real world settings. These values have been
extensively tested in ServerStack. Configured values will not be
overridden.
Partial Bug: #1736171
Change-Id: I342c06066b26ffa8240f076e0c9f461cae21b9c4
Drop the v1 Cinder API for Pike+ since it is deprecated and no
longer maintained in the upstream code base.
Change-Id: I99e604916f6147b181f45a773c20f3adf2306788
Resync charm-helpers to pickup the capped worker-multiplier
changes when deploying in containers.
Drop the default value for worker-multiplier of 2.0; this
is now handled from within the codebase rather than via a
default configuration value, reflecting the differing
behaviours between container and non-container deployments.
Fixup amulet tests to use common helper for action
execution.
Change-Id: I7cac84fde5c43d1827f753e198b3f4a8e1e4151b
Closes-Bug: 1665270
Sync charmhelpers and add configuration option to allow access
to ceph pools to be limited based on grouping.
Cinder requires rwx access to pools associated with volumes,
images and vms (to support rbd snapshots).
Change-Id: If1734c430108e193df0a58dc4c06ebe2b79990e3
Partial-Bug: 1424771
- Remove Precise-Icehouse Amulet test definitions if they exist.
- Add Xenial-Newton Amulet test definitions.
- Add Yakkety-Newton Amulet test definitions.
- Use the percona-cluster charm in tests instead of the mysql charm.
Change-Id: Ifbb7822f6a495bd82d8c6135c2ae25d5c4051a2d
This change adds the config directive called
volume-usage-audit-period for versions >= kilo.
Also, According to the doc change I90dff1b5c2a7dd2943cfa7ff25bb63c08eb7986d,
messagingv2 should be the default for anything > Icehouse.
So, this change also sets the following configuration section for
versions >= mitaka.
[oslo_messaging_notifications]
driver = messagingv2
This change adds a specific configuration context that installs
a crontab entry for running the cinder-volume-usage-audit recurrently.
Change-Id: I0056edaac55210a1a1f509ec908ae61c0ea887df
Closes-Bug: #1623144
Signed-off-by: Jorge Niedbalski <jorge.niedbalski@canonical.com>
* openstack-origin is no longer required when using openstack-origin-git.
* Drop kilo from openstack-origin-git default values because upper
constraints doesn't work in kilo for openstack-dashboard and glance.
* Add flag to allow for disabling upper constraints when using
openstack-origin-git with user-specified git repositories.
Change-Id: Iec405c68b0b813c9a619c356ff8356bd5d4889fe
Change the worker-multiplier to a floating point config option type
instead of integer. This allows users to specify workers to be less
than the number of CPUs, which is useful in deployments with multiple
services deployed into containers on top of bare metal.
The fix is to simply change the config option type and to sync in
the necessary update from lp:charm-helpers.
Partial-Bug: #1602444
Change-Id: Iaf9aaa3cf1a87e2ed63cbd32df6c328e89c5814e
Signed-off-by: Billy Olsen <billy.olsen@gmail.com>
The following updates are picked up in the charm-helpers sync:
* Drop icehouse from deploy from source defaults
* Partial support for kilo-eol tag for deploy from source defaults
* Set upper constraints for openstack when deploying from source
* Improve systemd unit file generation for deploy from source
Icehouse is dropped from the openstack-origin-git defaults because
the default git repos don't work as-is for deploying icehouse so
let's not allow them to be deployed via default openstack-origin-git
values. The reason the default git repos don't work is because icehouse
didn't have the concept of upper-constraints so the depenencies aren't
capped, which causes problems.
Change-Id: Ia2e00b4a7a7076d4edcf143e194747ee2b1fdda8
Implement DNS high availability. Pass the correct information to
hacluster to register a DNS entry with MAAS 2.0 or greater rather
than using a virtual IP.
Charm-helpers sync to bring in DNS HA helpers
Change-Id: I745271cd85269469b85a9d06fe8af5df8d54ef1c
openstack-origin-git currently only supports YAML that specifies
the git repositories to deploy from.
This adds support for default openstack-origin-git values. The
default values supported are: icehouse, kilo, liberty, mitaka,
and master. For example: openstack-origin-git=master.
Change-Id: Iacd1103095985307394e472411e314c337044f4d
Openstack mostly defaults to using public endpoints for
internal communication between services. This patch adds
a new option use-internal-endpoints which, if set to True,
will configure services to use internal endpoints where
possible.
Closes-Bug: 1456876
Change-Id: Iadd1e4e8833f637d75d3b5080e49ddabb0f78427
Add charmhelpers.contrib.hardening and calls to install,
config-changed, upgrade-charm and update-status hooks. Also
add new config option to allow one or more hardening
modules to be applied at runtime.
Change-Id: I69c132b95290faa2cf14accb5e024f98b5aa9c6b
Adds in the config option for overriding public endpoint addresses
and introduces a unit tests to ensure that the override for the
public address is functioning correctly.
Additionally fixed unit test to not attempt an actual restart of
the cinder services.
Myles Penner