Commit Graph

103 Commits

Author SHA1 Message Date
Ghanshyam Mann a048e1094b Retire openstack-chef: remove repo content
OpenStack-chef project is retiring
- https://review.opendev.org/c/openstack/governance/+/905279

this commit remove the content of this project repo

Depends-On: https://review.opendev.org/c/openstack/project-config/+/909134
Change-Id: Id5659595c1a67540fff5434197a06d33cdb9d85e
2024-02-17 20:53:54 -08:00
Lance Albertson 2e5dd8c317 Cookstyle 6.19.5 fixes
Update ChefSpec due to changes made in apache2 cookbook.

Depends-On: https://review.opendev.org/756168
Change-Id: Ie849f5bae082e94581146793f964d0e001a7c8c8
Signed-off-by: Lance Albertson <lance@osuosl.org>
2020-10-05 20:26:07 -07:00
Lance Albertson 1b39032b8d Stein fixes
- Cookstyle fixes
- Refactor Berksfile to use groups so we can exclude integration testing
  cookbooks
- Update documentation
- Enable sensitive resources for the template[/etc/cinder/cinder.conf]
  and to resources improve security.
- Update delivery configuration to exclude integration cookbooks
- Fix ChefSpec output.
- Switch package installations to send packages as arrays instead of individual
  package resources. This generally speeds up chef runs.

Depends-On: https://review.opendev.org/701027
Depends-On: https://review.opendev.org/706151
Depends-On: https://review.opendev.org/706157
Change-Id: I73948a67e798477cfe7d3cf62474d0ea96f90db2
2020-03-19 11:26:06 -07:00
Lance Albertson b81d56bdc7 Improve ChefSpec test speed by enabling caching
This updates all references of let(:chef_run) to cached(:chef_run) to
speed up tests. By doing this, we have to create a new cached(:chef_run)
block whenever we need to adjust node attributes for testing.

- Remove unused default recipe ChefSpec
- Formatting cleanup

Speed was improved from 3 minutes 9.1 seconds to 38.21 seconds

Change-Id: I470991c600bca0ad2b6a389923a2fe8c954b7008
2020-01-08 11:16:23 -08:00
Samuel Cassiba 681a71fb33 starting rocky development patch
Change-Id: I829e8e793d107b9bf6d35781480cafdb27f7a928
2018-08-03 06:39:18 -07:00
Samuel Cassiba 93882de603 Simplify identity endpoint
Per the Keystone Install Guide[1] the admin endpoint is superseded in
favor of a single public endpoint. As a result, the admin endpoint is no
longer deployed by default.

[1] https://docs.openstack.org/keystone/queens/install/keystone-install-ubuntu.html#install-and-configure-components

Change-Id: I188edfcfbd6f8261a648c03b6e46532b960d3ac6
Implements: blueprint simplify-identity-endpoint
2018-06-14 21:28:42 -07:00
Jan Klare 607fd77784
remove all ceph related attributes and specs
Change-Id: I24b1a8f8e735e50de535e191cb6cfca489923c25
2018-04-05 16:30:31 +02:00
Samuel Cassiba 60a38b538d Initial block-storage Pike updates
- Changed the default linter to cookstyle
- cinder-group-active was missing a Provides header for the SysV init script
- Switched the qemu package to SCL for CentOS to get a newer release
- Normalized template banner comment

Change-Id: Iec59e0c8e3cb0b83db92a0a9f8db34a40953351f
2017-08-25 09:15:49 -04:00
Samuel Cassiba d2ff4496bb Added systemd unit, style and lint fixes for chefdk
- cinder-group-active is still SysV, but can and will start via systemd if
  coaxed to do so.
- Style and lint fixes for newer chefdk
- Removed ancient Gemfile
- Rewrote metadata.rb for readability

Change-Id: I4c26aea78220eb20fc4e5e964af93414855df5f6
2017-08-02 02:15:54 -04:00
Jens Rosenboom a3ba8685a7 Make cinder work for Ocata
- cinder-api now runs under apache2 and no longer as systemd service
- cinder-volume needs explicit backend configuration
- don't install deprecated cinder v1 API endpoints
- clean up some config options

To be added in a follow-up:
- Make backend configuration more flexible
- Replace distro provided wsgi setup with our custom one

Change-Id: I77ac294fd8e1cd4e6bc39667ddfdea21c4daed8a
2017-03-30 14:34:15 +00:00
Christoph Albers 68da464eae RPC_backend / transport_url workover
- removed deprecated rabbitmq attributes
- added rabbit_transport_url

Change-Id: I19ff8e4df8f559bf03ff746fcc49be9425edd84e
Depends-On: I0a6da37e3f2b839590b6349fd906d47c5206fbb3
2016-12-20 11:45:14 +00:00
Christoph Albers 49d23da167 use_cookbook-openstackclient/identity_v3
- Now use cookbook-openstackclient to create endpoints role service and
  user
- added domain creation and access granting
- added values to work with identity_v3
- rewrote specs to work again
- added needed keystone_authtoken attributes
- updated README

Change-Id: I2f339055883354c6a8a77daa7967ff279c4d18d9
Depends-On: I0f8955f05de9b33711c54b9a198f45018cceb8e1
Depends-On: If7b4d6e563081a0be9957353d73ef61a9688df56
2016-09-30 10:58:23 +02:00
Christoph Albers 4a7dc692b9 refactoring final step
* added endpoint attributes (moved from common)
* removed qpid as a messaging option (can be incuded in a wrapper)
* deleted default attributes from nova.conf.rb originated in
  openstack-common
* adapted optimized endpoint logic
* removed rubocop exceptions in recipes and regenerated the
  .rubocop_todo.yaml containing all remaining exceptions
* added versionbumb for refactored os-identity and common
* moved version up to 13.0.0 for mitaka release
* removed fedora, suse as supported platform
* adapted the specs (unit tests) to work again
* added new logic into templates/default/cinder.conf.erb
* refactored attributes throughout all recipes that were connected to
  the attributes used for the cinder.conf.erb template to adapt the new
  template attribute syntax
* moved all attributes from attributes/default.rb that were used in
  cinder_conf.erb to attributes/cinder_conf.rb
* refactored attributes to fit upcomming template logic
* refactored recipes to fit upcomming template logic
* removed all attributes from default.rb and cinder.conf.erb which are set
  as default in attributes, openstack doc and used to render the template

Depends-On: Ifa5a7f4e1df47a3961976e64f654224864c3dcb4
Depends-On: I3262b2e6f792f37c32a446e6567790b82bdd4613
Depends-On: I0547182085eed91d05384fdd7734408a839a9a2c
Implements: blueprint cookbook-refactoring
Change-Id: Idadc97bd7380d6c4f9f6f33d9c6b1215a5f24772
2016-02-08 14:39:27 +01:00
Min Min Ren 528cb177f6 Add database slave connection configure
- According to the bool attribute
      node['openstack']['endpoints']['db']['enabled_slave'], enable/disable
      nova database slave_connection
    - Add the slave_connection generated from db_uri function

Implements: blueprint sql-slave-connection-support

Change-Id: I9520441952993e8c6b4205e6886778815b5a2e4b
2015-08-28 13:36:33 +08:00
Jens Rosenboom ea2fbba04a Do not put empty default_volume_type into config
Change I1bb94dc1283e50645e4aece600acc52ae17db56b added the config option
default_volume_type with a default value of nil. With this, cinder fails
to create volumes unless a type is explicitly specified. So better only
write this value into the config file if it is set to some non-nil
value.

Change-Id: I7de8c6cc5a424b5b5021675d89a5dba71d72dce0
2015-08-18 15:13:12 +02:00
XiaoPei Liu 5140ba531d Allow fixed_key to be configurable in cookbook
The fixed_key attribute should be added in cookbook for volume
encryption

Change-Id: I83f697fde32bf1ccaaa3187936c664c61b1e7af9
Closes-Bug: 1467797
2015-06-26 11:17:25 +08:00
Mark Vanderwiel ba480c6a99 Allow rabbit mq kombu ssl configuration
Add the rest of the kombu ssl configuration options.

Change-Id: I9dc682a2a8e4df289b9c0bbca11208183d1ff71b
Partial-Bug: 1464706
2015-06-16 10:08:29 -05:00
wenchma 3c0ceb9f4c Add rabbitmq max_retries and retry_interval in cinder conf
Oslo.message using rabbit_max_retries and rabbit_retry_interval to
define reconnect rabbitmq server times and interval when can not
connect to rabbitmq server.

Change-Id: I449f7be68dd9c9adbad587a47cf9d9dcc3462369
Closes-bug: #1439968
2015-06-12 15:06:43 +08:00
Mark Vanderwiel 0b94103098 Cleanup minor rubocop offenses
Cleaned up all the minor rubocop issues, the ones left relate to
complex logic and what I think is a bug in rubocop for nested
vs compact modules/class definitions.

Change-Id: I5ac6d513c3b1397ba7205dc6f661134a93d17741
2015-05-28 14:43:16 -05:00
Jenkins 6a8e987f42 Merge "Add host id to cinder default section" 2015-05-08 15:52:54 +00:00
Lan Qi song 2ea252646d Make enable v1 and v2 api option configurable
Change-Id: I40efdc8c31dc38f214cc300cc68279af1b614089
Closes-Bug: #1452730
2015-05-08 11:15:03 +08:00
Mark Vanderwiel c9f1018d9b Add host id to cinder default section
Cinder volumes are associated with the cinder host that created them.
This unique host id can be changed in the conf file. This patch adds
support to allow that.

Change-Id: I9295ed1bfa24bfac8325bd347a92b5e334a31371
Closes-Bug: #1451967
2015-05-06 16:05:55 +00:00
Jenkins b4ae9f3dec Merge "use LVMVolumeDriver as default. LVMISCSIDriver is deprecated. See also: cinder/volume/drivers/lvm.py" 2015-05-06 15:26:08 +00:00
Masaki Matsushita 0fd962dae2 use LVMVolumeDriver as default.
LVMISCSIDriver is deprecated.
See also: cinder/volume/drivers/lvm.py

Change-Id: I08b157ee7fbb0d61c8c9ec406edf2240a9a40c1d
Closes-Bug: #1451363
2015-05-06 19:39:53 +09:00
Lan Qi song cba98483b2 Add support for cinder-backup service
Partially-implements: blueprint chef-cinder-backup
Change-Id: I961d8875e35c26efa2ff9e7be0bb576cb8e345fa
2015-05-06 13:55:56 +08:00
Jenkins cb7a11a2c4 Merge "move from bundler to chefdk" 2015-04-29 14:30:57 +00:00
Mark Vanderwiel 6f44d71631 Fix lock_path to be based upon state path
On some recent platforms, systemd based, the /var/lock/ path gets
cleaned up at reboot and causes issues for projects like cinder.
Nova and neutron changed long ago to base the lock path off the
state path, this change does the same thing now for cinder.

Change-Id: Ibe693c21cfc63dd5b6e1753c85081a952005b293
Closes-Bug: #1449711
2015-04-28 14:18:52 -05:00
Jan Klare 16a6af5000 move from bundler to chefdk
- deprecated Gemfile
- Updated TESTING.md and README.md
- updated Rakefile to use chef exec insted of bundle exec
- replaced Runner with SoloRunner in specs

Change-Id: If3e3b54c9dbaa8bb51164bc85fd93ff5fc54ec4d
2015-04-28 17:56:15 +02:00
wenchma 226d27a12d Update the deprecated group/name to Kilo release
For Kilo release, there are many deprecated group/name in conf files of openstack,
so we need to change the deprecated group/name to new group/name.

blueprint conf-section-update-for-kilo
Closes-bug: #1436170

Change-Id: Iec23f1b98fbf0c0772df7aba6ece9e0b32a85dc1
2015-04-23 18:11:06 +08:00
Mark Vanderwiel ab8aa01421 Use identity_uri_transform
Remove deprecated keys and use identity_uri via the new transform
helper method.

Also, cleanup specs for endpoint testing to make sure Common is
fully tested.

Change-Id: I5a26d8cb83193e4bf66bb952f7973838d6acba40
Implements: blueprint identity-uri
2015-04-07 06:14:57 +00:00
TaoBai c836a99b04 Update cookbook for storwize new features
There are new configuration items added to cinder.conf
for new features "QoS" and "volume-replication" in Juno.

Change-Id: I6f69dbe6cc1e0a1dbb5da1417d44211463a7df36
2015-03-31 03:22:44 -07:00
wenchma c11812f7eb Enable kombu_ssl_version configuration for Rabbitmq SSL
This commit depends on https://review.openstack.org/#/c/165302/

Change-Id: Ibadf0770c0b340be60df12431baeb42a5a119c24
Closes-bug: #1433405
2015-03-23 16:43:10 +08:00
Edwin Wang ab7c43d8ef Add config for IBM FlashSystem
Modify config in attributes/default.rb, recipes/cinder-common.rb,
spec/volume_spec.rb, spec/cinder_common_spec.rb and
templates/default/cinder.conf.erb with SAN login and password.
It has been merged in Kilo. iSCSI code is on the way.

Change-Id: I784f69424a5f1b20f99ba5faccc85b3066e23de3
2014-12-31 13:47:13 +08:00
Ken Thomas b25e15d32d Use new common specific_endpoint routines
Now that admin_endpoint, public_endpoint, and internal_endpoint
in the common library are working, these are the changes to use
them in the openstack-block-storge recipes.

Change-Id: Ief4b9d011f55236270a4dc18f2b1f3f769d0a493
Partial-Bug: 1412919
2015-02-06 14:37:15 +00:00
Elliott Davis f75d819c2f Add dependency on upstream ceph cookbook for better key management
The upstream ceph cookbook already hooks into chef for environment information.
This patch utilizes the client LWRP to create or add ceph keys for RBD support.
This patch also changes some default attribute names for more sane organization

Partial-Bug: #1409943

Change-Id: Ibba6c568d4e4d00153061458b71593cd28714e60
2015-02-05 09:11:12 -06:00
Mark Vanderwiel e6d89d0689 Allow storwize private key without san_login and san_password
Using The san_private_key by itself is a common use case. The
current code requires the san_login and password to be set.
This patch allows the key to be used without the login and password.
Also removed some clutter comments from the conf template.

Change-Id: Iea84c8310eec39481c115587219cdac35c9b3589
Closes-Bug: #1398469
2014-12-02 12:55:30 -06:00
Sachi King e23f8bdc1f Add glance_api_version to cinder config
This allows the administrator of the cloud the ability to specify
the glance API version.  This is required for features such as
Copy on Write (CoW) as Glance's v1 API does not expose enough
information to allow Cinder to CoW the image.

Change-Id: I3ba80207c22916629d210a23aad94bd143d2b00e
Co-Authored-By: Craige McWhirter <craige.mcwhirter@anchor.com.au>
Closes-bug: #1390345
2014-11-20 09:25:36 +11:00
Mark Vanderwiel 6d909ff139 Allow san_password attribute for svc driver
* add san_password= for storwize
* remove unused san_password attributes, get_password method is used
* add tests for password both storewize and solidfire

Change-Id: I4afde431332ca914d078bc3e30362ef22961016f
Closes-Bug: #1384085
2014-11-14 09:06:16 -06:00
Sasikanth cf9ec63b94 Update gpfs volume driver path
* Change of driver path from "drivers.gpfs.GPFSDriver" to
  "drivers.ibm.gpfs.GPFSDriver"
* Fix issue of assigning "gpfs_images_share_mode=copy_on_write"
  even if the parent attribute "gpfs_images_dir" is not defined

Change-Id: Ica00f00901502857d5d21ef7ce7ae3b68e4ca9b7
Closes-Bug: #1389955
2014-11-07 15:04:50 +05:30
Sachi King 5b2b60b319 Add default_volume_type to cinder config
This allows the administrator of a cloud with multiple backends to
define which volume is the default when a user creats a volume without
specifying a volume type.

Change-Id: I1bb94dc1283e50645e4aece600acc52ae17db56b
Co-Authored-By: Craige McWhirter <craige.mcwhirter@anchor.com.au>
Closes-Bug: #1389292
2014-11-04 17:16:31 +01:00
jun xie f11cea4608 Add glance_ca_certificates_file
This commit adds glance_ca_certificates_file into cinder.conf.
It is used for glance client requests.

Change-Id: I4449ce8ec67af70463fd2107749a555c634767d8
Closes-Bug: #1389071
2014-11-04 11:53:29 +08:00
chenxiao 5ebe4b2756 Configure glance_api_insecure and glance_api_servers
This change adds some attributes into the cookbook so
that they are configurable. They are mainly to configure
for glance_api_insecure and make glance_api_servers to be
prefixed with scheme(http or https).

Change-Id: I79e04b47918fe1ec0b45472bd2cec9afa73d5897
Closes-Bug: #1383619
2014-10-22 15:55:21 +08:00
Jenkins 8c42b6bd4c Merge "Add attributes for cinder quotas" 2014-10-09 21:23:28 +00:00
Mark Vanderwiel 5d0aac6578 Add attributes for cinder quotas
Add a few more quota attributes
* quota_snapshots
* no_snapshot_gb_quota
* use_default_quota_class

Change-Id: Ib621218b5ac67dca536ce18d587fc70e3068faf3
Closes-Bug: #1367403
2014-09-29 10:27:15 -05:00
chenxiao 5641af2512 Allow cinder authtoken settings to be configurable
This patch is for allowing cafile, insecure,
memcached_servers, memcache_security_strategy,
memcache_secret_key and hash_algorithms to be
configurable.

Change-Id: If4e75092f969bb6b5df29d715e1cff696e41a9a3
Closes-Bug: #1370906
2014-09-29 09:57:49 +08:00
Mark Vanderwiel 094e023ccc Add attribute for ibm nas stroage driver ibmnas_platform_type
* Add new ibmnas_platform_type attribute
* Fix minor bug with nas_ssh_port

Change-Id: I147fbb75cf75357f578e4f84a0d898149be9b1d0
Closes-Bug: #1370574
2014-09-23 10:12:23 -05:00
Jenkins 639961657d Merge "Add attribute for osapi_volume_workers" 2014-09-23 02:29:18 +00:00
leileiz 3b3c18ff81 Update cinder.conf permission
cinder.conf contains some secret information such as qpid password.
To prevent unauthorized users to access it, this file should be set
as 640 mode.

Fix bug 1369467
Change-Id: I12a0e6e3e492397f1282366ab38ed1e1f46997f7
2014-09-17 06:49:38 -04:00
Mark Vanderwiel 5ef8617161 Add attribute for osapi_volume_workers
Change-Id: I99b7f5284a7f5eeb8cf5608937043b2b11217fec
Closes-Bug: #1368873
2014-09-12 12:19:08 -05:00
Mark Vanderwiel e84947717a Move keystone authtoken keys into cinder.conf
* Remove the keystone keys from api-paste.ini template
* Add the keystone keys to cinder.conf template
* update specs

Change-Id: I5cff962fe200cc1b63352b5e3491f7afed9897f7
Closes-Bug: #1359864
2014-08-25 09:54:35 -05:00