The changes in [0] sadly were almost, but not quite, completely broken.
They introduced config options that do not exist in designate and also
made secrets being saved into the node config.
Fix all this, also clean up the remainder of a workaround that is no
longer needed.
This was partially fixed for stable/queens in [1], amended the
cherry-pick accordingly.
Conflicts:
recipes/common.rb
[0] If4e185eb58a525e22971c7a8b876274c353db847
[1] https://review.opendev.org/606094
Change-Id: I5ccb4fa5d8f3a003c4dd1b07e1c9ab2a99246dd6
(cherry picked from commit be2fd380fa)
According to the Designate upgrade notes[1], the options api_host and
api_port have been deprecated with OpenStack Newton, and they do not
work with the Queens release.
[1] designate-api’s api_host and api_port configuration options have
been deprecated, please use the new combined “listen” argument
in place of these.
https://docs.openstack.org/releasenotes/designate/newton.html
Change-Id: I04e9680e3b850b8a7cc5b7557c430e5453602956
Per the Keystone Install Guide[1] the admin endpoint is superseded in
favor of a single public endpoint. Although internal goes through the
same instance, we should differentiate for project traffic and OpenStack
service traffic.
[1] https://docs.openstack.org/keystone/queens/install/keystone-install-ubuntu.html#install-and-configure-components
Depends-On: Id74966d9f1279f725bc41c08e434230a7845bbc1
Change-Id: I1adb3066c83aaffe8b22f2f2553f634483371974
Implements: blueprint simplify-identity-endpoint
- adds Chef Delivery config using the Chef community standards
- adds a blank default recipe to satisfy verification tests
Change-Id: I47fa53ce6a0e4d43e3de726f07b3c1d415fc303a
Implements: blueprint deprecate-rakefiles
This patch removes the openstack_user resource with :grant_domain
action. A user is always created within a specific domain; such a
mmembership cannot be tacked on later. This resource gave the user the
role intended for their project for the domain (i.e., for the Default
domain instead of for the service project).
We add the domain_name attribute that creates the designate user in
the desired domain. Note that this change needs a sufficiently recent
openstackclient cookbook -- otherwise the domain_name attribute is
ignored (which does not matter as long as the designate user is to be
created in the Default domain).
* removed direct links to official openstack-chef project, since this
cookbook will incubate in the cloudbau namespace and maybe moved later
to the official openstack/cookbook-* one
* set version to 0.1.0 to avoid any assumed link to any official release
( 16.0.0 would be pike, but it might be also released with ocata or
newton )
* removed version pinning for dependenies for incubation
* cleaned up some attributes
Jens Harbott