Also pull bind cookbook from git to fix version pinning issues.
Change-Id: Ie25e1a6521360540c044d8f58a76c4e9f660696a
Signed-off-by: Lance Albertson <lance@osuosl.org>
- Cookstyle fixes
- Refactor Berksfile to use groups so we can exclude integration testing
cookbooks
- Update documentation
- Cleanup line wraps
- Enable sensitive resources for the template[/etc/heat/heat.conf] to
resources improve security.
- Update delivery configuration to exclude integration cookbooks
- Fix ChefSpec output.
- Add missing ChefSpec tests
- Switch package installations to send packages as arrays instead of individual
package resources. This generally speeds up chef runs.
- Cleanup array syntax using %w() instead of []
Depends-On: https://review.opendev.org/701027
Depends-On: https://review.opendev.org/706101
Depends-On: https://review.opendev.org/706151
Depends-On: https://review.opendev.org/706157
Depends-On: https://review.opendev.org/708059
Depends-On: https://review.opendev.org/713285
Change-Id: Ifb3a9de9eecc370e46f43a73ed77008a7b21594b
This is for individual cookbook integration testing.
Depends-On: https://review.opendev.org/702772
Change-Id: I381af7639cc0d0a834c391b1b12f26ef7300bb4d
This updates all references of let(:chef_run) to cached(:chef_run) to
speed up tests. By doing this, we have to create a new cached(:chef_run)
block whenever we need to adjust node attributes for testing.
Speed was improved from 5 minutes 36 seconds to 48.07 seconds
Change-Id: I4e88431d863450b6f41d6711612bfb12d4024683
- Replace git.openstack.org with opendev.org
- Update some documentation
- Move README.md to README.rst for better rendering
- Drop obsolete bootstrap.sh script
Change-Id: If47b6b8c525c92a9421468e371c22f210b7f5e80
I noticed this was missing during some upgrade testing when I noticed the heat
services didn't start back up after shutting them down for the upgrade and
running chef. I'm not sure why this was set to enable only.
Change-Id: I8048270047767bda7414b2baee176f7bc9ab7a8b
Signed-off-by: Lance Albertson <lance@osuosl.org>
Python2.7 is going EOL soon, let us deploy python3 for Rocky from the
start, so we avoid having to switch later.
Depends-On: https://review.opendev.org/682918
Change-Id: Ic989d9b4c20b6e578e96394dade4e7bef5ae6b58
This provides a collection of fixes required to converge properly:
- fog-openstack-1.x already appends "auth/tokens" so we no longer need
to do that
- Remove references to deprecated
node['openstack']['api']['auth']['version'] attribute
- Remove creation of admin deprecated endpoints
- Add python-heat to common packages on Debian system so that the
heat-manage binary is available
- Remove and refactor use of deprecated identity_uri_transform function
Change-Id: Idfd9aed09ccd5c3871cac71dbe0b51c921f1ec0e
Signed-off-by: Lance Albertson <lance@osuosl.org>
Starting with Queens, upstream has moved the Orchestration (heat)
dashboard from the main dashboard package into a separate package.
backport: queens
Change-Id: Ifb2018623bd4df250c2d3d8c5a7473f6cff94fe8
* use git.openstack.org instead of github for berks dependency
resolution
Depends-On: https://review.openstack.org/549345
Change-Id: Iddb51ac401737a7a453560f03ff8dc468b1b67a1
Zuul no longer requires the project-name for in-repo configuration.
Omitting it makes forking or renaming projects easier.
Change-Id: Ib754a14335fc80fdf1ca292c8c98dfb101a3f58b
This patch grants heat_domain_admin the admin role in the heat domain
(rather then in the service project).
We use :grant_domain instead of :grant_role, because we are setting a
role in a domain, not in a project.
Note that for the user to actually exist in the heat domain, a
sufficiently recent openstackclient cookbook is required -- otherwise
the domain_name attribute is ignored during user creation.
Also, we remove the user_name attribute (gets ignored by resource
action).
Change-Id: I747e2dedbc517cc3deb2675590fb982459c560a0
This patch removes the openstack_user resource with :grant_domain
action. A user is always created within a specific domain; such a
membership cannot be tacked on later. This resource gave the heat user
the role intended for its project for the domain (i.e., for the Default
domain instead of for the service project).
We add the domain_name attribute that creates the heat user in the
desired domain. Note that this change needs a sufficiently recent
openstackclient cookbook -- otherwise the domain_name attribute is
ignored (which does not matter as long as the heat user is to be created
in the Default domain).
Change-Id: Ifa3d344a3d9094dd1272b126a4dc9ab951c00972
This patch removes the role_name when using openstack_user's :create
action (it gets ignored by the target method).
Note that the spec test would still pass if only the line in
identity_registration.rb (but not the test) were changed, because the
code that actually does grant the role to the resource is executed right
after user creation and before any tests check the resource for the
existence of the role_name attribute. In other words: if the argument
were required in a call but only supplied in another call, the spec
tests would not catch it. Something to watch out for.
Change-Id: Ic45dd42453d9f8ae2a8c4d04f830cff67740cac6
In the keystone_authtoken section, the key has already been changed
from auth_plugin to auth_type. This patch does the same for the trustee
section (see [1]).
[1] https://docs.openstack.org/heat/pike/install/install-ubuntu.html
Change-Id: Idd82170107043bc2497261c34859844343e783a1
This patch removes duplicate resources from identity_registration.
Identical definitions can be found in the same file.
Change-Id: Ibabac07a86154829a1eb2a5deccc70bf50030c45
- currently non-admin user aren't able to create stacks with i.e.
Resource OS::Heat::SoftwareDeployment
- added heat domain
heat domain_admin
heat_stack_owner and user role
- added missing configuration options
- fixed some smaller ruby /cookstyle offenses
Change-Id: I6ae544dcc6260050304e66e227383e0e944a6bb6
- Switched default linter to cookstyle
- Renamed rake tasks to better conform with Chef conventions
- Normalized template banner
Change-Id: Icc3eca4b2d17a6d1ef66c1c7e75513de0ee3cac9