The Magnum service allow enables policies (RBAC) new defaults and scope by
default. The Default value of config options ``[oslo_policy] enforce_scope``
and ``[oslo_policy] oslo_policy.enforce_new_defaults`` are both to
``False``, but will change to ``True`` in following cycles.
To enable them then modify the below config options value in
``magnum.conf`` file::
[oslo_policy]
enforce_new_defaults=True
enforce_scope=True
reference tc goal for more detail:
https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html
Related blueprint secure-rbac
Change-Id: I249942a355577c4f1ef51b3988f0cc4979959d0b
If the services are disabled in the devstack/settings file, it disables
them for everyone who uses the magnum devstack plugin. Some people (like
shade) use both magnum and swift to test things. Putting this in the
gate hook means it's used in all of magnum's jobs, but not in other
people's jobs.
Change-Id: Icd82a4ab68533f39f967575c2125b0f61c70e0a6
Swift Ceilometer and horizon are not used. Disabling them
it will give us space.
Cleanup disabling of octavia and neutron/lbaas.
Closes-Bug: #1646870
Closes-Bug: #1648148
Change-Id: I4b177421f0eb0a058b8927b9d2dd12865d3c920e
This reverts commit 45f071e36e.
The Temporary fix can be reverted as devstack has released
the fix in following patch:-
https://review.openstack.org/398012
Change-Id: I837f4925cf4c797bd1b02a7bf244ca5742159971
Closes-Bug: #1628267
Closes-Bug: #1629133
We can merge this temporary fix and track the following
related bugs to revert. For details for the issue, please
refer to the bug descriptions.
Related-Bug: #1628267
Related-Bug: #1629133
Change-Id: I51feb6ccdc0fab91a591568866e6801f2bbb319b
Now that heat is available as a devstack plugin, we should
use it. In-tree devstack code for heat is planned to be
removed soon[1].
And also, this patch remove `update_heat_policy` function
in devstack plugin. Because fetching global stack list is
already option to use in Magnum.
[1] https://review.openstack.org/#/c/317618/
Change-Id: Iab675da5ea8d02b3f7e71f6169c81724a0066858
Co-Authored-By: OTSUKA, Yuanying <yuanying@fraction.jp>
LBaaS v1 api is completely removed by neutron, so it
cannot be used now. Added Support of LBaaS v2 API.
Now all COE's uses LBaaS v2.
Co-Authored-By: yatin karel <yatin.karel@nectechnologies.in>
Change-Id: Idbccbe1065857449fc8e158115b7833b68c2da9f
Partially-Implements: blueprint magnum-lbaasv2-support
"m-api" is already used by Manila so switch to "magnum-api"
and "magnum-cond" for devstack.
Change-Id: I0f5e57dd263164652813088fe624f62cda664727
Closes-Bug: #1569879
And move them into "Modify to your environment" section
because they are not appropriate for every environment.
Change-Id: I6d49e1df1f114dc8abc4404f469e25bb3a2a0a8b
Devstack plugin, such as ceilometer, should not be enabled in
settings, since the path of the plugin is not available at that time.
Therefore, users have to manually enable it in local.conf, if they
run devstack locally.
Closes-Bug: #1497706
Change-Id: Idca09449ab5a3a5276282ffbcbb0aa73f35c34ae
This patch changes to use barbican plugin for devstack.
Change-Id: I7d2620888bef3ae6bcc34c333ef3a935245195cf
Partial-Implements: blueprint barbican-support
Magnum will use barbican to store CA and magnum client certs for
TLS support. This patch adds barbican service to devstack
configuration.
Change-Id: Id112699be08788466e7cd9806082e150cbdc15e2
Partial-Implements: blueprint magnum-as-a-ca
Magnum is going to send metrics/notifications to ceilometer. The
metrics will be leveraged to trigger ceilometer alarms, which is
needed to achieve autoscaling bay.
Change-Id: Ib80c9ab699a72701cefc4dfeb7f2542cecd8f2c9
Partially-Implements: blueprint autoscale-bay
Partially-Implements: blueprint magnum-notifications
Load-Balancing-as-a-Service (LBaaS) is a service of Neutron that can
be leverage to create a load balancer. We are going to support multiple
k8s master nodes, so we need load balancers to route traffic to replicated
master nodes.
Change-Id: If92568b35097180760d434125d2973cd5a1ec019
Partially-Implements: blueprint make-master-ha
1.Since the local.conf need to live on devstack directory
Refine the cat command to be obvious
2.Also fix one issue, as devstack would use localrc directly
if localrc file exists, but localrc not have enable_plugin
setting. This would cause devstack install without magnum enable.
So we use local.conf as the default configuration kick point to
make magnum can be installed with devstack
Closes-Bug: #1441977
Change-Id: Ib06cd38ed9744d42e664ff92d486c29e7932851f
Create a formal tox target for functional tests.
Also we should not be overriding the user's localrc.
Closes-Bug: #1440125
Change-Id: Ide639ea89050cf3e1f1e9e40c687d506998f7587
Switch over to the new plugin style as documented here:
http://docs.openstack.org/developer/devstack/plugins.html
Makes it very easy to setup a CI job. Added a new
directory for functional job and the tests are run
from the post_test_hook.sh. There's even a "magnum bay-list"
in the shell script to show that we are actually making
calls to the magnum API endpoint and things are working
fine. Note that this is just the minimal plumbing needed
and there's a lot more effort needed to come up with
proper test cases for testing magnum functionality.
Closes-Bug: #1439621
Change-Id: I88d45015338ef55713b32de196f9071c8fc2031b
ricolin