Commit Graph

621 Commits

Author SHA1 Message Date
Takashi Kajinami 9a728d5a5d Expose rabbit_transient_quorum_queue
Depends-on: https://review.opendev.org/911021
Change-Id: Icdc456fb132d74037dff7ce5c502994103061258
2024-03-13 16:14:10 +09:00
Takashi Kajinami d2625af949 Deprecate parameters for certificate plugins
... because certificate plugins were deprecated some time ago in
Barbican and are being removed in this cycle.

Depends-on: https://review.opendev.org/c/openstack/barbican/+/909640
Change-Id: Ie2dacb037a3d5ba8f1732ddb8f4b8ea8ded1e5ed
2024-03-08 13:41:21 +09:00
Zuul 9c0930273d Merge "Refactor resource dependencies" 2024-02-29 08:15:12 +00:00
Takashi Kajinami 33492bfc70 Support [queue] asynchronous_workers option
... which determines number of processes launched in barbican-worker.

Change-Id: Ia31a7d440ba3102afa7b5972fe893cfb4f1817a1
2024-02-25 16:54:46 +00:00
Takashi Kajinami 276812bec6 healthcheck: Expose ignore_proxied_requests parameter
Depends-on: https://review.opendev.org/909807
Change-Id: Id5c5cb90a50983357d0c8001eedefedb3fd60f4d
2024-02-22 03:04:48 +00:00
OpenStack Release Bot ce4ec934ef reno: Update master for unmaintained/yoga
Update the yoga release notes configuration to build from
unmaintained/yoga.

Change-Id: I416555000af29749a62695a6ca7bb1d693d77b98
2024-02-21 16:43:04 +00:00
Takashi Kajinami 7040e66812 Refactor resource dependencies
This refactors resource dependencies to improve the following points.

 - Avoid unnecessary dependencies across services. For example aodh
   service does not require cinder db.

 - Restart only api service when config files like paste.ini, which
   are used only be api service is changed.

Change-Id: Iad138f5d2e8c7427e02b889c43c26f00213636f3
2024-02-17 21:23:16 +09:00
Zuul 4947050bc7 Merge "Make 'file_path' a class method" 2024-01-22 17:28:00 +00:00
Takashi Kajinami 3e3becf913 Make 'file_path' a class method
This is required to support prefetch and purge properly.

Change-Id: Ia7e10057637d26489bf4fa5589aaa1de6a03b151
2024-01-19 10:36:54 +09:00
Zuul 926d47ea1d Merge "healthcheck: Expose allowed_source_ranges" 2024-01-18 16:42:11 +00:00
Takashi Kajinami 7c460507f2 healthcheck: Expose allowed_source_ranges
... which was added to puppet-oslo recently.

Depends-on: https://review.opendev.org/905557
Change-Id: I5d81635643b0cb8ceac80702e2d539db73c598e9
2024-01-17 02:39:52 +09:00
Zuul b23fc4b8cb Merge "vault: Drop redundant hard-coded default of use_ssl" 2023-12-15 18:21:08 +00:00
Zuul f5b72e871d Merge "kmip: Leverage the service default" 2023-12-15 18:00:44 +00:00
Takashi Kajinami 01ececb278 vault: Drop redundant hard-coded default of use_ssl
... because the option defaults to false in Barbican itself.

Change-Id: I328421404969571111a24d9c8a42c3da884a512b
2023-12-15 16:50:35 +09:00
Takashi Kajinami 5bd12fd7f4 kmip: Leverage the service default
The kmip plugin uses the reasonable default tcp port (5969) in case
the port option is not set.

Change-Id: Ic32a397e93479f7d54e22e3f94e35c7c95dbbca4
2023-12-15 16:42:32 +09:00
Takashi Kajinami 784c7fd120 retry_scheduler: Simplify package/service check
... by maintaining os-family handling in the centralized place.

Change-Id: Ib0cc4d0470296fa58fd89cc53bb982bd7424afbb
2023-12-11 22:40:50 +09:00
Takashi Kajinami 19f9032983 Use new openstackclient tag
The new openstackclient tag was added so that we can get all resources
about openstack CLI more easily. This adds this tag to barbicanclient
because the package provides some sub-commands.

Change-Id: I8f1f8b4a6de6ca0d95c2f53a89a1d50a6c82d29e
2023-11-19 16:16:23 +00:00
Takashi Kajinami af6d42ba7b Bump supported Debian version to 12 (Bookworm)
Debian 12 was released in June 2023. Recent versions of OpenStack
(actually, 2023.1 and later) no longer support Debian 11.

Change-Id: I82bdaa9a664a6b8e0ad26c8d1af10e40136b1d60
2023-11-18 18:04:07 +09:00
Zuul 1b0cdc9824 Merge "Accept array for barbican::api::enabled_secret_stores" 2023-11-08 10:02:02 +00:00
Takashi Kajinami ca2fd10f71 Accept array for barbican::api::enabled_secret_stores
The parameter defines the value of [secretstore] stores_lookup_suffx
option, which is a ListOpt.

Change-Id: I78954f70700cbcfe1f76f311d1a61cd1c6e45abf
2023-11-08 01:05:56 +09:00
OpenStack Release Bot bbf38b6939 Update master for stable/2023.2
Add file to the reno documentation build to show release notes for
stable/2023.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.2.

Sem-Ver: feature
Change-Id: I5489002d9978bbf0815ed3fcd3ab591d7efda573
2023-10-16 15:15:02 +00:00
Takashi Kajinami 7bcaae05f6 Remove cleanup of [DEFAULT] bind_host and bind_port
The cleanup logic was added before 2023.1 release so we can assume
these options are purged before a deployment is upgraded.

Change-Id: If6949bb89b01104abe09515c6b93f7d7fed709d5
2023-10-13 21:49:08 +09:00
Takashi Kajinami 2f4fe1dac3 Remove usage of deleted manifest_dir
Recent update in rspec-puppet removed some of the config interfaces for
old puppet versions[1]. This drops usage of these interfaces to resolve
the following error in unit tests.

```
An error occurred while loading ./spec/unit/provider/manila_spec.rb.
Failure/Error: c.manifest_dir = File.join(fixture_path, 'manifests')

NoMethodError:
  undefined method `manifest_dir='...
```

[1] 316d95923c

Change-Id: I32d647ddd8faf036af14817f94c7c8e3e26178b1
2023-10-11 11:52:42 +09:00
Zuul a3295ed3bc Merge "Prepare 2023.2 release" 2023-10-03 17:15:34 +00:00
Takashi Kajinami 8597eceeb8 Prepare 2023.2 release
Change-Id: Ic585f5bed28fddf49bd551b7a1f69c12a3de8f41
2023-10-03 16:58:28 +09:00
Takashi Kajinami 9a721bee48 Bump upper version of stdlib
... because we are currently using v9.0.0 in CI. Lower version may be
bumped after 2023.2 release.

Change-Id: Ieb5a53f71e74b669f4040526d3dea01d2903bc39
2023-10-03 13:02:00 +09:00
Zuul 21312a3279 Merge "RabbitMQ: Add support for quorum queue options" 2023-09-15 15:59:13 +00:00
Takashi Kajinami 122686e238 RabbitMQ: Add support for quorum queue options
Depends-on: https://review.opendev.org/894866
Change-Id: I55b5eb5d6139f464f633d5c13827fea91378e3b7
2023-09-14 22:48:48 +09:00
Takashi Kajinami db0bd5156d Do not restart services after policy file changes
The oslo.policy library has implementations to detect change in policy
rules and reload the new rules without service restart.

Change-Id: Ibe9d189f1c12a91a7327f819726695aa52417ac7
2023-09-11 12:25:52 +09:00
Takashi Kajinami 02d4ae58d9 Exclude release note files
The directory contains the source files to generate the release note
document, so is not required.

Change-Id: I7e1ed7c68d8eb6d652a1fee3200281b3fd626790
2023-08-11 17:47:35 +09:00
Takashi Kajinami 73eaefe9bd Add .pdkignore to exclude some files from tar ball
We've seen release job failures caused by too large tarball, which
contains irrelevant files like git history.

Let's exclude these files to reduce size of the archive.

The file is copied from the puppetlabs repositories with some files
specific to OpenStack projects added.

Change-Id: If07c4836d38c11776c5fa40491a90c841f49c837
2023-08-11 00:41:07 +09:00
Takashi Kajinami d459be69cd Ensure purge_config takes a boolean value
The purge_config parameters only accept boolean values. This enforces
that using the typed parameters.

Change-Id: I669f1a2ff2462d60afe2fbd0c33e607d20cb14fc
2023-07-17 13:00:23 +09:00
Zuul 6e2515b4fd Merge "Add per module policy service refresh" 2023-06-26 15:24:24 +00:00
Tobias Urdin c38323518b Add per module policy service refresh
Updating the policies for this project should only
refresh the services that reads it.

Change-Id: I42153ec891feb569a9614166104be5382d893f96
2023-06-26 00:03:26 +02:00
Takashi Kajinami 7775352fcd authtoken: Make password required
The password parameter is not really optional. This makes it
a required parameter to give more sensible validation error.

Change-Id: I482621899616f6e3dc902900b0933ffa58ca519a
2023-06-23 10:23:43 +09:00
Zuul 2079fb1ff5 Merge "replace validate_legacy with proper data types" 2023-06-16 22:16:49 +00:00
Takashi Kajinami d3724a40b2 replace validate_legacy with proper data types
the validate_legacy function is marked for deprecation in
v9.0.0 from puppetlabs-stdlib.

Change-Id: I0707b0a8b200480dbfb8f52353596127cf4dc8b5
2023-06-16 02:07:13 +09:00
Takashi Kajinami e1f09fece0 Remove support for Puppet 6
... because Puppet 6 reached its EOL in February 2023.

Change-Id: Id9664008696c94cd0029c01792f7af9def87e11d
2023-05-22 03:20:34 +00:00
Takashi Kajinami 9fe8664d78 Bump upper version of puppetlabs-inifile
... because now we use v6.0.0 in CI jobs.

Depends-on: https://review.opendev.org/880118
Change-Id: I7aafde233da748d71ca53b141f3c920d5ee4295d
2023-04-14 11:44:11 +09:00
OpenStack Release Bot 362da39e95 Update master for stable/2023.1
Add file to the reno documentation build to show release notes for
stable/2023.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.1.

Sem-Ver: feature
Change-Id: Iba74b22fcaec8635bf77bf9bb2ea20c6e3a16341
2023-04-05 15:28:23 +00:00
Takashi Kajinami 58f2f8fbd5 Prepare 2023.1 release
Change-Id: Ib5221b2c2550961ff2abed41da5e8d9a23aecb8a
2023-03-23 21:47:57 +09:00
Takashi Kajinami 578e24a0b9 Add strict validation about boolean parameters
This ensures the parameters used by if-else logic accept only boolean
values because non-boolean can result in unexpected behavior.

Change-Id: I963d73e46f82a780486fa282b424151485e43d1e
2023-03-03 04:36:46 +00:00
Takashi Kajinami 729f5d286c Replace legacy facts and use fact hash
... because the latest lint no longer allows usage of legacy facts and
top scope fact.

Change-Id: I6e76d095bb0f78ef4962f1150da94e4d4153a374
2023-03-01 16:51:25 +09:00
Takashi Kajinami 626681f04d CentOS: Install barbican-retry service
RDO now provides the package to launch the barbican-retry service[1].
This change ensures the package and the service are configured by
the corresponding class.

[1] https://review.rdoproject.org/r/c/openstack/barbican-distgit/+/40434

Change-Id: I134feadb75b397bc159a8fe9e3dbc87915339785
2023-02-26 15:14:03 +09:00
Zuul 0480d0a292 Merge "apache: Clean up deprecated public_* parameters" 2023-01-24 11:48:47 +00:00
Takashi Kajinami acd9bf3373 Expose policy_default_rule
The option has been managed by the underlying puppet-oslo module but
has not been configurable. This introduces the parameter to customize
the option.

Change-Id: I7eb5ab771da3b6e2c446f4d8e83394a544fd147d
2023-01-23 14:27:53 +09:00
Takashi Kajinami 5b17af21a7 apache: Clean up deprecated public_* parameters
These were deprecated during the previous cycle so can be removed now.

Change-Id: I4e2e29d98803015b50c0f11678645cd5166e7d3c
2023-01-23 10:16:58 +09:00
Takashi Kajinami fb2bca25fa Switch to Ubuntu Jammy (22.04)
... because Focal no longer supports the recent releases such as Zed.

Change-Id: I4b74a04fc0eccb0065608481d5e0e4f65d01d11c
2023-01-15 22:17:31 +09:00
Takashi Kajinami 9c6f3af402 api: Remove deprecated ssl parameters
These parameters were deprecated during the previous cycle[1] because
these are not actually used by barbican.

[1] 109ea49acb

Change-Id: I6471ed0fe696f2c6455150adc63c9c896037e404
2023-01-06 13:06:17 +09:00
Takashi Kajinami a79ac82ef2 Remove deprecated client_package_ensure
The parameter has had no effect for several cycles and was formally
deprecated during the previous cycle[1].

[1] 6c60f0d67e

Change-Id: Ib94130cf8215e3a832e4d44645ce90a2450627d2
2023-01-06 13:04:51 +09:00