... because certificate plugins were deprecated some time ago in
Barbican and are being removed in this cycle.
Depends-on: https://review.opendev.org/c/openstack/barbican/+/909640
Change-Id: Ie2dacb037a3d5ba8f1732ddb8f4b8ea8ded1e5ed
This refactors resource dependencies to improve the following points.
- Avoid unnecessary dependencies across services. For example aodh
service does not require cinder db.
- Restart only api service when config files like paste.ini, which
are used only be api service is changed.
Change-Id: Iad138f5d2e8c7427e02b889c43c26f00213636f3
The new openstackclient tag was added so that we can get all resources
about openstack CLI more easily. This adds this tag to barbicanclient
because the package provides some sub-commands.
Change-Id: I8f1f8b4a6de6ca0d95c2f53a89a1d50a6c82d29e
The cleanup logic was added before 2023.1 release so we can assume
these options are purged before a deployment is upgraded.
Change-Id: If6949bb89b01104abe09515c6b93f7d7fed709d5
Recent update in rspec-puppet removed some of the config interfaces for
old puppet versions[1]. This drops usage of these interfaces to resolve
the following error in unit tests.
```
An error occurred while loading ./spec/unit/provider/manila_spec.rb.
Failure/Error: c.manifest_dir = File.join(fixture_path, 'manifests')
NoMethodError:
undefined method `manifest_dir='...
```
[1] 316d95923c
Change-Id: I32d647ddd8faf036af14817f94c7c8e3e26178b1
RDO now provides the package to launch the barbican-retry service[1].
This change ensures the package and the service are configured by
the corresponding class.
[1] https://review.rdoproject.org/r/c/openstack/barbican-distgit/+/40434
Change-Id: I134feadb75b397bc159a8fe9e3dbc87915339785
The option has been managed by the underlying puppet-oslo module but
has not been configurable. This introduces the parameter to customize
the option.
Change-Id: I7eb5ab771da3b6e2c446f4d8e83394a544fd147d
The barbican::wsgi::apache class names a few parameters and resources
differently from the other modules. To make its interface and
implementation consistent with the other implementations, this renames
these inconsistent names. The old parameter names are kept but will be
removed in a future release.
Change-Id: I49ca51e4ea7a2404dfdbd0c88ce39339750da4f6
Add parameters for advanced logging configurations in Apache to
support piped logging and support for syslog (via mod_syslog
available in Apache >= 2.5.0)
Co-Authored-By: Andy Botting <andy@andybotting.com>
Change-Id: I77f1d65b1f6085fdb1205de9654a8d6d2da496f5
The old wrong value should be fixed when the deployment is updated to
stable/yoga, and the logic is no longer used in stable/zed and later.
Related-Bug: #1946378
Change-Id: I699847c127e5890857446585ededc9d860b0dc78
The puppetlabs-apache module is enforcing more strict data type
validation[1].
This change updates the default values to adapt to that change.
[1] f41251e336
Closes-Bug: #1983300
Depends-on: https://review.opendev.org/851652
Change-Id: I9573f53e24dcf0666e4649189ccd8fcab0dbcc26
This reverts commit d8067ab5a2.
Reason for revert:
puppet-postgresql 8.1.0 was released and now the module supports RHEL 9
(and CentOS 9 effectively).
Note:
This change adds the service_provider fact in test fact data because
it is required by puppet-postgresql.
Depends-on: https://review.opendev.org/850705
Change-Id: I8916f2eae939dd03126035ca2d52c8da50caf501
Now a few deployment validations are implemented in acceptance tests
but these are enabled in only CentOS/RHEL. This enables these in Debian
and Ubuntu because there is no distro-specific requirement.
Change-Id: I7b50f49fe4316c83f169bfdbdd5d79a5e3b9b253
The value with a white space should be accepted instead of being
rejected. This change fixes the wrong test case description and makes
sure the description explains what is actually tested.
Change-Id: I0f7853c62b88ea423590f5c75eb47f7597f15a01
The headers option in apache::vhost is required in some case, for
example when adding the X-XSS-Protection header. This change allows
customizing the option for the api vhost.
This change also adds support for request_headers so that both request
headers and response headers can customized.
Change-Id: I0e78f2183ffe14c310ee5c5632c203258c8c85cd
These parameters are used by oslo.service library but Barbican does not
provide wsgi servce based on the library.
Change-Id: Ie035ec4a4dbce089e9911e11f91c2c013998192b
The bind_host parameter and the bind_port parameter are not implemented
in current Barbican. This change removes these ineffective parameters
from barbican.conf.
Change-Id: I7758a6e852795c5410e6dab023ce612f44ee27fd
During the previous cycle, a warning message was added to inform users
of this change.
Now the default value is updated so that SSL is disabled by default.
Change-Id: I72cf30d418b99ba06c4d5738544acb1930d4806f
This is the prep work to migrate some common parameters from the api
class to the base class, and implements basic functionality so that
the base class provides consistent functionality in all modules.
Change-Id: I0e20b135e8c29f1d27d39d2940d49ea30a1f512c
* Use $::os_service_default instead of undef. These are effectively
same but $::os_service_default is globally used
* Make sure the unused parameters are reset
Change-Id: Id6ce9d200a094429098257a0070dea0605fe4565
This change adds an independent class for [retry_scheduler] parameters,
because these parameters are used not by the api service but the retry
daemon.
Currently no distro provides a package to install the service so
the new class only set parameters, which is incomplete. This will be
fixed once the packaging issue is resolved.
Change-Id: Ib8b649c2e5ac5fee5e5a3bd52caeb21780fc1f61
This change ensures that default values are tested in unit tests. Also,
test cases for retry_scheduler parameters are added.
Change-Id: I69caa4e29ea4018105166bc879c6a93622df256a
The puppt-postgresql module does not support CentOS 9 yet and requires
some version parameters to be run on CentOS 9. This change disables
unit tests requiring that module, until the module supports CentOS 9.
Change-Id: Icff8be15e0180d620488a80504208c12b8be6aac