Commit Graph

27 Commits

Author SHA1 Message Date
Takashi Kajinami ba81a15371 Retire puppet-glare - Step 2: Remove Project Content
Depends-on: https://review.opendev.org/790056
Change-Id: Id76e00fafd171f3d77b70817c5cfd103cb207b0e
2021-05-07 01:08:33 +09:00
Thomas Goirand 6d94ffe510 Allow to configure policy_dirs
This patch makes it possible to override the current service default,
which is /etc/<service>/policy.d .

Change-Id: I674bd4b6db8862668dab8197d86fe99b55e923f5
2021-04-11 23:39:16 +02:00
Takashi Kajinami 2a41b6ee88 Add support for oslo_policy/enforce_new_defaults
Depends-on: https://review.opendev.org/781428
Change-Id: I522ac2fb7fe289cbcda436119a003850efce2aeb
2021-03-24 16:36:09 +09:00
Takashi Kajinami 18c70a3a69 Add support for the oslo_policy/enforce_scope parameter
Depends-on: https://review.opendev.org/#/c/759008/
Change-Id: I1c92094c34baa4a30d10f30e6c2d613030ba93a2
2021-03-21 10:56:18 +09:00
Takashi Kajinami 52bbcd3a5f Use yaml instead of json for policy file
Because usage of json for policy file will be deprecated and replaced
by yaml[1].

[1] https://governance.openstack.org/tc/goals/selected/wallaby/migrate-policy-format-from-json-to-yaml.html

Depends-on: https://review.opendev.org/769647
Change-Id: I523ec093324bb991a30930a1352c5930bf220108
2021-01-07 23:21:14 +00:00
ZhongShengping eb72d71b7f Allow db sync timeouts to be configurable
As Openstack projects continue to have longer database migration
chains, the Puppet default timeout of 300 seconds for an execution
is becoming too short a duration on some hardware, leading to timeouts.
As projects continue to add more migration scripts without pruning
the base, timeouts will continue to become more frequent unless
this time can be expanded.

Change-Id: Ib07b1a55d5640ff5372b58a412833f81665a33d3
Closes-Bug: #1904962
2020-12-06 11:07:55 +08:00
Takashi Kajinami ba039b45ec Add support for the keystone_authtoken/service_type parameter
Change-Id: Iacf60927f83761973b77dd9b5f876b14a58eb0d6
2020-11-03 17:53:49 +09:00
ZhongShengping 6dfb89f4ce Add mysql_enable_ndb option
Add mysql_enable_ndb parameter to select mysql storage engine.

Change-Id: I5c5103626e1b5e5b77bb0e07fb81bb69418ea950
Depends-On: https://review.opendev.org/#/c/748067
Closes-Bug: #1892952
2020-08-26 11:55:54 +08:00
ZhongShengping 6034694981 Add service_token_roles for keystone authtoken config
Add the ability to configure service_token_roles.

Change-Id: I29e8d699eb34c4d89302d9b0ff08562353c1e4a1
Closes-Bug: #1892284
2020-08-20 10:41:27 +08:00
Lewis Denny ede6fbf786 Add support for the interface parameter in authtoken middleware
This patch adds support for [keystone_authtoken] interface parameter,
so that operators can define which endpoint should be used by authtoken
middleware.

Change-Id: Idbaf877352d93a9713a87b4ceadd18feb770ad6d
2020-07-16 11:27:40 +10:00
Takashi Kajinami 76189930cf Drop compatibility for el6
... because it's now really old, and we don't expect any users
use it to run OpenStack.

Change-Id: I8db6b0166759bf535e577d10e8afaa36dcbaff86
2020-04-02 10:03:54 +09:00
ZhongShengping 5ad7236835 Deprecate min_pool_size option
min_pool_size option is not used,see:

https://review.opendev.org/#/c/565090/

Change-Id: Ia6fa74ec2fc0f0e70cb9af111e7a9639322ca902
Closes-Bug: #1868511
2020-03-25 14:53:40 +08:00
ZhongShengping ba292054bd Remove idle_timeout option
The idle_timeout parameter has been deprecated for two releases.
We can remove it.

Change-Id: I5beee515ab6ceb5df7ef54fd35189a5c72ba242f
2020-03-23 14:45:48 +08:00
ZhongShengping d695e1df44 Remove deprecated pki related options
The deprecated pki related options check_revocations_for_cached and
hash_algorithms option has been removed.

Change-Id: I3f553352215286eb7dd312037f3466591ba0c287
2019-08-15 11:51:37 +08:00
ZhongShengping 625ef78c6e Deprecate idle_timeout option
The idle_timeout parameter is deprecated, use connection_recycle_time
instead[1].

[1]https://review.opendev.org/#/c/334182/

Change-Id: Iad22c20436222db89d292c960688c97bc5265d4c
Depends-On: https://review.opendev.org/656106/
Closes-Bug: #1826692
2019-04-28 15:00:09 +08:00
Zuul 9e8b1ca91a Merge "Add release note about Ubuntu py3 upgrade" 2019-02-25 17:28:52 +00:00
Tobias Urdin f365fd8d5e Add release note about Ubuntu py3 upgrade
Change-Id: I1408c988964614c4cf8e1cb8a03e3a874ef813ca
2019-02-24 00:01:17 +01:00
ZhongShengping ca01ea1047 Service_token_roles_required missing in the server config file
Service_token_roles_required missing in the server config file which
allows backwards compatibility to ensure that the service tokens are
compared against a list of possible roles for validity.

Change-Id: Ic7613f0e384bc7ec7e0122b26a1abed5d659dd0a
Closes-Bug: 1778198
2019-02-15 10:03:03 +08:00
Tobias Urdin 6f143c16ad Use puppet 4 compatible mysql functions
These was introduced in 6.0.0 and is required to
support later version of puppetlabs-mysql.

Change-Id: I07066787f021c1985a4708a9dc8c11c2d9ad1ec5
2019-02-08 12:09:47 +01:00
Zuul 572a93dc34 Merge "Dont include logging in init by default" 2018-12-29 20:54:21 +00:00
ZhongShengping 265019a5d0 Fix the port of endpoint
The port is error for endpoint. We should fix it.

Change-Id: I38c5044c506ff4505d18ea046e5f450db3d2daa1
Closes-bug: #1808737
2018-12-18 13:56:21 +08:00
Tobias Urdin 425b50e4d0 Dont include logging in init by default
Change-Id: I862232e4d24a879990bff6626458a4b7a4f72351
2018-11-29 10:22:30 +01:00
Tobias Urdin 3d0a913fcb Remove auth_uri
Change-Id: I55c635d22a92c8d923323ba76ebced5033b9205e
2018-11-29 00:12:54 +01:00
ZhongShengping f67462cce2 Deprecate pki related options
check_revocations_for_cached and hash_algorithms are deprecated for
removel because of PKI token format is no longer supported.
Update warning message and add a release note.

Change-Id: Idf08b1283b64f1d6707fd6d7a87b0b1c39f5d319
Closes-Bug: #1804562
Closes-Bug: #1804720
2018-11-23 10:22:26 +08:00
ZhongShengping 98651fc002 Deprecate auth_uri option
Option auth_uri from group keystone_authtoken is deprecated[1].
Use option www_authenticate_uri from group keystone_authtoken.

[1]https://review.openstack.org/#/c/508522/

Change-Id: I5e84034ada8dffad946ae32746a11cb31488bfec
Depends-On: I4c82a63baabd6b9304b302c97cd751a0103d8316
Closes-Bug: #1759098
2018-04-03 16:55:00 +08:00
ZhongShengping ec780033ae Add pool_timeout option
Add pool_timeout option to configure this value for pool_timeout with
SQLAlchemy.

Change-Id: I79e95919788ac9fc74e99cb53395725087dcb57b
Closes-Bug: #1757581
2018-03-22 11:09:50 +08:00
ZhongShengping 819ae38f58 Add 'openstack-db' tag to db-sync Exec resource
In order to make easy orchestration on all OpenStack db-sync, add this
tag so people can use this tag in composition layer.
A use case it to set some orchestration to make sure MySQL Galera is
ready before running any Exec with this tag.

Change-Id: I6b52256001bd9cefaa92aa2c58db1658cdded5ff
Closes-Bug: #1755102
2018-03-12 16:33:07 +08:00