Commit Graph

172 Commits

Author SHA1 Message Date
Zuul eaa7e93aec Merge "healthcheck: Expose ignore_proxied_requests parameter" 2024-02-26 02:56:16 +00:00
Takashi Kajinami 7ddb186ec5 healthcheck: Expose ignore_proxied_requests parameter
Depends-on: https://review.opendev.org/909807
Change-Id: Ibdc5ac824241d1638fcf6066d2f51601792fcd6b
2024-02-26 01:26:24 +09:00
OpenStack Release Bot 94b811c650 reno: Update master for unmaintained/yoga
Update the yoga release notes configuration to build from
unmaintained/yoga.

Change-Id: I3f7514b645502a6ebfd34c938e0772ea10eff43a
2024-02-21 16:45:08 +00:00
Takashi Kajinami ac20db89d0 healthcheck: Expose allowed_source_ranges
... which was added to puppet-oslo recently.

Depends-on: https://review.opendev.org/905557
Change-Id: I671ab529cee053f59e611e119af93d7123756e2a
2024-01-17 02:58:27 +09:00
OpenStack Release Bot 0243f0eebf Update master for stable/2023.2
Add file to the reno documentation build to show release notes for
stable/2023.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.2.

Sem-Ver: feature
Change-Id: I37259cf05373afe419563d1ebf16872f05853b7c
2023-10-16 15:16:23 +00:00
Takashi Kajinami 3f5c30de21 Remove support for Puppet 6
... because Puppet 6 reached its EOL in February 2023.

Change-Id: I059d3e6c4ca34c4954b88914f28c81385453fe5b
2023-05-22 12:22:22 +09:00
OpenStack Release Bot 3dd3e929b4 Update master for stable/2023.1
Add file to the reno documentation build to show release notes for
stable/2023.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.1.

Sem-Ver: feature
Change-Id: I961b712133d0f35a7720acff4a7b4a58289da02f
2023-04-05 15:30:11 +00:00
Takashi Kajinami ecd6b5a669 Expose policy_default_rule
The option has been managed by the underlying puppet-oslo module but
has not been configurable. This introduces the parameter to customize
the option.

Change-Id: I010ef8ed814af439621cf944eb62426d7adb5d6f
2023-01-23 14:29:25 +09:00
Takashi Kajinami fa6ef57180 Switch to Ubuntu Jammy (22.04)
... because Focal no longer supports the recent releases such as Zed.

Change-Id: I46de72deb389f6f0c4b0af2f9f17416334f5f891
2023-01-15 22:21:05 +09:00
OpenStack Release Bot aaceae30fb Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.

Sem-Ver: feature
Change-Id: I6560799a99aaa901b2fcbe2f4006236fdbb96e6f
2022-10-20 11:04:19 +00:00
Takashi Kajinami 990298ddd5 Add Apache WSGI logging parameters for pipe/syslog
Add parameters for advanced logging configurations in Apache to
support piped logging and support for syslog (via mod_syslog
available in Apache >= 2.5.0)

Co-Authored-By: Andy Botting <andy@andybotting.com>
Change-Id: Ifa33b2e84284d8032c4e4f54acb26c30fc285cb5
2022-08-26 17:41:09 +09:00
Takashi Kajinami 8001209a81 Remove gnocchi::metricd::cleanup_delay
... because the parameter was deprecated during Yoga cycle[1] in favor
of the new metric_cleanup_delay parameter.

[1] 04f29cb088

Change-Id: I8efe9f153ca112dafb621edc4ee3b3d090083d91
2022-08-16 18:54:42 +09:00
Takashi Kajinami 3be542d7b2 Expose headers option of apache::vhost
The headers option in apache::vhost is required in some case, for
example when adding the X-XSS-Protection header. This change allows
customizing the option for the api vhost.

This change also adds support for request_headers so that both request
headers and response headers can customized.

Change-Id: I9fe841e9dc2a90627d0debdc9b6766a847390aed
2022-06-30 11:03:15 +09:00
Takashi Kajinami 8dd25e5de7 Remove support for CentOS 8 Stream
... because RDO will provide packages for only CentOS Stream 9 for Zed
release. This change removes RHEL 8 as well.

Depends-on: https://review.opendev.org/843503
Change-Id: Ia708460e2dc40700c7053168d425efc9130475ac
2022-06-01 13:45:18 +09:00
Zuul 0fc51b7e6f Merge "Add support for [statsd] creator" 2022-05-11 10:19:51 +00:00
Takashi Kajinami ce404cc090 apache+mod_wsgi: Disable SSL by default
During the previous cycle, a warning message was added to inform users
of this change.

Now the default value is updated so that SSL is disabled by default.

Change-Id: I7f32413d452e98306906002461ae0b4304d284ca
2022-05-06 20:43:30 +09:00
Zuul 6eeb18e6eb Merge "api: Remove deprecated middleware option" 2022-04-26 08:54:33 +00:00
Takashi Kajinami bdde282558 Add support for [statsd] creator
Change-Id: I719ff8386c7ea73cbaeae4d7db8cc6ed82b8cf79
2022-04-25 08:51:51 +09:00
Takashi Kajinami 4bd702bc91 statsd: Add support for host and port
This change introduces support for the following two parameters.
 - [statsd] host
 - [statsd] port

Change-Id: Ia4e4a5d5ae40a7d4a358569d9caacb07ff391d6a
2022-04-25 08:48:40 +09:00
Takashi Kajinami a6ca19ef5a api: Remove deprecated middleware option
... because it was deprecated during Yoga cycle[1] and has had no
effect since then.

[1] be05efdc44
Change-Id: I473ccd52df065864027b6b88b49a9eece66ba1ac
2022-04-25 08:24:46 +09:00
OpenStack Release Bot bce487db88 Update master for stable/yoga
Add file to the reno documentation build to show release notes for
stable/yoga.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/yoga.

Sem-Ver: feature
Change-Id: I3bdb875d8fefd3cccff1859fbc9c172b2483f1ca
2022-04-05 09:10:25 +00:00
Takashi Kajinami 04301ef449 Support [api] operation_timeout
Change-Id: Iccc6b6f0632c7b20b0e2385467ae0cd459928128
2022-03-22 18:44:54 +09:00
Takashi Kajinami 8beb8d5218 remove unicode literal from code
All strings are considered as unicode string from Python 3.

This patch drops the explicit unicode literal (u'...')
appearances from the unicode strings.

Change-Id: I408f0615d84f956a9ad98134cedd3390012c17eb
Co-Authored-By: LiZekun <2954674728@qq.com>
2022-03-08 09:11:43 +09:00
Takashi Kajinami f4ff720f21 Add CentOS/RHEL 9 to supported operating systems
... because these operating systems are now verified by unit tests and
integration tests.

Change-Id: I67013fcc5df48940e1974009b738c0f66c70474d
2022-02-23 01:14:55 +09:00
Takashi Kajinami 337b4e91ac Add support for [storage] ceph_timeout
Change-Id: Id8e4e924b9f38bf512bd571ab4109ad5fca7e9f8
2022-02-09 23:20:36 +09:00
Zuul feafe4c64a Merge "Make [statsd] flush_delay optional" 2022-01-07 23:51:58 +00:00
Zuul 37ec81ab5f Merge "Accept system scope credentials for Keystone API request" 2022-01-07 23:51:56 +00:00
Takashi Kajinami 20efa3dc75 Add support for [api] paste_config
Change-Id: Ide71a2bd652db2c9e7c04d0679f507afb3de0a16
2021-11-30 16:14:23 +09:00
Takashi Kajinami 34d63f505a Allow arbitrary settings of api-paste.ini
Change-Id: I6bc6f2c5ea3ba445f68d96f6c64847f39c8d2725
2021-11-29 12:57:34 +09:00
Takashi Kajinami f3c8731fcd Accept system scope credentials for Keystone API request
This change is the first step to support secure RBAC and allows usage
of system scope credentials for Keystone API request.

This change covers the following two items.
 - assignment of system scope roles to system user
 - credential parameters for authtoken middleware

Depends-on: https://review.opendev.org/804325
Change-Id: Ifbe407233c0739038f23c645f2bd544a409bb1cd
2021-11-25 21:14:45 +09:00
Zuul 5a3035d9eb Merge "Support more [metricd] parameters" 2021-11-19 00:02:07 +00:00
Zuul 6e91a0fc00 Merge "Allow customizing state of the python-ceph package" 2021-11-17 13:15:55 +00:00
David Hill e3a16caf26 Ensure required packages are installed for s3 support.
Change-Id: I63bf29acd5ddd07021f8dcaad17bdd3a12783095
2021-11-15 10:38:34 +09:00
Takashi Kajinami bba8c78ed8 Allow customizing state of the python-ceph package
Change-Id: I1fbf6aeb01c553045a0e6dd4f29c0fbbe1dd51a7
2021-11-15 10:34:52 +09:00
Takashi Kajinami 04f29cb088 Support more [metricd] parameters
Change-Id: Iaa01939f5049c3816e08a774ea2fbef19d0e3cfc
2021-11-15 10:06:44 +09:00
Takashi Kajinami b1e2d280ac Prepare to update default of <service>::wsgi::apache::ssl
Currently the <service>::wsgi::apache::ssl parameters have inconsistent
default values. Some parameters default to true while the other default
to false.

Based on the following points, false is considered to be the more
reasonable default.
 - Usage of SSL is optional and is not always required
 - There are other methods(like load-balancer) to implement SSL
   termination
 - Enabling SSL doesn't work with the default values currently
   defined, and requires additional parameters like ssl_cert.
 - false is the default value defined in the base implementation in
   puppet-openstacklib.

This change is the preparation to change the default value, and
introduces a warning message to make users aware of the future change.

Change-Id: Ie2420118f487788a4437c030e374917c70465835
2021-11-03 11:47:11 +09:00
Zuul 1a50492f7b Merge "Clean up the deprecated manage_cradox parameter" 2021-11-01 16:18:06 +00:00
Takashi Kajinami be05efdc44 Deprecate support for [api] middlewares
... because the parameter was deprecated in gnocchi 1.3.0[1] and was
removed in gnocchi 2.0.0[2].

[1] 7000300646
[2] 7e56cd6712

Change-Id: I7f52310b4f66813b30313d55a2d71ab3cf54493e
2021-11-01 12:47:54 +00:00
Takashi Kajinami 424c229d4f Clean up the deprecated manage_cradox parameter
... because it was deprecated during the Xena cycle[1].

[1] 3591bd8acc

Change-Id: I9d0900b90fa0f5bb6636a9f722c2e1f5d336ad98
2021-10-30 09:43:42 +09:00
Takashi Kajinami 928ae95ab5 Make [statsd] flush_delay optional
Gnocchi doesn't require the [statsd] flush_delay parameter, and it
defines the default value (10 seconds). There is no reason to require
the parameter in puppet layer because the service default is considered
to be a reasonable default.

Change-Id: I08a33e03f68ea8a8b0cbf1945f02750c83ca7da6
2021-10-19 23:02:50 +09:00
Takashi Kajinami aca4626cb2 Allow customizing separator for api-paste.ini
The api-paste.ini accepts not only "=" but also ":" and some services
like Barbican have been using ":" for their default api-paste.ini
files.

[composite:main]
use = egg:Paste#urlmap
/: barbican_version
/v1: barbican-api-keystone

This change allows users to use ":" so that they can update the ini
files with keeping it consistent with the default fules

Depends-on: https://review.opendev.org/813614
Change-Id: Ibde258e605c827ef042ae7f4c32db15c816fd038
2021-10-15 12:00:29 +09:00
OpenStack Release Bot e025f13617 Update master for stable/xena
Add file to the reno documentation build to show release notes for
stable/xena.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/xena.

Sem-Ver: feature
Change-Id: Ied93b38cad2606190ec4a233e6eff6c0b00e3bf0
2021-10-07 08:22:48 +00:00
Zuul b5d49ecb7d Merge "Allow purging policy files" 2021-09-20 07:23:30 +00:00
ZhongShengping 3af5e3dbc2 Add watch_log_file option
Add support for Using logging handler designed to watch file system.

Change-Id: I0097c68ea253b1cee58132e677adc39dd7c3b20a
Closes-Bug: #1943212
2021-09-14 16:02:08 +08:00
Takashi Kajinami 2683bc9657 Allow purging policy files
This change introduces the new purge_config parameter to the policy
class so that any policy rules not managed by puppet manifests can be
cleared.

Co-Authored-By: Martin Schuppert <mschuppert@redhat.com>
Depends-On: https://review.opendev.org/802305
Change-Id: I12860a99b656df63e8caa75f442ecaecff74e163
2021-09-04 22:01:54 +09:00
Zuul 404bb3563a Merge "Add support for the file incoming driver" 2021-06-28 10:36:23 +00:00
Takashi Kajinami 39fc4eeeb2 Drop Fedora support
Fedora support is never tested, and has been unmaintained for a while.
Because we don't expect any actual user using OpenStack on Fedora, this
change drops support for Fedora directly.

Change-Id: I21c43154fad6ce7a7f31f7b7e539c18f23ec59ea
2021-06-13 00:13:59 +09:00
Tobias Urdin 3591bd8acc Deprecated manage_cradox and set manage_rados to true
The [1] commit changed the ordering in Gnocchi so that
the rados library is preferred over cradox that is no
longer maintained and hasn't been updated in a long time.

Cradox is no longer tested in upstream Gnocchi and support
was removed in [2] which is not yet released.

This patch also changes the default value for manage_rados
to true so that it's manage by default since it's the one
preferred.

[1] d5a782e58f (diff-60cbc467d17fe0479d5cb2292f716fd73b200973ae43889f72c51227d311a785)
[2] bf37e90eda (diff-60cbc467d17fe0479d5cb2292f716fd73b200973ae43889f72c51227d311a785)

Change-Id: Id1957e4d6e5ad003592ad46e469ec9f9e78ad58d
2021-06-04 07:35:27 +00:00
Takashi Kajinami a00bfa3642 Add support for the file incoming driver
This change introduces a new gnocchi::storage::incoming::driver class
so that users can configure the file incoming driver of Gnocchi, which
stores incoming data in local (or shared) filesystem.

Change-Id: Ibf79b167a9d193974180949c95557d77ca495499
2021-05-25 08:19:55 +09:00
Takashi Kajinami 0e1d398f56 Add support for oslo_policy/enforce_new_defaults
Depends-on: https://review.opendev.org/781428
Change-Id: I2cfa1267b08ea432a8bf3245ebb57abc5fadb809
2021-04-19 09:31:22 +09:00