With this change now config files for storage services(account,
container and object) are managed by ini provider instead of concat
resources. This allows us to use the default file provided by packages
instead of replacing the whole file content by our templates, and use
the $::os_service_default value instead of hard-coding own defaults.
Related-Bug: #1921319
Change-Id: I375634214e88acc5075f64090287f934ce8451d1
This patch ensure that the swift-container-sharder service is started,
and provides all the facility (ie: parameters) to configure the sharder.
Change-Id: I0db7479e8634038871ce65990fd0104841d2010c
... which was deprecated since swift 2.16.0[1] in favor of
the versioned_writes middleware.
[1] 5e673a542401a2d95249c3c03f26175214f08c79
Change-Id: I6cf3e63839a2044ded0e5c4af2fe6f1312b42fdf
Sometimes, the default of 60s is just not enough, so we make this
configurable for the object-server.conf.
Change-Id: I965d5178f1f367e8b7b1f6137ff5290a75ffb030
The default mb_per_sync value of Swift leads to adding a lot of
latencies when transfering to an object store. This patch adds
the possibility to override this value for object store (it is
less relevant for other backend which rarely will reach the
cache size anyway). According to our tests, a value of 16 MB
is very good in production.
Change-Id: Id379d4221bc7e2a0c16125b97140e39b7726fd02
The default interval value is 30s and in some case, this is way
too agressive and we need an automated way of tweaking this value.
Change-Id: I271c218b45d10f15544077e93ded9d74d7842f65
Closes-bug: #1850856
New parameters for proxy class are object_chunk_size and client_chunk_size,
and for storage class: network_chunk_size, disk_chunk_size and
auditor_disk_chunk_size.
Change-Id: If2bbc9cea1f6e0959fd67d2e004b607a8e40beee
According to the doc at this URL:
https://docs.openstack.org/swift/latest/deployment_guide.html
for performance reasons, it is desirable to use forks of the
object-server, each on a different port, one per device. This
is what I'm doing in openstack-cluster-install in Debian. For
this, I've been using this patch. It'd be nice to have it
upstream as well.
Change-Id: I9224eb7022871e92cc18f82e9985d91d5e0c2823
Looks like this template was never used at all; the actual used template
is from puppet-rsync itself.
Change-Id: I19a82bc5b013486bd3eac1368db0583144fd16fb
Adding the object-reconstructor service and enabling it by default.
This is required for erasure coding.
Change-Id: If388bcc1532d7db2132d4b206e13252a30fa9041
The policy of giving projects vanity domains stopped about 5 years ago.
swift.openstack.org is a redirect to the canonical location -
docs.openstack.org/developer/swift. While we are not aiming to remove
the redirect any time in the forseeable future due to existing published
links pointing to it, we should at the very least stop adding more of
those links to the world.
Change-Id: Ia56ce22c65c1fac29a2d8fb367797a4d7929a9b4
Maintains full backward compatibility.
Use swift_proxy_config ini provider to mange proxy-server.conf.
Remove all erb templates. Move all template logic into proxy
middleware classes. To purge proxy.conf of settings that are
not specified set the new paramater "purge_config" to "true".
Change-Id: I0a143cf812043ea0f9a008a6e5c60ec87f9a4e9a
This patch fixes the order of the middlewares defined in the Swift proxy
server pipeline.
Sources for the order:
https://github.com/openstack/swift/blob/master/etc/proxy-server.conf-sample#L91-L99http://docs.openstack.org/developer/swift/middleware.html#https://github.com/openstack/swift3/blob/master/etc/proxy-server.conf-sample#L9https://github.com/openstack/ceilometermiddleware/blob/master/ceilometermiddleware/swift.py#L21-L22
These are all values in order:
10 catch_errors
20 gatekeeper
30 healthcheck
40 (reserved for proxy_logging, see below)
50 cache
60 container_sync
70 swift3
80 s3token
90 ratelimit
100 crossdomain
110 bulk
120 tempurl
130 formpost
140 copy
150 tempauth
160 swauth
170 authtoken
180 keystone
190 staticweb
200 copy
210 account_quotas
220 container_quotas
230 slo
240 dlo
250 versioned_writes
260 ceilometer
270 proxy-logging
280 proxy-server
The copy and versioned_writes middlewares have been added too.
The proxy_logging should be added a second time at position 40, but the
actual value is 270 to have the final proxy-logging just before the
proxy-server.
Also renamed the suffix 'swauth' in the 'tempauth' manifest to be
'tempauth'; 'swauth' is used in a different manifest.
Closes-Bug: 1618514
Change-Id: I99433720e32dc3557b809c8d42ce3d5981c199c3
The proxy-server.conf file had many blank lines due to optional
parameters and bad usage of erb templating.
Change-Id: I3c8e7cdb284e052c82e9a339c12eb7f60bb4ee12
Update authtoken class with parameters from
documentation [1]
We cant use the resource because swift does not
use keystone_authtoken section.
deprecations:
- admin_password, use password instead.
- admin_user, use username instead.
- admin_tenant_name, use project_name instead.
- identity_uri, use auth_url instead.
- admin_token, no usage.
removals:
- Old parameters (already deprecated)
[1]
http://docs.openstack.org/mitaka/config-reference/object-storage/proxy-server.html
Change-Id: I1eb4b0712214c059c713001ad991cbe92cd01711
This change adds the ability to configure the statsd configuration
options for the account, container, object and proxy services.
Change-Id: I9b06c86b44162cbd35b0aa3a5d237dcc5eea318b
Closes-Bug: #1616512
This option has been deprecated some time ago, and finally been removed
in Mitaka. Let's deprecate this setting in puppet-swift too; there is no
longer a reason to use it from Mitaka on. This patch makes it a noop
parameter.
See Id6bc10c3e84262c0a9e6160a76af03c0ad363e9c in Swift for reference.
Change-Id: I525f5010d56ccdd205a0f9d55db99b0f359f35c3
Co-Authored-By: Pete Zaitcev <zaitcev@redhat.com>
Add possibility to configure container_sync middleware. Also
allow to configure swift container-sync-realms, which specifying
the allowable clusters and their information, which is required
for container_sync.
Change-Id: I183841cca3daf72a30db160b88c9e3a9335ad7dc
In a previous release, we sent a deprecation warning for mount_check
parameter which was set to False by default, while upstream uses True.
This patch aims to use upstream default, True, by default in our
interface.
Depends-On: I0bb1ccf4c0adc4e217e2989bd50d96741fa156f7
Change-Id: I453e24509a3f05d1fea69d47577cf81535a1ee13
Now for using Ceilometer notifications from Swift we should
use Ceilometer middleware. Hence we need update template for Swift
to account for incoming and outgoing traffic notifications.
[1] I686e5d94fb72fd2a00973c91673edc417142ee2f
[2] http://docs.openstack.org/developer/oslo.messaging/transport.html#oslo_messaging.TransportURL
Change-Id: Ib6efd4a1ab4b76c74cffc546383f5382c24a8c43
Related-bug: #1510064
The 'mount_check' parameter is different in this Puppet module than
in Swift. This patch adds a warning() to tell the user that starting
in the next version, the default will change to match the upstream
default from False to True.
Closes-Bug: 1265243
Change-Id: I7f98e523be2f8bbf39b70c544a1965c975c690dd
Signed-off-by: Ben Kero <ben.kero@gmail.com>
it is hard coded into account, object and container config templates to log
every request. Provide a means to disable log_requests via
swift::storage::server and swift::storage::all, this reduces the log output.
Change-Id: I2fd97c1406710bb0305955f8ff9b47f91c09e13d
Closes-Bug: #1484614
Filters fragments leads to section headers and previous options with no
blank line between them
foo = bar
[section]
Add a blank line to the beginning of each filter so that when applied
the resulting file is more human readable
Change-Id: I411eba5da5fc4e1a7217df197edbaf5ef2d5e4fa
Tempauth middleware template included only example entries
This commit provides most options to configure tempauth middleware,
especialy an array of accounts/users hash which defines the authenticated
list available by tempauth
It's add by default the admin account/user
user_admin_admin = admin .admin .reseller_admin
Change-Id: Ib67d7deeeb2f98a464d18813ae4569c28a04472a
Tempurl middleware is set with default options only
This commits make it possible to manage all tempurl configs defined in
proxy-server.conf-sample[1]:
methods
incoming_remove_headers
incoming_allow_headers
outgoing_remove_headers
outgoing_allow_headers
Parameters are optional and can be set with array or string
[1] https://github.com/openstack/swift/blob/master/etc/proxy-server.conf-sample
Change-Id: I1fab905a46aa58c43b8b3fd35ecdaf310bffc121
Also change both proxy-server and object-server
.conf templates to test if log_udp_server and
log_udp_port are nil, instead of an empty string.
Testing for an empty string would have retruned
true if set to 'undef' - for futer parser compat.
Change-Id: Idac805f628dbec70a4adb6a1c021d85a743fdb72
This commit allows to configure the node_timeout parameter
of proxy-server.conf proxy-server middleware in the pipeline.
Change-Id: Idbac35336a5b266f6de288a28243f91ee4d67afd
This patch adds the ability to set a new identity_uri parameter.
It also deprecates the old auth_host, auth_port, auth_protocol,
and auth_admin_prefix parameters. Logic is in place so that
users of the deprecated settings should have a smooth upgrade
process and get deprecation warnings until they adopt the
new settings.
Change-Id: Ideefb4d824cbd5b4b83f9eb773a75e536e3458fb
The auth_token middleware that lives in
keystoneclient.middleware.auth_token has been deprecated in favour of
keystonemiddleware.auth_token.
This prints a deprecation warning and means we are not getting new
features.
Closes-Bug: #1428376
Change-Id: If5352801b8105533600965a25f02a577a858f1a2
Takashi Kajinami