- Cookstyle fixes
- Refactor Berksfile to use groups so we can exclude integration testing
cookbooks
- Update documentation
- Cleanup line wraps
- Enable sensitive resources for the
template[/etc/designate/designate.conf], to resources improve
security.
- Update delivery configuration to exclude integration cookbooks
- Fix ChefSpec output.
- Add missing ChefSpec tests
- Switch package installations to send packages as arrays instead of individual
package resources. This generally speeds up chef runs.
- Cleanup array syntax using %w() instead of []
Depends-On: https://review.opendev.org/701027
Depends-On: https://review.opendev.org/706101
Depends-On: https://review.opendev.org/706151
Depends-On: https://review.opendev.org/708059
Change-Id: I354db77f2d9486805713ac8688fcc552489c0a77
We probably should move the dashboard recipe to the openstack-dashboad
cookbook in another patch since we have fwaas and lbaas there as well.
Other changes include:
- Add missing cookbooks required for openstack-chef CI
- Add missing openstack-network dependency needed for the neutron_int
recipe
- Add missing mdns, producer and worker services for RHEL platform
- Ensure all servers start as well as be enabled
- Add rndc_key attribute for setting the path of the rndc.key
Depends-On: https://review.opendev.org/702772
Change-Id: Ibeb6f0d43313478eff1054552df48f96c7ec589d
- Replace git.openstack.org with opendev.org
- Update some documentation
- Move README.md to README.rst for better rendering
- Drop obsolete bootstrap.sh script
Change-Id: I09b1c971476c6034dd2cfb656545629305a35912
Python2.7 is going EOL soon, let us deploy python3 for Rocky from the
start, so we avoid having to switch later.
Change-Id: I37dc002541a760f9966f896ffbb59417c7285226
The changes in [0] sadly were almost, but not quite, completely broken.
They introduced config options that do not exist in designate and also
made secrets being saved into the node config.
Fix all this, also clean up the remainder of a workaround that is no
longer needed.
This was partially fixed for stable/queens in [1].
backport: stable/queens
[0] If4e185eb58a525e22971c7a8b876274c353db847
[1] https://review.opendev.org/606094
Change-Id: I5ccb4fa5d8f3a003c4dd1b07e1c9ab2a99246dd6
fog-openstack-1.x already appends "auth/tokens" so we no longer need to
do that.
Change-Id: I5d6f13d420b761ad14cda546119fda7ee4e9f8a3
Signed-off-by: Lance Albertson <lance@osuosl.org>
This is not even used anymore and is causing issues downstream for testing since
it was removed in openstack-common.
Change-Id: I4411e69c78e0ef41e271eee15caaafbe2eb4b7c1
Signed-off-by: Lance Albertson <lance@osuosl.org>
Per the Keystone Install Guide[1] the admin endpoint is superseded in
favor of a single public endpoint. Although internal goes through the
same instance, we should differentiate for project traffic and OpenStack
service traffic.
[1] https://docs.openstack.org/keystone/queens/install/keystone-install-ubuntu.html#install-and-configure-components
Depends-On: Id74966d9f1279f725bc41c08e434230a7845bbc1
Change-Id: I1adb3066c83aaffe8b22f2f2553f634483371974
Implements: blueprint simplify-identity-endpoint
- adds Chef Delivery config using the Chef community standards
- adds a blank default recipe to satisfy verification tests
Change-Id: I47fa53ce6a0e4d43e3de726f07b3c1d415fc303a
Implements: blueprint deprecate-rakefiles
This patch removes the openstack_user resource with :grant_domain
action. A user is always created within a specific domain; such a
mmembership cannot be tacked on later. This resource gave the user the
role intended for their project for the domain (i.e., for the Default
domain instead of for the service project).
We add the domain_name attribute that creates the designate user in
the desired domain. Note that this change needs a sufficiently recent
openstackclient cookbook -- otherwise the domain_name attribute is
ignored (which does not matter as long as the designate user is to be
created in the Default domain).