- Cookstyle fixes
- Refactor Berksfile to use groups so we can exclude integration testing
cookbooks
- Update documentation
- Cleanup line wraps
- Enable sensitive resources for the
template[/etc/designate/designate.conf], to resources improve
security.
- Update delivery configuration to exclude integration cookbooks
- Fix ChefSpec output.
- Add missing ChefSpec tests
- Switch package installations to send packages as arrays instead of individual
package resources. This generally speeds up chef runs.
- Cleanup array syntax using %w() instead of []
Depends-On: https://review.opendev.org/701027
Depends-On: https://review.opendev.org/706101
Depends-On: https://review.opendev.org/706151
Depends-On: https://review.opendev.org/708059
Change-Id: I354db77f2d9486805713ac8688fcc552489c0a77
We probably should move the dashboard recipe to the openstack-dashboad
cookbook in another patch since we have fwaas and lbaas there as well.
Other changes include:
- Add missing cookbooks required for openstack-chef CI
- Add missing openstack-network dependency needed for the neutron_int
recipe
- Add missing mdns, producer and worker services for RHEL platform
- Ensure all servers start as well as be enabled
- Add rndc_key attribute for setting the path of the rndc.key
Depends-On: https://review.opendev.org/702772
Change-Id: Ibeb6f0d43313478eff1054552df48f96c7ec589d
The changes in [0] sadly were almost, but not quite, completely broken.
They introduced config options that do not exist in designate and also
made secrets being saved into the node config.
Fix all this, also clean up the remainder of a workaround that is no
longer needed.
This was partially fixed for stable/queens in [1].
backport: stable/queens
[0] If4e185eb58a525e22971c7a8b876274c353db847
[1] https://review.opendev.org/606094
Change-Id: I5ccb4fa5d8f3a003c4dd1b07e1c9ab2a99246dd6
fog-openstack-1.x already appends "auth/tokens" so we no longer need to
do that.
Change-Id: I5d6f13d420b761ad14cda546119fda7ee4e9f8a3
Signed-off-by: Lance Albertson <lance@osuosl.org>
Per the Keystone Install Guide[1] the admin endpoint is superseded in
favor of a single public endpoint. Although internal goes through the
same instance, we should differentiate for project traffic and OpenStack
service traffic.
[1] https://docs.openstack.org/keystone/queens/install/keystone-install-ubuntu.html#install-and-configure-components
Depends-On: Id74966d9f1279f725bc41c08e434230a7845bbc1
Change-Id: I1adb3066c83aaffe8b22f2f2553f634483371974
Implements: blueprint simplify-identity-endpoint
- adds Chef Delivery config using the Chef community standards
- adds a blank default recipe to satisfy verification tests
Change-Id: I47fa53ce6a0e4d43e3de726f07b3c1d415fc303a
Implements: blueprint deprecate-rakefiles
This patch removes the openstack_user resource with :grant_domain
action. A user is always created within a specific domain; such a
mmembership cannot be tacked on later. This resource gave the user the
role intended for their project for the domain (i.e., for the Default
domain instead of for the service project).
We add the domain_name attribute that creates the designate user in
the desired domain. Note that this change needs a sufficiently recent
openstackclient cookbook -- otherwise the domain_name attribute is
ignored (which does not matter as long as the designate user is to be
created in the Default domain).