Changed
- Update release to train
- Migrated to using multi-store feature which has been deemed stable
Fixed
- Cookstyle
Removed:
- Unused rubocop rules
Change-Id: I19c1ff463a70a81e4d08bacb86e480e0a3951789
Depends-On: https://review.opendev.org/731859
- Cookstyle fixes
- Refactor Berksfile to use groups so we can exclude integration testing
cookbooks
- Update documentation
- Enable sensitive resources for the execute resources in
openstack_image_image and template[/etc/glance/glance-api.conf] to
improve security.
- Update delivery configuration to exclude integration cookbooks
- Set glance_store/stores, and update auth_type to password as described
in the upstream documentation [1]
- Fix ChefSpec output
[1] https://docs.openstack.org/glance/stein/install/install-rdo.html#install-and-configure-components
Depends-On: https://review.opendev.org/706151
Change-Id: I695b576267bc220b0b70011ab035520fc18ff955
This updates all references of let(:chef_run) to cached(:chef_run) to
speed up tests. By doing this, we have to create a new cached(:chef_run)
block whenever we need to adjust node attributes for testing.
In addition:
- Add missing swift_store RHEL ChefSpec test
Speed was improved from 40.38 seconds to 28.25 seconds
Change-Id: I42a56190cc090bd25900a1fbd5b5f160e5468533
Python2.7 is going EOL soon, let us deploy python3 for Rocky from the
start, so we avoid having to switch later.
Depends-On: https://review.opendev.org/682918
Change-Id: I8d5033c6bf045fa3df0b3e7d388b12c175b153f1
The glance registry has been deprecated upstream [1] and needs to be removed.
This removes all references to the registry service and moves the db migration
to the api recipe.
[1] https://blueprints.launchpad.net/glance/+spec/deprecate-registry
Depends-On: https://review.opendev.org/690410
Change-Id: I356aa65e63032e7866470ad507e5c9bce793a52b
Signed-off-by: Lance Albertson <lance@osuosl.org>
This is needed due to the registry being deprecated upstream and will be
removed.
Change-Id: I5a291c11816e1b6a7d0d62855785c7e2408c5f87
Signed-off-by: Lance Albertson <lance@osuosl.org>
fog-openstack-1.x already appends "auth/tokens" so we no longer need to
do that. In addition, comment out endpoint type until this PR [1] gets
merged and released.
[1] https://github.com/fog/fog-openstack/pull/494
Depends-On: https://review.opendev.org/666176
Change-Id: Ic80d08b6ed0180ca9513e4b4e230e787b2f5c52e
Signed-off-by: Lance Albertson <lance@osuosl.org>
- include Artful instead of Zesty to keep up with the times
- update cirros references to 0.4.0
- remove stale repo reference
Change-Id: I8b63581849d9c7e9d67d56e16619191703868755
Implements: blueprint modern-chef
This patch removes the openstack_user resource with :grant_domain
action. A user is always created within a specific domain; such a
membership cannot be tacked on later. This resource gave the user the
role intended for their project for the domain (i.e., for the Default
domain instead of for the service project).
We add the domain_name attribute that creates the glance user in the
desired domain. Note that this change needs a sufficiently recent
openstackclient cookbook -- otherwise the domain_name attribute is
ignored (which does not matter as long as the glance user is to be
created in the Default domain).
Change-Id: I07086d9ab65581cdcd77d402fe0d513b03a0af69
This patch removes the role_name when using openstack_user's :create
action (it gets ignored by the target method).
Note that the spec test would still pass if only the line in
identity_registration.rb (but not the test) were changed, because the
code that actually does grant the role to the resource is executed right
after user creation and before any tests check the resource for the
existence of the role_name attribute. In other words: if the argument
were required in a call but only supplied in another call, the spec
tests would not catch it. Something to watch out for.
Change-Id: I6d98e0603cc4d8fa2dd21cd402adbbe888fbe4f3
- Removed ancient Gemfile
- Style and lint fixes to support newer chefdk
- Rewrote metadata.rb for readability
Change-Id: Ie61ae3ca685738fe1de98fc9223d3e39535ce000
- Now use cookbook-openstackclient to create endpoints role service and
user
- added domain creation and access granting
- added values to work with identity_v3
- rewrote specs to work again
- updated readme
- added domain to image-upload
edited resource / provider
Change-Id: If7b4d6e563081a0be9957353d73ef61a9688df56
Depends-On: I0f8955f05de9b33711c54b9a198f45018cceb8e1
Since glance could be used to upload images,
make sure it's restarted immediately within the recipe.
Change-Id: Ie4a742a2a8aaeeec2886fcc0513e654d0237997c
I think it's more correct to use a normal user, admin,
to upload images, instead of using the service accounts.
Change-Id: Ifb1411a4392d04cd9a5e867ffc95327adf4ea4ea
* endpoint type (admin, internal, public) and service (identitiy, network etc.)
was switched during refactoring, this patch reverts this unintended switching
* edited bind_service service type from public,internal,admin to 'all'
for default binding to just one service
* use bind_address method from common
Change-Id: I4f97b659361dabd7fac216305d2aad2f1bb98f51
Depends-On: Iec485deaf415e4187a323435cce2b6bbadfc5d42
Depends-On: Ia5bddfc5e2fd77cd6e9e855c680b079f78fc1c3f
* removed rubocop exceptions in recipes and regenerated the
.rubocop_todo.yaml containing all remaining exceptions
* removed fedora, suse as supported platform
* adapted optimized endpoint logic
* moved endpoints from openstack-common to default attr
* bumbed openstack-common and identity to higher version
due to refactoring
* moved version up to 13.0.0
* adapt the specs (unit tests) to work again
* added new logic into templates/default/glance-*.conf.erb
* refactored attributes throughout all recipes that were connected to
the attributes used for the glance-*.conf.erb template to adapt the new
template attribute syntax
* moved all attibutes/default.rb that were used in glance-*.conf.erb to
attributes/glance_*_conf.rb
* removed all attributes from default.rb and glance-*.conf.erb which are set
as default in attributes, openstack doc and used to render the template
* seperated filestore config and deployment from default api recipe and made it
optional (e.g. swift_store)
* removed service config templates in favor of openstack-service.conf.erb from
common cookbook
* removed default support for most filestore backends in favor of an easily
wrappable cookbook structure which allow the configuration of filestore
backends in wrappers
Depends-On: I3262b2e6f792f37c32a446e6567790b82bdd4613
Depends-On: I0547182085eed91d05384fdd7734408a839a9a2c
Implements: blueprint cookbook-refactoring
Change-Id: Ifa5a7f4e1df47a3961976e64f654224864c3dcb4
* current logic with 'directory ::File.dirname node.attr' will create resources
with the same name 'directory '/var/cache/glance', but different parameters
(so only the first one will be executed) (recipes/api and /registry)
* fixed logic and specs to actually use the full node attributes and create the
two caching directories
Change-Id: I6289bf7a8b7b1a998ad4cefef04021ec02fe4172
After this path has been merged : https://review.openstack.org/#/c/190265/
The compute service has the ability to copy the image data from the mountpoint
directly which can save image download time.
This patch make the metadata file can be generated automatically if user
specify the id and mountpoint.
Change-Id: Ibd4cc2d15a97f8018fc7f0aa19e4f2c9d1da285c
The ['openstack']['image']['ssl']['enabled'] was being used for
both the API/Regsitry services AND the APIs internal connection
to the registry.
Need to allow for separate control for enabling SSL for API and Registry.
Added attributes to cover this.
And the APIs internal connection to the registry needs to be
configured correctly based upon the Registry's internal endpoint scheme
(http or https).
Change-Id: Ieed28ad891192d81356c0d40ba48d70517087950
Closes-Bug: #1462388
In order to allow components to better handle and respond to mq failures,
oslo has some heartbeat options that are useful.
Change-Id: I41b3fc4699a4f285e9fcb066da55bb8a7f1361a2
Partial-Bug: #1462438
Oslo.message using rabbit_max_retries and rabbit_retry_interval to
define reconnect rabbitmq server times and interval when can not
connect to rabbitmq server.
Change-Id: Id205952829678a83b0ccd8e415c64cf1283e0e08
Closes-bug: #1439968
Cleaned up all the minor rubocop issues, the ones left relate to
complex logic and what I think is a bug in rubocop for nested
vs compact modules/class definitions.
Change-Id: I6097cd1032a5b2305d9a6ca8cb2e2b19f6a57a1e
- deprecated Gemfile
- updated TESTING and README
- updated Rakefile to use chef exec instead of bundle exec
- refactored specs to work with new chefspec version
Change-Id: I8fe06d02043b084484142d4e575f25003ed127af
This commit allows enabling SSL for glance-api and registry
endpoints by adding few new node attributes. Glance API and registry
configuration files are also modified to use these node attributes.
With these changes, users can easily enable SSL - both in secure and
insecure mode. However, it is user's responsibility to generate and
provide location of SSL certificate and its key.
Closes-Bug #1445773
Change-Id: I1d0f776efb392e058bc3dbf0ee5223512b60f584
With change to use the correct "service" role for service users,
they can no longer create public images.
For this recipe, need to use admin for public images.
Added a public flag to the lwrp such that other non-admin
accounts can create images. Made a note in the client cookbook
patch that this support needs to be merged in there.
Change-Id: I99e2febfdbf6f4bab260d897216f4ae768cf3315
Related-Bug: #1436050
Closes-Bug: #1441292
For Kilo release, there are many deprecated group/name in conf files of openstack,
so we need to change the deprecated group/name to new group/name.
blueprint conf-section-update-for-kilo
Closes-bug: #1436170
Change-Id: I87a4c277704820d10ba59389f1172351e980e55f