Commit Graph

58 Commits

Author SHA1 Message Date
Takashi Kajinami bd33b1037e Retire puppet-freezer - Step 2: Remove Project Content
Depends-on: https://review.opendev.org/808072
Change-Id: I647ce166bc286a8312baa51b3972a35ae6bc4818
2021-09-13 17:54:36 +09:00
Thomas Goirand d48492d84a Get rid of the $pyvers variable
Since everyone has switched to Python3, it's time for the removal of the
$pyvers variable.

Change-Id: I6095e9aa5f9c6dcd07e246d78f86ff2ef5660fa4
2021-06-09 17:36:59 +02:00
Takashi Kajinami 2420f2b314 Set fixture paths for unit tests
This change defines manifest_dir and module_path expicitly in unit
tests so that modules installed under fixtures directory is properly
loaded.

Closes-Bug: #1930403
Change-Id: Ic97244e31dbd8f6df843ae91c82369fc17c225d0
2021-06-02 14:06:57 +09:00
Thomas Goirand f57e621e53 Allow to configure policy_dirs
This patch makes it possible to override the current service default,
which is /etc/<service>/policy.d .

Change-Id: Iaffada6b0cd29e880a65ce9205b87b94940e47b7
2021-04-11 23:38:49 +02:00
Takashi Kajinami ebed1e8d9c Add support for oslo_policy/enforce_new_defaults
Depends-on: https://review.opendev.org/781428
Change-Id: Ic4638dec082a58d8244adebf73d87a82f5377689
2021-03-24 16:32:26 +09:00
Takashi Kajinami 25692014c0 Add support for the oslo_policy/enforce_scope parameter
Depends-on: https://review.opendev.org/#/c/759008/
Change-Id: I74616f84592caaed261082325b7c2ef11124239e
2021-03-21 10:55:09 +09:00
Takashi Kajinami c494e85c90 Use yaml instead of json for policy file
Because usage of json for policy file will be deprecated and replaced
by yaml[1].

[1] https://governance.openstack.org/tc/goals/selected/wallaby/migrate-policy-format-from-json-to-yaml.html

Depends-on: https://review.opendev.org/769647
Change-Id: I35c5f1e410b383e4345986a136a54088f60acda6
2021-01-07 23:20:16 +00:00
ZhongShengping 84f329b7b6 Allow db sync timeouts to be configurable
As Openstack projects continue to have longer database migration
chains, the Puppet default timeout of 300 seconds for an execution
is becoming too short a duration on some hardware, leading to timeouts.
As projects continue to add more migration scripts without pruning
the base, timeouts will continue to become more frequent unless
this time can be expanded.

Change-Id: Ic3dee0bf0a73c57f24c446620e206c4f4a94c600
Closes-Bug: #1904962
2020-11-23 09:27:52 +08:00
Takashi Kajinami 7bd9f6e58f Add support for the keystone_authtoken/service_type parameter
Change-Id: I6a2424653efab14ce8c1a250bc69e7a9cca8dcae
2020-11-03 17:51:42 +09:00
ZhongShengping 478bf90b3a Include deps class in unit test for sync
Change-Id: I1362892385630f7233db66b984d7b4d9f6b457fb
2020-10-12 10:46:40 +08:00
ZhongShengping d495ba9c98 Include deps class in unit test for postgresql
Change-Id: I1927b584294696db3b6ed00a751569fe0bc3e7a2
2020-10-10 09:31:12 +08:00
ZhongShengping 232dd1882a Include deps class in unit test for mysql
Change-Id: I90ed4e2dcbdd53f087abb31f59efb68191693f5c
2020-10-09 10:24:19 +08:00
Tobias Urdin 19af306b90 Remove beaker jobs
There is no acceptance manifest anyway.

Change-Id: Icfd4e036d99735e94726a57e3a14b63f09c0883a
2020-08-31 21:19:42 +02:00
ZhongShengping cfc9a27371 Add mysql_enable_ndb option
Add mysql_enable_ndb parameter to select mysql storage engine.

Change-Id: I5ba8a602e500d948d7d758bfd6a2d8594dd3be09
Depends-On: https://review.opendev.org/#/c/748067
Closes-Bug: #1892952
2020-08-26 11:55:50 +08:00
ZhongShengping ff3485b67f Add service_token_roles for keystone authtoken config
Add the ability to configure service_token_roles.

Change-Id: Iab41f836366d42d16b6c3dc9e47db381992d6fcc
Closes-Bug: #1892284
2020-08-20 10:41:27 +08:00
Lewis Denny f0305b8f3d Add support for the interface parameter in authtoken middleware
This patch adds support for [keystone_authtoken] interface parameter,
so that operators can define which endpoint should be used by authtoken
middleware.

Change-Id: I451c224457b20f01c72283ca022024679aff9d07
2020-07-16 10:57:22 +10:00
Takashi Kajinami 72718329e9 Remove password hash generation in each puppet modules
... and migrate it to openstacklib so that all logics about database
configuration are implemented in one common place.

Depends-on: https://review.opendev.org/#/c/728595/
Change-Id: Ie66552bc2a4447abca9d685e461ac3837568583d
2020-05-19 22:48:57 +09:00
Zuul 13a096b39e Merge "Add CentOS8 to nodesets" 2020-05-11 22:29:50 +00:00
Takashi Kajinami 49eec3db7b Add CentOS8 to nodesets
Change-Id: Ic1dce4d6bf6e846003a30278243c0dea1cfa3e03
2020-05-10 21:44:37 +09:00
Takashi Kajinami 7015553df5 Use anchor to require necessary packages
... so that correct packages are required without re-defining them in
resource implementations.

Change-Id: Ib6c523b0d546b73a6911a1da9cd66973cdf29080
2020-05-04 06:12:51 +00:00
Takashi Kajinami d5aa53f616 Expect python3 client package in CentOS8
In CentOS, we expect to have python3 client package in 8.x while we
expect to have python2 in 7.x .
Fix unit tests to expect the correct version according to os major
version.

Change-Id: Ifc590792271616cbe20a7e4692ce654f37623a8c
2020-03-31 22:23:09 +09:00
ZhongShengping ee8d6c8f83 Deprecate min_pool_size option
min_pool_size option is not used,see:

https://review.opendev.org/#/c/565090/

Change-Id: Id30db32567d1c0ced302e61ef5b04f40b334c651
Closes-Bug: #1868511
2020-03-25 14:53:40 +08:00
ZhongShengping 4cfadc754b Fix client spec test
Change-Id: Iac1e4f21e3ff80026945732aa979f4f22dd2c1c6
2019-05-20 11:03:19 +08:00
ZhongShengping 65162bd7cb Deprecate idle_timeout option
The idle_timeout parameter is deprecated, use connection_recycle_time
instead[1].

[1]https://review.opendev.org/#/c/334182/

Change-Id: Iddc726674024570139328633a40fcdc293f50baf
Depends-On: https://review.opendev.org/656106/
Closes-Bug: #1826692
2019-04-28 15:00:07 +08:00
ZhongShengping 2b5fdbab82 Service_token_roles_required missing in the server config file
Service_token_roles_required missing in the server config file which
allows backwards compatibility to ensure that the service tokens are
compared against a list of possible roles for validity.

Change-Id: I95089f9f1d5039d7d14e3850535536ec1804fdb1
Closes-Bug: 1778198
2019-02-15 10:03:02 +08:00
ZhongShengping c537994b03 Fix lint issue
Change-Id: I789b6606b399d85ff6df28c02f315a880ef92baa
2019-01-25 12:23:43 +08:00
Zuul 4c41065beb Merge "Add freezer::deps to freezer::db" 2019-01-19 00:05:29 +00:00
Zuul b7734515e6 Merge "Remove redundantly tested code" 2019-01-18 23:48:05 +00:00
Tobias Urdin b0903faa3f Add freezer::deps to freezer::db
So it's consistent on all modules.

Change-Id: I22978072f1822072cfb1fa383b9f95e86f36292d
2019-01-18 11:08:47 +01:00
Tobias Urdin 2958186767 Remove redundantly tested code
Remove code that is redundantly tested.

This should not be tested here but in puppet-oslo
where this logic resides.

If we keep this and we do changes in puppet-oslo we
will break these unit tests, this is something we need
to sort out for all modules.

Change-Id: I5db7a068e19e96221317c915855cf07759361599
2019-01-18 10:25:58 +01:00
Tobias Urdin 2a6342ab79 Inherit pyvers from openstacklib::defaults
Change-Id: Ie770b349c157bc36e19846971fece37f336a8b32
2019-01-17 21:27:05 +01:00
ZhongShengping 56378b0272 Deprecate pki related options
check_revocations_for_cached and hash_algorithms are deprecated for
removel because of PKI token format is no longer supported.
Update warning message and add a release note.

Change-Id: I590241e0dca24ffa5dc084576fd72eb171905582
Closes-Bug: #1804562
Closes-Bug: #1804720
2018-11-23 10:22:11 +08:00
Tobias Urdin 75405dcc0c modulesync: sync and add nodepool-bionic for beaker
Change-Id: I6afe3aab97c1c874861daeec3533b17cde310de9
2018-07-18 16:17:48 +02:00
ZhijunWei 8f32e7c0dd Replace port 35357 with 5000
Now that the v2.0 API has been removed, we don't have a reason to
include deployment instructions for two separate applications on
different ports.

Change-Id: Ie35bd3c522886eb696facde338b8f42785a904ac
2018-05-13 15:39:44 +08:00
zhubingbing 807c1f1bcd Missing deps for unit test of config.pp
Change-Id: I3156cbb1d7e06117ea5ccea5774558a7c595e170
2018-04-19 13:43:10 +08:00
Zuul efd9b15418 Merge "Debian is using python3-freezerclient" 2018-04-13 03:10:26 +00:00
zhubingbing 293aeeefcc Debian is using python3-freezerclient
Change-Id: I9bd0cbd5a6f09dc3233f11c24164c6a6e785b97b
2018-04-12 11:14:17 +08:00
ZhongShengping 7c516ec23f Deprecate auth_uri option
Option auth_uri from group keystone_authtoken is deprecated[1].
Use option www_authenticate_uri from group keystone_authtoken.

[1]https://review.openstack.org/#/c/508522/

Change-Id: I9966c0443f8199c31a66adc1465c6336a7c71dd7
Depends-On: I4c82a63baabd6b9304b302c97cd751a0103d8316
Closes-Bug: #1759098
2018-04-10 00:56:01 +00:00
ZhongShengping 2387e68896 Add pool_timeout option
Add pool_timeout option to configure this value for pool_timeout with
SQLAlchemy.

Change-Id: Ieec85a15c5af99bf15c26bb6271013ee1d9e433c
Closes-Bug: #1757581
2018-03-22 15:40:13 +08:00
ZhongShengping d9cb8fd7a4 Fix unit test for sync
Change-Id: I336a86024cd01ba44d9eab13cd8a7144887afdba
2018-03-16 11:02:14 +08:00
ZhongShengping 2632d6796e Add 'openstack-db' tag to db-sync Exec resource
In order to make easy orchestration on all OpenStack db-sync, add this
tag so people can use this tag in composition layer.
A use case it to set some orchestration to make sure MySQL Galera is
ready before running any Exec with this tag.

Change-Id: I39bccb5d538885c827b26b826029b4f8dfcfcd42
Closes-Bug: #1755102
2018-03-12 16:33:07 +08:00
ZhongShengping da9091dc8f Add use_journal option for logging configuration
This enables oslo.log to pass logging records to journald.

Change-Id: If2986a26f23f7eca97fab5821f1e5a24dcbe93f4
2018-01-15 15:42:28 +08:00
Emilien Macchi 193858a13b Add group to policy management
The move of policy.json into code means the file may not exist. We've
added support to ensure that the file exists in the openstacklib but we
need to make sure the permissions are right for each service. This adds
the group information to the policies so it works right.

Depends-On: I26e8b1384f4f69712da9d06a4c565dfd1f17c9ed
Change-Id: I998405939f2481438eb73b5cee2e595fc34073b5
Co-Authored-By: Alex Schultz <aschultz@redhat.com>
2018-01-10 14:22:45 -08:00
ZhongShengping 84e686720f Expose use_json logging option
It enables JSON-formatted logging from oslo.log.

Change-Id: Ia3719bc30a2fc65eecc11019261337f25ec09b99
2017-11-28 09:26:34 +08:00
ZhongShengping 522fac0727 Configure *_domain_name to Default by default
Keystone v2.0 API was removed so we have no choice but configuring
user_domain_name and project_domain_name otherwise it fallbacks to
Keystone v2.0 and it fails. This patch sets the default value so we make
sure Keystone v3 will be used out of the box for our users.

Change-Id: I47db3ba0ec57c33f99d8256dda6878c5a244522e
2017-10-13 14:31:11 +08:00
ZhongShengping f9cf849f3e Deprecate revocation_cache_time option
The revocation_cache_time is deprecated for removel because of PKI
token format is no longer supported.
Update warning message and add a release note.

Change-Id: Icba3a504a0ec4a9f013aeb0216ea964171cf026e
Closes-Bug: #1717144
2017-09-14 11:21:01 +08:00
ZhongShengping fd5bc09154 Fix unit test
The db_backend_package name has changed in puppet-oslo[0], so fix it.

[0]: https://review.openstack.org/#/c/467582/

Change-Id: I6750f961f599d87e82f977324f1b5a350fda26a6
Releated-Bug: #1693403
2017-05-25 11:20:43 +08:00
ZhongShengping bef532be4b oslo policy: check puppet resource instead of actual config in spec
Change-Id: I858699f3aa3c317ab5355111c341a733d444121e
2017-05-23 14:15:18 +08:00
ZhongShengping 11922ac8be oslo db: check puppet resource instead of actual config in spec
Change-Id: I4bd2980861a301bd3bedb4c0bdee24daac5ba5bd
2017-04-08 11:08:19 +08:00
Mykyta Karpin c2e73fa571 oslo log: check puppet resource instead of actual config in spec
Change-Id: Id2b67512f61b8b5f25eb6879fadb125533ae2a63
2017-04-07 10:53:17 +00:00