This change defines manifest_dir and module_path expicitly in unit
tests so that modules installed under fixtures directory is properly
loaded.
Closes-Bug: #1930403
Change-Id: Ic97244e31dbd8f6df843ae91c82369fc17c225d0
This patch makes it possible to override the current service default,
which is /etc/<service>/policy.d .
Change-Id: Iaffada6b0cd29e880a65ce9205b87b94940e47b7
As Openstack projects continue to have longer database migration
chains, the Puppet default timeout of 300 seconds for an execution
is becoming too short a duration on some hardware, leading to timeouts.
As projects continue to add more migration scripts without pruning
the base, timeouts will continue to become more frequent unless
this time can be expanded.
Change-Id: Ic3dee0bf0a73c57f24c446620e206c4f4a94c600
Closes-Bug: #1904962
This patch adds support for [keystone_authtoken] interface parameter,
so that operators can define which endpoint should be used by authtoken
middleware.
Change-Id: I451c224457b20f01c72283ca022024679aff9d07
... and migrate it to openstacklib so that all logics about database
configuration are implemented in one common place.
Depends-on: https://review.opendev.org/#/c/728595/
Change-Id: Ie66552bc2a4447abca9d685e461ac3837568583d
In CentOS, we expect to have python3 client package in 8.x while we
expect to have python2 in 7.x .
Fix unit tests to expect the correct version according to os major
version.
Change-Id: Ifc590792271616cbe20a7e4692ce654f37623a8c
Service_token_roles_required missing in the server config file which
allows backwards compatibility to ensure that the service tokens are
compared against a list of possible roles for validity.
Change-Id: I95089f9f1d5039d7d14e3850535536ec1804fdb1
Closes-Bug: 1778198
Remove code that is redundantly tested.
This should not be tested here but in puppet-oslo
where this logic resides.
If we keep this and we do changes in puppet-oslo we
will break these unit tests, this is something we need
to sort out for all modules.
Change-Id: I5db7a068e19e96221317c915855cf07759361599
check_revocations_for_cached and hash_algorithms are deprecated for
removel because of PKI token format is no longer supported.
Update warning message and add a release note.
Change-Id: I590241e0dca24ffa5dc084576fd72eb171905582
Closes-Bug: #1804562
Closes-Bug: #1804720
Now that the v2.0 API has been removed, we don't have a reason to
include deployment instructions for two separate applications on
different ports.
Change-Id: Ie35bd3c522886eb696facde338b8f42785a904ac
Option auth_uri from group keystone_authtoken is deprecated[1].
Use option www_authenticate_uri from group keystone_authtoken.
[1]https://review.openstack.org/#/c/508522/
Change-Id: I9966c0443f8199c31a66adc1465c6336a7c71dd7
Depends-On: I4c82a63baabd6b9304b302c97cd751a0103d8316
Closes-Bug: #1759098
Add pool_timeout option to configure this value for pool_timeout with
SQLAlchemy.
Change-Id: Ieec85a15c5af99bf15c26bb6271013ee1d9e433c
Closes-Bug: #1757581
In order to make easy orchestration on all OpenStack db-sync, add this
tag so people can use this tag in composition layer.
A use case it to set some orchestration to make sure MySQL Galera is
ready before running any Exec with this tag.
Change-Id: I39bccb5d538885c827b26b826029b4f8dfcfcd42
Closes-Bug: #1755102
The move of policy.json into code means the file may not exist. We've
added support to ensure that the file exists in the openstacklib but we
need to make sure the permissions are right for each service. This adds
the group information to the policies so it works right.
Depends-On: I26e8b1384f4f69712da9d06a4c565dfd1f17c9ed
Change-Id: I998405939f2481438eb73b5cee2e595fc34073b5
Co-Authored-By: Alex Schultz <aschultz@redhat.com>
Keystone v2.0 API was removed so we have no choice but configuring
user_domain_name and project_domain_name otherwise it fallbacks to
Keystone v2.0 and it fails. This patch sets the default value so we make
sure Keystone v3 will be used out of the box for our users.
Change-Id: I47db3ba0ec57c33f99d8256dda6878c5a244522e
The revocation_cache_time is deprecated for removel because of PKI
token format is no longer supported.
Update warning message and add a release note.
Change-Id: Icba3a504a0ec4a9f013aeb0216ea964171cf026e
Closes-Bug: #1717144