Commit Graph

1908 Commits

Author SHA1 Message Date
OpenStack Release Bot 4063447941 Update master for stable/2024.1
Add file to the reno documentation build to show release notes for
stable/2024.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.1.

Sem-Ver: feature
Change-Id: I210280e91ebc719ed735cd55852b298de62c3a27
2024-04-18 10:46:21 +00:00
Zuul 77710a94bd Merge "Support max_password_length config option" 2024-04-17 16:42:58 +00:00
Sam Morrison ac752a4ee1 Support max_password_length config option
Change-Id: Ic00419f12a922d866b490e351d0eb87c96380315
2024-04-17 09:03:25 +00:00
Zuul 464759eb6b Merge "boostrap: Validate interface" 2024-04-16 08:03:12 +00:00
Takashi Kajinami 1cb55e22e0 Prepare 2024.1 release
Change-Id: Iaf9046744c4086dc38bc05887260b139045d3ca2
2024-04-15 22:28:19 +09:00
Zuul 8d91262b57 Merge "Bump upper version of puppetlabs-apache" 2024-04-15 12:17:23 +00:00
Takashi Kajinami 2c0537d1a6 boostrap: Validate interface
The interface parameter accepts only public, internal or admin. This
enforces this requirement using parameter type.

Change-Id: Iedbf8e2daf3f45232537c01df1c566641a231c79
2024-04-14 00:38:30 +09:00
Zuul 39f908f43e Merge "reno: Update master for unmaintained/xena" 2024-04-12 13:05:28 +00:00
OpenStack Release Bot c492a828f4 reno: Update master for unmaintained/xena
Update the xena release notes configuration to build from
unmaintained/xena.

Change-Id: If3d868cb280075085a753527c61fedff95d75476
2024-04-12 12:32:22 +00:00
OpenStack Release Bot 32e247057a reno: Update master for unmaintained/wallaby
Update the wallaby release notes configuration to build from
unmaintained/wallaby.

Change-Id: I8f88c1df8422b6b271227e146e3aba97af566cce
2024-04-12 12:24:14 +00:00
Zuul cc26f22ff1 Merge "Deprecate support for [DEFAULT] catalog_template_file" 2024-04-11 17:20:54 +00:00
Takashi Kajinami cc34e82adf Bump upper version of puppetlabs-apache
Currently 12.1.0 is used in CI and is proven to work.

Change-Id: Ibb41df39c6459555c2fdc37836d2cf95a09041f7
2024-04-12 00:41:19 +09:00
Tobias Urdin de567154f6 Set show_diff to false when configuring Federation
When we configure federation changes in configuration
files that contain sensitive informatio ncan be leaked
into the output.

Change-Id: I797fc8101837fe344c056a032ba98e5fbc8a2bec
2024-04-09 16:37:21 +02:00
Takashi Kajinami f233ad9240 validate maxdelay for cron job
The parameter descriptions says the value should be a positive integer
(or 0). Validate the given value to reject invalid values such as
strings or even negative values.

Change-Id: I9c60cfe63697632fc816eec3aa2824578f0d3573
2024-04-08 16:46:41 +09:00
Takashi Kajinami 8780840907 Use native interface to inject vhost configuration
puppetlabs-apache provides a native interface to inject arbitrary
contents to vhost configuration files managed by the module.

Change-Id: Ia2489b5c79781a6335eea3ce2f6a19fd1c45b1c2
2024-03-29 04:06:56 +00:00
Zuul aacacdc154 Merge "Allow omitting admin/internal endpoint" 2024-03-18 16:19:17 +00:00
Takashi Kajinami 274ecb90d4 Allow omitting admin/internal endpoint
Keystone v3 API does not require that all the three endpoint types are
given and allows using only specific endpoint types(eg. only public, or
public and internal). This allows users to omit specific endpoint types
by setting endpoint url options to ''.

Change-Id: Ifef2070ad25cadf961466ca9f384965d03c08f81
2024-03-18 16:18:14 +09:00
Zuul 85ea68eecc Merge "Expose rabbit_transient_quorum_queue" 2024-03-15 04:09:17 +00:00
Takashi Kajinami 29a32c74a6 Deprecate support for [DEFAULT] catalog_template_file
The templated catalog driver has been deprecated in keystone, so we
should deprecate support for the driver options.

Change-Id: I5f3482397883e00d447eb08bed4c57821041826c
2024-03-15 01:48:41 +09:00
Takashi Kajinami 5e79239531 Deprecate amqp messaging driver support
... because the driver has been deprecated in oslo.messaging.

Change-Id: I5c55a06b39118156db845c4ee6d415cb4d695ea0
2024-03-14 09:35:53 +09:00
Takashi Kajinami da2bc869a3 Expose rabbit_transient_quorum_queue
Depends-on: https://review.opendev.org/911021
Change-Id: Ibe989d7a9bb10d6dff72b001c0e689bb029960b5
2024-03-14 09:34:06 +09:00
Zuul 50b5260cc6 Merge "openidc: Support more redis cache options" 2024-03-08 15:03:28 +00:00
Zuul fc0d8d4afb Merge "Fix broken rendering of OIDC Options" 2024-03-08 15:03:26 +00:00
Zuul c3eed5f9c7 Merge "identity provider: Drop reference to removed parameters" 2024-03-08 15:03:24 +00:00
Takashi Kajinami 3e8788c94e cache: Support new redis options
The oslo.cache 3.7.0 release introduced some options for redis backend
and redis sentinel backend. This introduces for these parameters.

Depneds-on: https://review.opendev.org/910629
Change-Id: Ie5e6e7b8dfa0753ccca1094f06a745fdb0acb5bc
2024-03-07 22:53:04 +09:00
Takashi Kajinami 7f611fe32d identity provider: Drop reference to removed parameters
The ssl parameters of the keystone class were already removed[1].

Also keystone defines its own defaults for certfile and keyfile so
these options are not actually required.

[1] b99810d6f9

Change-Id: I1adf1d04d575db8a1fbfdefc29700cf9ff27d254
2024-03-05 18:28:33 +09:00
Takashi Kajinami 6469c223f8 openidc: Support more redis cache options
Change-Id: I70cc5c2d0ecf10b4aa4e07e4af91609d1ad7cee3
2024-03-05 17:55:46 +09:00
Takashi Kajinami 30f50ce8fd Fix broken rendering of OIDC Options
... and also fix a typo in redis password option.

Closes-Bug: #2054308
Change-Id: I41d3efd265305e80c453e7f042797881319c5047
2024-03-05 17:54:15 +09:00
Zuul 26d0bf2218 Merge "Refactor resource dependencies" 2024-03-04 16:27:14 +00:00
Takashi Kajinami 63696be457 cache: Make parameter description order consistent
... with parameter definition order.

Change-Id: I06b4b87f494be8b945fc866129c7607c7333c622
2024-03-01 10:51:49 +09:00
Takashi Kajinami 9fb48f7526 Refactor resource dependencies
This refactors resource dependencies to improve the following points.

 - Avoid unnecessary dependencies across services. For example aodh
   service does not require cinder db.

 - Restart keystone on change in uwsgi only when a standalone service
   is used. uwsgi config is not used when keystone is run by apache.

Change-Id: Ic4f43215ea90c6b71fe4225e2dfa6a6a3abf6869
2024-03-01 10:29:13 +09:00
Zuul bd78b27822 Merge "cache: Support options for SASL mechanism in memcached" 2024-02-29 22:55:33 +00:00
Takashi Kajinami e15a169865 Fix wrong OIDCRedirectURI
The redirect path should not contain /auth/ to be consistent with
the protected endpoint url.

Change-Id: Ia72cff99d28eeb84a0ee273a0fe08ca06bb7a8c4
2024-03-01 00:24:52 +09:00
Takashi Kajinami 76422b5a30 cache: Support options for SASL mechanism in memcached
Depends-on: https://review.opendev.org/910122
Change-Id: Icdee612d5680ff4f0c1f04d236809a423e2817c2
2024-02-29 23:56:48 +09:00
Zuul ea0074dc78 Merge "service_identity: Allow omitting internal/admin endpoints" 2024-02-26 16:54:22 +00:00
Takashi Kajinami 2cc59127e4 service_identity: Allow omitting internal/admin endpoints
Keystone v3 API no longer requires all the three endpoint types are
created and some deployments may use only public endpoints (or public
and internal endpoints).

This looses the validation to allow such deployment architecture.

Change-Id: I3873352dd3ea8556fbaa4ce3c558a912cc5f52e7
2024-02-26 20:15:56 +09:00
Takashi Kajinami 5886b4fe23 healthcheck: Expose ignore_proxied_requests parameter
Depends-on: https://review.opendev.org/909807
Change-Id: I36065f01f7e945596b5d23cd8078381c0dccedf3
2024-02-26 01:21:58 +09:00
Zuul a94f767c0a Merge "federation: Ensure keyston::wsgi::apache is loaded" 2024-02-24 17:56:20 +00:00
Zuul f83e6bc6d2 Merge "keystone_endpoint: Fix id generate with only partial types" 2024-02-22 15:27:23 +00:00
OpenStack Release Bot cdef36e88f reno: Update master for unmaintained/yoga
Update the yoga release notes configuration to build from
unmaintained/yoga.

Change-Id: Ie7f99b4fb5a05d19a58adf11bda29a50bd45f008
2024-02-21 16:46:21 +00:00
Takashi Kajinami 96cb8d7744 keystone_endpoint: Fix id generate with only partial types
This fixes how the id property is generated in case some endpoint types
do not exist, which is allowed in Keystone v3 API.

Closes-Bug: #1713814
Change-Id: I2bbc831a78595e2f7cf3fc5d7d601281665fcc05
2024-02-20 17:37:52 +09:00
Takashi Kajinami 2cc0bfdc74 federation: Ensure keyston::wsgi::apache is loaded
... otherwise the reference to keystone::wsgi::apache::priority fails.

Closes-Bug: #2054306
Change-Id: If33a0f50a071157314bbac820ce13dbd79bc9d3e
2024-02-20 00:20:43 +09:00
Zuul 9fa166a3cc Merge "Drop redundant default of send_service_user_token" 2024-01-23 16:32:41 +00:00
Takashi Kajinami 4261de3feb Drop redundant default of send_service_user_token
The option defaults to False, so we don't need the explicit default and
can replace it by os_service_default fact.

Change-Id: Iba52032d02c70258f79f0aae84a5b6059a0c1281
2024-01-23 14:38:22 +09:00
Zuul 68ae4c5e3d Merge "healthcheck: Expose allowed_source_ranges" 2024-01-18 16:48:30 +00:00
Takashi Kajinami b370f83843 healthcheck: Expose allowed_source_ranges
... which was added to puppet-oslo recently.

Depends-on: https://review.opendev.org/905557
Change-Id: I7a239c556c9e5615ed7668ae2d5ad6c0bf73b624
2024-01-17 15:23:54 +09:00
Zuul 6c202267c5 Merge "service_identity: Fix parameter descriptions" 2024-01-09 06:19:06 +00:00
Takashi Kajinami 3a2ba9a1c7 service_identity: Fix parameter descriptions
Some of the parameters are optional and required only when a specific
resource is created.

This also update the parameter types so that empty strings are rejected
properly.

Change-Id: I2010f079303eb40190908f4a8209ef6e87d1b915
2024-01-03 08:30:35 +00:00
Zuul 322a1e2962 Merge "Support [cache] memcache_pool_flush_on_reconnect" 2023-12-15 18:13:54 +00:00
Takashi Kajinami 30e759b35e Support [cache] memcache_pool_flush_on_reconnect
Depends-on: https://review.opendev.org/902861
Change-Id: Ib488afff91a994791b911d7c2cf79cad9aa99d85
2023-12-14 17:54:57 +09:00