Commit Graph

157 Commits

Author SHA1 Message Date
Zuul f023fca49e Merge "Ensure python-redis is install" 2024-04-11 15:30:23 +00:00
Takashi Kajinami 0cc6468f2b Ensure python-redis is install
The python-redis package is an optional dependency and needs to be
installed explicitly in Ubuntu or Debian. (The zaqar package in RDO
has additonal dependency to require python-redis now).

Change-Id: I5c768a4ed60909f2e764ed6a39c372814b50c58b
2024-04-08 18:35:04 +09:00
Takashi Kajinami f7793ae10d cache: Support new redis options
The oslo.cache 3.7.0 release introduced some options for redis backend
and redis sentinel backend. This introduces support for these
parameters.

Depneds-on: https://review.opendev.org/910629
Change-Id: I88b6b3c41b6f8691720b6bf9ccd5999d7a24f68c
2024-04-03 00:20:22 +09:00
Takashi Kajinami 90cadc8ac2 cache: Support options for SASL mechanism in memcached
Depends-on: https://review.opendev.org/910122
Change-Id: I41e1d14bf21139c590cc241c63f45dec7d022df6
2024-03-05 14:14:26 +09:00
Takashi Kajinami 04e9a3657a Add HashClient retry options for the dogpile.cache backend
This patch specifies a set of options required to setup the HashClient
retry feature of dogpile.cache cache backend.

Original oslo.cache change:
https://review.opendev.org/c/openstack/oslo.cache/+/824944

Co-Authored-By: Hervé Beraud <hberaud@redhat.com>
Depends-On: https://review.opendev.org/826870
Change-Id: Iefecbae22a80e5218b43067536378beff72badbb
2024-03-05 13:41:58 +09:00
Takashi Kajinami f792373d70 Add cache client retry options for the pymemcache backend
This patch specifies a set of options required to setup the retrying
wrapper feature of pymemcache (dogpile.cache) cache backend.

Original oslo.cache change:
https://review.opendev.org/c/openstack/oslo.cache/+/803747

Co-Authored-By: Hervé Beraud <hberaud@redhat.com>
Depends-On: https://review.opendev.org/826869
Change-Id: Ia0fa98ff49d63332eff8e4e377402d2527b1c595
2024-03-05 13:41:30 +09:00
Takashi Kajinami 3042965cca Add support for oslo.reports options
Depends-on: https://review.opendev.org/804804
Change-Id: I2216ae2256a9898bc663157698445022382b4ff5
2024-01-30 00:50:14 +09:00
Takashi Kajinami 9e48b8be88 swift: Improve parameter support coverage
Change-Id: I017808988071f4cd52186bc1529d07958867a5fe
2024-01-14 19:21:08 +09:00
Takashi Kajinami f8d59f0e35 Make password required
... because it is actually required so that zaqar can authenticate with
keystone.

Depends-on: https://review.opendev.org/903852
Change-Id: I8e5ea733f10abfdcc5da0699311222cfbe6cbf4e
2023-12-18 17:32:50 +09:00
Takashi Kajinami 0470ca135b Support [cache] memcache_pool_flush_on_reconnect
Depends-on: https://review.opendev.org/902861
Change-Id: Ic5e40835abb923d2e9f2243e7b8f7241ab924670
2023-12-14 17:58:52 +09:00
Zuul 47c5598193 Merge "sqlalchemy: Ensure backend package is installed" 2023-11-17 18:30:04 +00:00
Takashi Kajinami 30d6d4c102 sqlalchemy: Ensure backend package is installed
Some of the backends supported by sqlalchemy (eg mysql + pymysql)
require additional packages. This ensures the required packages are
installed using the oslo::db defined type.

Change-Id: I7fc4cea95a0a7ecba7def9db4f01c16ef1cfa2f3
2023-11-16 02:02:40 +09:00
Takashi Kajinami 1954331d54 Do not hard-code default stores
... as is described in the parameter descriptions.

Change-Id: Iabdf90bf6cf4cede7fe705032d5a65dabc69b8e2
2023-11-15 00:50:50 +09:00
Takashi Kajinami 2d8f3e3ef0 Remove usage of deleted manifest_dir
Recent update in rspec-puppet removed some of the config interfaces for
old puppet versions[1]. This drops usage of these interfaces to resolve
the following error in unit tests.

```
An error occurred while loading ./spec/unit/provider/manila_spec.rb.
Failure/Error: c.manifest_dir = File.join(fixture_path, 'manifests')

NoMethodError:
  undefined method `manifest_dir='...
```

[1] 316d95923c

Change-Id: If12107ec233a2214540c1fa2be6fedd920ec36de
2023-10-11 12:11:35 +09:00
Tobias Urdin 7d5258c9a9 Add per module policy service refresh
Updating the policies for this project should only
refresh the services that reads it.

Change-Id: Id77056322ad610006ac0f216870d679b250ab702
2023-06-26 00:06:57 +02:00
Takashi Kajinami 9ae179cd51 Replace legacy facts and use fact hash
... because the latest lint no longer allows usage of legacy facts and
top scope fact.

Change-Id: If6eb852b44673ea6b6a629aa1381b78bb6ae5646
2023-03-02 12:51:11 +09:00
Takashi Kajinami d72accf703 Expose policy_default_rule
The option has been managed by the underlying puppet-oslo module but
has not been configurable. This introduces the parameter to customize
the option.

Change-Id: Iac1ebf8af8900e9e351ef359f1c5c2e4c1704d00
2023-01-23 14:43:31 +09:00
Takashi Kajinami 9d64b592ba Remove logic for CentOS 8/RHEL 8
... because CentOS 8 and RHEL 8 are no longer supported by RDO since
Zed release.

Change-Id: Ia13da06587e9d44049945952fb754333a529b0ef
2022-11-21 23:57:27 +09:00
Takashi Kajinami d34f26c319 Add Apache WSGI logging parameters for pipe/syslog
Add parameters for advanced logging configurations in Apache to
support piped logging and support for syslog (via mod_syslog
available in Apache >= 2.5.0)

Co-Authored-By: Andy Botting <andy@andybotting.com>
Change-Id: If07cac9bc41d173baeadbefb4dad3612c32ee369
2022-08-26 17:46:20 +09:00
Zuul db397318f7 Merge "Remove unused items from platform_params" 2022-08-11 18:03:38 +00:00
Takashi Kajinami f2eeaf1e22 Remove unused items from platform_params
Trivial-Fix

Change-Id: Ibd542cd5bc15d7573da6d605578344e2648d6af6
2022-08-12 01:34:02 +09:00
Takashi Kajinami e803994bbf Adapt to new type validation in puppetlabs-apache
The puppetlabs-apache module is enforcing more strict data type
validation[1].

This change updates the default values to adapt to that change.

[1] f41251e336

Closes-Bug: #1983300
Depends-on: https://review.opendev.org/851652
Change-Id: Ic4160b208ff1d728cab2b77c9261cb18deec8c27
2022-08-02 23:15:39 +09:00
Zuul 5bfe646a17 Merge "Expose headers option of apache::vhost" 2022-07-30 15:13:34 +00:00
Takashi Kajinami 668ed60043 Revert "CentOS 9: Disable unit tests dependent on puppet-postgresql"
This reverts commit 1e36ec00e5.

Reason for revert:
puppet-postgresql 8.1.0 was released and now the module supports RHEL 9
(and CentOS 9 effectively).

Note:
This change adds the service_provider fact in test fact data because
it is required by puppet-postgresql.

Depends-on: https://review.opendev.org/850705
Change-Id: Ia74b45251e22419d44713f3be85cbf0591504ccb
2022-07-24 01:04:54 +09:00
Zuul 7cb4e156da Merge "Add acceptance tests for config management resources" 2022-07-15 19:37:10 +00:00
Takashi Kajinami 84591e2dbf Fix wrong test description
The value with a white space should be accepted instead of being
rejected. This change fixes the wrong test case description and makes
sure the description explains what is actually tested.

Change-Id: I4fb445a86398abc0f7b060c6d28cf94cbb2d0b3d
2022-07-15 11:57:19 +09:00
Takashi Kajinami 47350858ed Add acceptance tests for config management resources
Change-Id: Idd5f3ffebbed6c96417452b8d283c4dd3da191c8
2022-07-10 13:32:06 +09:00
Takashi Kajinami 5d3e8252d6 Expose headers option of apache::vhost
The headers option in apache::vhost is required in some case, for
example when adding the X-XSS-Protection header. This change allows
customizing the option for the api vhost.

This change also adds support for request_headers so that both request
headers and response headers can customized.

Change-Id: Ie5f2669a8686a3546b652251881615e0e18bf433
2022-07-01 11:37:02 +09:00
Takashi Kajinami f25c60a03b Fix missing updates of deprecated parameters
This is follow-up of 7eeb46e04d and fixes
the following two points.
 - tenant_name is deprecated but a proper warning message is missing
 - password is deprecated and now is optional, but it is still
   validated

Closes-Bug: #1973315
Change-Id: I169d42dee4896843e55d4989dc440ad7e7c7ec94
2022-05-13 11:58:47 +00:00
Takashi Kajinami 411e1ea3fe apache+mod_wsgi: Disable SSL by default
During the previous cycle, a warning message was added to inform users
of this change.

Now the default value is updated so that SSL is disabled by default.

Change-Id: I17cd1a7adcc09168d3f53f44787858ef1d89a0a7
2022-05-06 22:21:32 +09:00
Takashi Kajinami 8ad1daf24f CentOS 9: Fix unit tests for zaqar::wsgi::apache
Change-Id: I12e82c520450584fc78e830a32551d6553c5030f
2022-02-16 01:40:04 +09:00
Takashi Kajinami 1e36ec00e5 CentOS 9: Disable unit tests dependent on puppet-postgresql
The puppt-postgresql module does not support CentOS 9 yet and requires
some version parameters to be run on CentOS 9. This change disables
unit tests requiring that module, until the module supports CentOS 9.

Change-Id: I7093330bdbae4965954d4a2a5f5d6a2c56fd15e1
2022-02-16 00:31:34 +09:00
Takashi Kajinami 4026124a72 Add socket keepalive options for the pymemcache backend
This patch specifies a set of options required to setup the socket
keepalive feature of pymemcache (dogpile.cache) cache backend.

Original oslo.cache change:
https://review.opendev.org/c/openstack/oslo.cache/+/803716

Co-Authored-By: Grzegorz Grasza <xek@redhat.com>
Depends-On: https://review.opendev.org/807851
Change-Id: I683f1328ab68839b4877e91513cae206656a6ad2
2022-01-27 20:40:17 +09:00
Zuul 067273d60b Merge "Disable the zaqar-messaging service user" 2022-01-05 03:03:40 +00:00
Takashi Kajinami fe7da441a6 Accept system scope credentials for Keystone API request
This change is the first step to support secure RBAC and allows usage
of system scope credentials for Keystone API request.

This change covers the following two items.
 - assignment of system scope roles to system user
 - credential parameters for authtoken middleware

Depends-on: https://review.opendev.org/804325
Change-Id: I2a54b0d0c03a98b3fe7a3a4a28051247eea7e70a
2022-01-03 15:28:31 +09:00
Takashi Kajinami 7eeb46e04d Disable the zaqar-messaging service user
The zaqar::keystone::auth_websocket class has been added to create
an independent keystone endpoint for websocket service but the service
user created by the class has never been used.
This change disables the logic to create the user and the associated
resources like roles and projects, so that only required resources are
created.

Change-Id: Iaa0042acb9fda198f10e6067523301bfd08bf249
2022-01-03 15:15:54 +09:00
Takashi Kajinami 07822ab838 Load libraries in a single place
This change refactors how the dependent libraries are loaded during
unit tests, and load the libraries in the base spec_helper to avoid
duplicate and redundant implementations.

Change-Id: I11995afc7bcd88f365e4127983916f538f9133b8
2021-12-27 16:23:13 +09:00
Takashi Kajinami 553f60ab10 Add support for MultiStrOpt
This replaces the provider implementation of aodh_config type so that
MultiStrOpt, which is used by several options like
 - oslo_messaging_notifications/driver
 - oslo_policy/policy_dirs
are handled correctly.

Change-Id: I4cea52da9531b68598c0d7429fb2ed581ab6c4f7
2021-12-27 16:23:13 +09:00
Takashi Kajinami 1261e9ad08 Clean up direct dependencies on puppetlabs-apache
This change removes direct reference to some classes in
puppetlabs-apache. Details are explained below.

- The server class doesn't need access to anything defined in
  apache::params

- The following classes are included by the openstacklib::wsgi::apache
  resource type, and current inclusions are just redundant.

Change-Id: I7f2f5dbb7f7e07be611da61905201d90baee28ef
2021-12-08 23:07:06 +09:00
Takashi Kajinami 6052dfd0ff [trustee] password should be secret
Change-Id: I8a29944a53171db1d17eb598f4a16c58c71febad
2021-11-29 13:48:29 +00:00
Takashi Kajinami cb27283f18 Use consistent format for service description
Change-Id: I0312e7258f49f2e71748fd232abcb59983e103ef
2021-11-18 14:31:27 +00:00
Takashi Kajinami e9a86ec687 Add support for [storage] topic_pipeline
Change-Id: Ia4e80a1e0365aeb9d8f010296c6391aa747d29ba
2021-11-16 10:09:33 +09:00
Takashi Kajinami 484d14fb2c Add support for Redis management store driver
Change-Id: I29b7a7e16ea1f8a2b5a80bb44cdd8e902a3b3350
2021-11-09 13:24:41 +00:00
Takashi Kajinami 0e7c4f0efe Avoid conflicting management of zaqar.conf
The zaqar::server_instance resource type allows setting up multiple
instances of zaqar-server by creating /etc/zaqar/{name}.conf .
Currently there is no validation about the name and if it can be set to
'zaqar' which results in conflicting management of zaqar.conf .

This change introduces a simple validation logic to make sure that
the resource type uses a config file different from the base
zaqar.conf .

Change-Id: Idb0eaff24e84121e0c78daf659d5b9f861491faa
2021-11-01 12:04:32 +09:00
Takashi Kajinami 714448a4e8 Do not test detail of keystone::resource::service_identity
... but test interfaces of that resource type. This helps us avoid
direct breakage caused by any change in puppet-keystone.

Change-Id: Iac4cf7eb28d7c59db3e19fd0e42c6de1d6374cd7
2021-09-27 21:29:56 +09:00
ZhongShengping 17078f0478 Add watch_log_file option
Add support for Using logging handler designed to watch file system.

Change-Id: I3e9479610eb3ff02cd08afefd4b6e411f8fd2812
Closes-Bug: #1943212
2021-09-14 16:02:09 +08:00
Zuul b2852e77dd Merge "Allow purging policy files" 2021-09-09 17:58:27 +00:00
Zuul f24c0e20aa Merge "Do not test authtoken parameters directly" 2021-09-07 02:14:49 +00:00
Zuul 17ff82b630 Merge "Use a 'params' hash for authtoken parameters" 2021-09-07 02:14:48 +00:00
Takashi Kajinami 9c04deee7f Allow purging policy files
This change introduces the new purge_config parameter to the policy
class so that any policy rules not managed by puppet manifests can be
cleared.

Co-Authored-By: Martin Schuppert <mschuppert@redhat.com>
Depends-On: https://review.opendev.org/802305
Change-Id: I7e453f3abf08e13d2366ea68af1ce859a88e8448
2021-09-04 22:22:37 +09:00