openstack/barbican
Code Issues Proposed changes
950420f3c9
barbican/setup.cfg

103 lines
4.1 KiB
INI
Raw Normal View History

Migrate to pbr OpenStack uses pbr for setuptools/build and version releases. As barbican looks towards incubation, migrate to being pbr based. Change-Id: I3c7a389596ca579a5613ea98b21cdc6967e49cc7
2013-12-06 17:31:02 +02:00
[metadata]
name = barbican
Add summary to metadata in setup.cfg file Set "summary" equal to "OpenStack Secure Key Management". This value is consumed by various bots and services. Change-Id: I6d90c66b2eed408d182e2244f9415de4302d5c62
2016-10-06 17:14:47 -04:00
summary = OpenStack Secure Key Management
Migrate to pbr OpenStack uses pbr for setuptools/build and version releases. As barbican looks towards incubation, migrate to being pbr based. Change-Id: I3c7a389596ca579a5613ea98b21cdc6967e49cc7
2013-12-06 17:31:02 +02:00
description = Service for storing sensitive client information for OpenStack
setup.cfg: Replace dashes with underscores Resolves warnings like the following: UserWarning: Usage of dash-separated 'description-file' will not be supported in future versions. Please use the underscore name 'description_file' instead Change-Id: I5f4746bc4d40b76c562c39c2254f3b8381b4b52f
2021-04-26 14:35:46 +08:00
description_file =
Rename README.md to README.rst This repo uses RST files everywhere, let's be consistent and write the README using RST as well. This also fixes a PyPI upload issue where PyPI expects RST and cannot handle markdown (unless we tell it is markdown). The alternative solution is https://review.opendev.org/668502. Change-Id: If9b22f6fea2f16350ba0997d02c6aba33fafcc7d
2019-08-05 17:09:10 +02:00
README.rst
Migrate to pbr OpenStack uses pbr for setuptools/build and version releases. As barbican looks towards incubation, migrate to being pbr based. Change-Id: I3c7a389596ca579a5613ea98b21cdc6967e49cc7
2013-12-06 17:31:02 +02:00
author = OpenStack
setup.cfg: Replace dashes with underscores Resolves warnings like the following: UserWarning: Usage of dash-separated 'description-file' will not be supported in future versions. Please use the underscore name 'description_file' instead Change-Id: I5f4746bc4d40b76c562c39c2254f3b8381b4b52f
2021-04-26 14:35:46 +08:00
author_email = openstack-discuss@lists.openstack.org
home_page = https://docs.openstack.org/barbican/latest/
python_requires = >=3.6
Migrate to pbr OpenStack uses pbr for setuptools/build and version releases. As barbican looks towards incubation, migrate to being pbr based. Change-Id: I3c7a389596ca579a5613ea98b21cdc6967e49cc7
2013-12-06 17:31:02 +02:00
classifier =
Environment :: OpenStack
Intended Audience :: Information Technology
Intended Audience :: System Administrators
License :: OSI Approved :: Apache Software License
Operating System :: POSIX :: Linux
Programming Language :: Python
Cleanup py27 support This repo is now testing only with Python 3, so let's make a few cleanups: - Remove python 2.7 stanza from setup.py - Add requires on python >= 3.6 to setup.cfg so that pypi and pip know about the requirement - Remove obsolete sections from setup.cfg - Update classifiers - Use newer openstackdocstheme and Sphinx versions - Cleanup */source/conf.py to remove now obsolete content. - Remove Babel from requirements, it's not needed for running. - Sync docs deps in tox.ini Change-Id: Ie1fccdc777be978075e4689eda6c62578bd463e4
2020-04-28 10:48:37 +02:00
Programming Language :: Python :: Implementation :: CPython
Programming Language :: Python :: 3 :: Only
Update Python classifier for 3.4 Barbican is tested with py34, but the classifier states only 2.7 is supported. This adds 3.4 to the list. Change-Id: Ic7b14714d9a17a3370a8eb138bf4940ffa4ba999
2016-03-08 10:25:36 -08:00
Programming Language :: Python :: 3
Dropping the py35 testing All the integration testing has been moved to Bionic now[1] and py3.5 is not tested runtime for Train or stable/stein[2]. As per below ML thread, we are good to drop the py35 testing now: http://lists.openstack.org/pipermail/openstack-discuss/2019-April/005097.html [1] http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004647.html [2] https://governance.openstack.org/tc/reference/runtimes/stein.html https://governance.openstack.org/tc/reference/runtimes/train.html Change-Id: I00d4b8a6f5687811af58960d5538c50ebe9fac4c
2019-04-14 18:56:20 +00:00
Programming Language :: Python :: 3.6
Add Python 3 Train unit tests This is a mechanically generated patch to ensure unit testing is in place for all of the Tested Runtimes for Train. See the Train python3-updates goal document for details: https://governance.openstack.org/tc/goals/train/python3-updates.html Change-Id: If8e7d6fbb7730705432fb9cc0d5d7a8b06bbe6c1 Story: #2005924 Task: #34198
2019-06-21 11:47:25 -04:00
Programming Language :: Python :: 3.7
Cleanup py27 support This repo is now testing only with Python 3, so let's make a few cleanups: - Remove python 2.7 stanza from setup.py - Add requires on python >= 3.6 to setup.cfg so that pypi and pip know about the requirement - Remove obsolete sections from setup.cfg - Update classifiers - Use newer openstackdocstheme and Sphinx versions - Cleanup */source/conf.py to remove now obsolete content. - Remove Babel from requirements, it's not needed for running. - Sync docs deps in tox.ini Change-Id: Ie1fccdc777be978075e4689eda6c62578bd463e4
2020-04-28 10:48:37 +02:00
Programming Language :: Python :: 3.8
Updating python testing classifier as per Yoga testing runtime Yoga testing runtime[1] has been updated to add py39 testing as voting. Unit tests update are handled by the job template change in openstack-zuul-job - https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/820286 this commit updates the classifier in setup.cfg file. [1] https://governance.openstack.org/tc/reference/runtimes/yoga.html Change-Id: I92cc78df6245774c2038d35fb6e353cb2fa83cda
2021-11-24 18:24:24 -06:00
Programming Language :: Python :: 3.9
Migrate to pbr OpenStack uses pbr for setuptools/build and version releases. As barbican looks towards incubation, migrate to being pbr based. Change-Id: I3c7a389596ca579a5613ea98b21cdc6967e49cc7
2013-12-06 17:31:02 +02:00
[files]
Add default configuration files to data_files In order to make it simpler to use the default configuration files when deploying services from source, the files are added to pbr's data_files section so that the files are included in the built wheels and therefore deployed with the code. Packaging and deployment tools can then more easily use the default files if they wish to. This pattern is already established with similar files for neutron and the glance metadefs as has been mentioned in the related bug report. Change-Id: Iacb17585a3235e95faa109ff11f1b039429ff770 Closes-Bug: #1718356
2017-09-21 15:01:08 +01:00
data_files =
etc/barbican =
etc/barbican/barbican-api-paste.ini
Migrate to pbr OpenStack uses pbr for setuptools/build and version releases. As barbican looks towards incubation, migrate to being pbr based. Change-Id: I3c7a389596ca579a5613ea98b21cdc6967e49cc7
2013-12-06 17:31:02 +02:00
packages =
barbican
Add dogtag-pki and python-nss as extra requirement dogtag imports pki so mention it as requirement. python-nss is needed by dogtag-pki. Also add a bindep.txt file which is used by bindep to install system packages. To install python-nss via pip, header files from nss-devel and mozilla-nss-devel are needed. Change-Id: Ia3276ad4be56d40fddbf458f215ab93e44ed6907 Depends-On: Ibedae54e631e9c3d3726453adcd204ce96b19d77 Closes-Bug: #1604417
2016-07-19 15:30:08 +02:00
[extras]
dogtag =
Updated from global requirements Change-Id: I4afbb0368bad527e4e6df90ba4c9897104fc10c4
2016-10-27 12:12:14 +00:00
dogtag-pki>=10.3.5.1 # LGPLv3+
Add dogtag-pki and python-nss as extra requirement dogtag imports pki so mention it as requirement. python-nss is needed by dogtag-pki. Also add a bindep.txt file which is used by bindep to install system packages. To install python-nss via pip, header files from nss-devel and mozilla-nss-devel are needed. Change-Id: Ia3276ad4be56d40fddbf458f215ab93e44ed6907 Depends-On: Ibedae54e631e9c3d3726453adcd204ce96b19d77 Closes-Bug: #1604417
2016-07-19 15:30:08 +02:00
Migrate to pbr OpenStack uses pbr for setuptools/build and version releases. As barbican looks towards incubation, migrate to being pbr based. Change-Id: I3c7a389596ca579a5613ea98b21cdc6967e49cc7
2013-12-06 17:31:02 +02:00
[entry_points]
Use default policy in code Delete policy.json from repo since we can use policies registered in code. We can also change default policy rules through below steps: - generate policy.yaml and copy to /etc/barbican - configure `policy_file=policy.yaml` in `oslo_policy` section - uncomment rules in policy.yaml and make changes as we desire - restart barbican api service - test whether new rules take effect on corresponding API Change-Id: Ia64eac1eb4e30457b323c6ab99d26d3d40c28060
2017-09-03 21:33:47 +08:00
oslo.policy.enforcer =
barbican = barbican.common.policy:get_enforcer
Maintain policy in code This patch adds the basic framework for registering and using default policy rules. Rules should be defined and returned from a module in barbican/common/policies/, and then added to the list in barbican/common/policies/__init__.py. Also adds tox env to generate policy sample file. Change-Id: If25b17ae7eed3f1a8e8e6f29701552a39d5a603f
2017-02-09 18:19:15 +08:00
oslo.policy.policies =
barbican = barbican.common.policies:list_rules
Drop file extensions for /usr/bin/* Previously there were 4 python scripts being installed into /usr/{local/}bin/ which contained the extension *.py. There was also a developers script called barbican.sh to create a developer's environment. This change switches away from installing them as scripts, preferring to use pbr's console_scripts entry point. This means that the scripts were moved to be part of a 'cmd' module within the barbican module. The barbican.sh script is also no longer installed as it seems inappropriate to install this on consumers machines. A few cosmetic changes were added to achieve pep8. Change-Id: I452b56535ec18228060370be899af2a63d138472 Closes-Bug: 1454587 Signed-off-by: Dave Walker (Daviey) <email@daviey.com>
2015-06-17 22:45:07 +00:00
console_scripts =
Introducing barbican-manage utility command A new 'barbican-manage' utility command is introduced as Barbican admin tool. This command interacts with Barbican service for management operations which usually cannot be accomplished with REST APIs. This can improve usability and extensibility in the future. The related blueprint is https://review.openstack.org/#/c/253719/ This CR includes 1) implementation of barbican_manage.py 2) unit test code 3) document of barbican-manage command Co-Authored-By: Michael Perng <mperng@us.ibm.com> Change-Id: I784b46df86742d00d1737e3f8964280514a7fa1b
2016-02-18 14:54:24 -06:00
barbican-manage = barbican.cmd.barbican_manage:main
Drop file extensions for /usr/bin/* Previously there were 4 python scripts being installed into /usr/{local/}bin/ which contained the extension *.py. There was also a developers script called barbican.sh to create a developer's environment. This change switches away from installing them as scripts, preferring to use pbr's console_scripts entry point. This means that the scripts were moved to be part of a 'cmd' module within the barbican module. The barbican.sh script is also no longer installed as it seems inappropriate to install this on consumers machines. A few cosmetic changes were added to achieve pep8. Change-Id: I452b56535ec18228060370be899af2a63d138472 Closes-Bug: 1454587 Signed-off-by: Dave Walker (Daviey) <email@daviey.com>
2015-06-17 22:45:07 +00:00
barbican-db-manage = barbican.cmd.db_manage:main
barbican-keystone-listener = barbican.cmd.keystone_listener:main
barbican-worker = barbican.cmd.worker:main
Adding script for rewrapping p11 KEKs This script pulls all project available KEKs and rewraps them with a MKEK specified in the barbican config file. Change-Id: I5f130b8f6d744195e3ed6c708e96b23b200eea2b
2015-06-26 11:59:02 -05:00
pkcs11-kek-rewrap = barbican.cmd.pkcs11_kek_rewrap:main
Move Key gen script to cmd folder Moves the keygeneration script from bin to cmd folder. This is preferred because other scripts for HSM interaction such as the PKEK re-wrap are located here. Change-Id: I731ec087e96114d00bd983edd60d2e1806399e16
2015-10-27 15:54:26 -05:00
pkcs11-key-generation = barbican.cmd.pkcs11_key_generation:main
Add retry server and functional tests to DevStack Add a retry scheduler server process to the DevStack start/stop processes. This includes adding a PBR entry point and barbican.cmd script for the retry scheduler process, as other projects such as Glance and Nova are doing now. Eventually we'll want to move over all our boot scripts to the entry point approach. Verify functional test for generating a simple certificate order, which is the first of the extended-workflow order types that utilize the retry processing logic. Also add try/catch around the retry process because if we don't pass back a retry interval to the Oslo periodic task framework, it stops rescheduling tasks! Also added delays to the functional test order status check as for SQLite I was noticing disk I/O concurrency errors otherwise. Yes, I'd still like to support SQLite for local functional testing. Change-Id: Ib7b50ab7f7354fefebfdf654689427ae7bf59e58
2015-04-06 08:08:04 -05:00
barbican-retry = barbican.cmd.retry_scheduler:main
Add barbican-status upgrade check command framework This adds basic framework for barbican-status upgrade check commands. For now it has only "check_placeholder" check implemented. Real checks can be added to this tool in the future. Change-Id: I40bfcc0c8755e814c1b63fdf323c32fda967968e Story: 2003657 Task: 26120
2018-10-18 16:43:23 +05:30
barbican-status = barbican.cmd.status:main
Drop file extensions for /usr/bin/* Previously there were 4 python scripts being installed into /usr/{local/}bin/ which contained the extension *.py. There was also a developers script called barbican.sh to create a developer's environment. This change switches away from installing them as scripts, preferring to use pbr's console_scripts entry point. This means that the scripts were moved to be part of a 'cmd' module within the barbican module. The barbican.sh script is also no longer installed as it seems inappropriate to install this on consumers machines. A few cosmetic changes were added to achieve pep8. Change-Id: I452b56535ec18228060370be899af2a63d138472 Closes-Bug: 1454587 Signed-off-by: Dave Walker (Daviey) <email@daviey.com>
2015-06-17 22:45:07 +00:00
Add PBR wsgi_scripts entrypoint for barbican api This commit makes the barbican wsgi script consistent with other services by leveraging the pbr wsgi_scripts entrypoint to expose it. While you could still leverage the bundled app.wsgi the entrypoint barbican's behavior the same as other services. As part of this the app.wsgi script is deprecated and will be removed in the future. Change-Id: Id42f76dbfd59209232b37096a708ee18cbf96431
2017-06-23 14:04:05 -04:00
wsgi_scripts =
barbican-wsgi-api = barbican.api.app:get_api_wsgi_script
Move crypto package contents to the new plugin structure Move the HSM-style crypto source modules into the new plugin structure, and integrate this into the rest of the Barbican API and worker source flows, via the secret-store to HSM-style plugin adapter store_crypto.py. Removed crypto source and unit test files from the old locations. Implements: blueprint restructure-for-plugins Change-Id: Ie31531ac71a32b14598b903632e8a3127a263e56
2014-06-29 17:00:17 -05:00
barbican.secretstore.plugin =
store_crypto = barbican.plugin.store_crypto:StoreCryptoAdapterPlugin
Add certificate_manager functionality to dogtag plugin Also included in this patch are changes to change the name of the DRM to KRA, and changes to reflect the latest Dogtag API. Implements: blueprint orders-add-cert-workflow-plugin Change-Id: I34cb0b70f2c5c06d91ef69e486aa5d03f0b945e6
2014-08-15 16:57:50 -04:00
dogtag_crypto = barbican.plugin.dogtag:DogtagKRAPlugin
Adding client certificates to connection credentials - this changes requires PyKMIP 0.2.0 Change-Id: I32c958ec70d963d79c287d4720b67120b9f3d8d6 Also-By: Robert Clark <robert.clark@hp.com>
2014-11-18 10:33:59 +00:00
kmip_plugin = barbican.plugin.kmip_secret_store:KMIPSecretStore
Castellan based secret store This will provide a Castellan based secret store, which will allow secret stores which have a castellan backend to be used behind barbican. The initial example of this is the Vault backend. Unit tests have been added. In local tests, most of the functional tests do in fact pass with a local Vault backend, though this will need to be demonstrated with a later review which establishes a Vault based gate. Change-Id: Ib30fb79304014592bfc37938839d60a4c10c244d
2017-10-17 11:15:51 -04:00
vault_plugin = barbican.plugin.vault_secret_store:VaultSecretStore
Migrate to pbr OpenStack uses pbr for setuptools/build and version releases. As barbican looks towards incubation, migrate to being pbr based. Change-Id: I3c7a389596ca579a5613ea98b21cdc6967e49cc7
2013-12-06 17:31:02 +02:00
barbican.crypto.plugin =
Move crypto package contents to the new plugin structure Move the HSM-style crypto source modules into the new plugin structure, and integrate this into the rest of the Barbican API and worker source flows, via the secret-store to HSM-style plugin adapter store_crypto.py. Removed crypto source and unit test files from the old locations. Implements: blueprint restructure-for-plugins Change-Id: Ie31531ac71a32b14598b903632e8a3127a263e56
2014-06-29 17:00:17 -05:00
p11_crypto = barbican.plugin.crypto.p11_crypto:P11CryptoPlugin
simple_crypto = barbican.plugin.crypto.simple_crypto:SimpleCryptoPlugin
Add initial files for certificate event handling The SSL certificate generation and workflow blueprint called for adding support for a certificate events plugin. This CR defines an interface for this plugin, a simple default logging-based implementation, and an example integration with the task resource logic. Change-Id: Ia46793a1ce767ff03d77da06bf5a2803e7dce121 Implements: blueprint add-ssl-ca-support
2014-08-18 12:47:55 -05:00
barbican.certificate.plugin =
simple_certificate = barbican.plugin.simple_certificate_manager:SimpleCertificatePlugin
Fix snakeoil_ca plugin This fixes creation of certificates using the snakeoil_ca plugin, like passing the configuration properly and encoding resulting data, and adds support for stored-key requests. Closes-Bug: #1451456 Change-Id: Ida24a192595429829e870838a487a9c100691b4c
2015-05-01 14:25:47 +02:00
snakeoil_ca = barbican.plugin.snakeoil_ca:SnakeoilCACertificatePlugin
Add initial files for certificate event handling The SSL certificate generation and workflow blueprint called for adding support for a certificate events plugin. This CR defines an interface for this plugin, a simple default logging-based implementation, and an example integration with the task resource logic. Change-Id: Ia46793a1ce767ff03d77da06bf5a2803e7dce121 Implements: blueprint add-ssl-ca-support
2014-08-18 12:47:55 -05:00
symantec = barbican.plugin.symantec:SymantecCertificatePlugin
dogtag = barbican.plugin.dogtag:DogtagCAPlugin
barbican.certificate.event.plugin =
simple_certificate_event = barbican.plugin.simple_certificate_manager:SimpleCertificateEventPlugin
Migrate to pbr OpenStack uses pbr for setuptools/build and version releases. As barbican looks towards incubation, migrate to being pbr based. Change-Id: I3c7a389596ca579a5613ea98b21cdc6967e49cc7
2013-12-06 17:31:02 +02:00
barbican.test.crypto.plugin =
test_crypto = barbican.tests.crypto.test_plugin:TestCryptoPlugin
Use oslo-config-generator to generate barbican.conf.sample Currently etc/barbican/barbican.conf is maintained by hand and can not be regenerated based on the config settings defined in the code. A common pattern for OpenStack projects is to use oslo-config-generator for that task. Co-Authored-By: Randall Burt <randall.burt@rackspace.com> Depends-On: I90870dcb49cd96f6bf0fe353fa6e779ffd87a5af Closes-Bug: #1584789 Change-Id: I5f3dcd2fc982f1178ef7dd662c24d3166f91b266
2016-07-11 19:41:28 +02:00
oslo.config.opts =
barbican.common.config = barbican.common.config:list_opts
barbican.plugin.secret_store = barbican.plugin.interface.secret_store:list_opts
barbican.plugin.crypto = barbican.plugin.crypto.manager:list_opts
barbican.plugin.crypto.simple = barbican.plugin.crypto.simple_crypto:list_opts
Set entry point for dogtag config correctly dogtag configurations have been moved to "plugin/dogtag_config_opts.py", also remove non-existent entry point when generating barbican.conf Closes-bug: #1704320 Change-Id: I9dd202d82797cb70051323fe949cc66f8a050022
2017-07-14 15:22:45 +08:00
barbican.plugin.dogtag = barbican.plugin.dogtag_config_opts:list_opts
Use oslo-config-generator to generate barbican.conf.sample Currently etc/barbican/barbican.conf is maintained by hand and can not be regenerated based on the config settings defined in the code. A common pattern for OpenStack projects is to use oslo-config-generator for that task. Co-Authored-By: Randall Burt <randall.burt@rackspace.com> Depends-On: I90870dcb49cd96f6bf0fe353fa6e779ffd87a5af Closes-Bug: #1584789 Change-Id: I5f3dcd2fc982f1178ef7dd662c24d3166f91b266
2016-07-11 19:41:28 +02:00
barbican.plugin.crypto.p11 = barbican.plugin.crypto.p11_crypto:list_opts
barbican.plugin.secret_store.kmip = barbican.plugin.kmip_secret_store:list_opts
Castellan based secret store This will provide a Castellan based secret store, which will allow secret stores which have a castellan backend to be used behind barbican. The initial example of this is the Vault backend. Unit tests have been added. In local tests, most of the functional tests do in fact pass with a local Vault backend, though this will need to be demonstrated with a later review which establishes a Vault based gate. Change-Id: Ib30fb79304014592bfc37938839d60a4c10c244d
2017-10-17 11:15:51 -04:00
barbican.plugin.secret_store.vault = barbican.plugin.vault_secret_store:list_opts
Use oslo-config-generator to generate barbican.conf.sample Currently etc/barbican/barbican.conf is maintained by hand and can not be regenerated based on the config settings defined in the code. A common pattern for OpenStack projects is to use oslo-config-generator for that task. Co-Authored-By: Randall Burt <randall.burt@rackspace.com> Depends-On: I90870dcb49cd96f6bf0fe353fa6e779ffd87a5af Closes-Bug: #1584789 Change-Id: I5f3dcd2fc982f1178ef7dd662c24d3166f91b266
2016-07-11 19:41:28 +02:00
barbican.certificate.plugin = barbican.plugin.interface.certificate_manager:list_opts
barbican.certificate.plugin.snakeoil = barbican.plugin.snakeoil_ca:list_opts
oslo.config.opts.defaults =
[goal] Deprecate the JSON formatted policy file As per the community goal of migrating the policy file the format from JSON to YAML[1], we need to do two things: 1. Change the default value of '[oslo_policy] policy_file'' config option from 'policy.json' to 'policy.yaml' with upgrade checks. 2. Deprecate the JSON formatted policy file on the project side via warning in doc and releasenotes. Also replace policy.json to policy.yaml ref from doc and tests. [1]https://governance.openstack.org/tc/goals/selected/wallaby/migrate-policy-format-from-json-to-yaml.html Change-Id: Idaa65dac1c97324d671b9a07a2f3d51bb128e8c2
2020-12-06 14:19:06 -06:00
barbican.common.config = barbican.common.config:set_lib_defaults
Merge of previous project work into this project
2013-04-01 18:26:03 -05:00
# TBD: OpenStack stuff...
# NOTE(jkoelker) To run the test suite under nose install the following
Update pypi url to new url Pypi url changed from [1] to [2] [1] https://pypi.python.org/pypi/<package> [2] https://pypi.org/project/<package> Change-Id: I8e368f74a60f4f50a2c29bdeac16519fedda2854
2018-07-12 13:59:58 +07:00
# coverage https://pypi.org/project/coverage
# tissue https://pypi.org/project/tissue (pep8 checker)
Merge of previous project work into this project
2013-04-01 18:26:03 -05:00
# openstack-nose https://github.com/jkoelker/openstack-nose
#verbosity=2
#detailed-errors=1
#with-openstack=1
#openstack-red=0.05
#openstack-yellow=0.025
#openstack-show-elapsed=1
#openstack-color=1
#[install]
#install-lib=/usr/local/bin/vbarbican/lib/python2.7/site-packages/
Copy Permalink