Newer versions of the mysql-shared interface automatically set the
correct hostname based on the network space binding for the relation;
stop providing this from the charm and just let the interface do
its magic!
Change-Id: I358bfe669fb50cbce0380460225866afede8bbf3
This is a refactor of the charm (no new functionality) to work with the
declarative helpers in charms.openstack. This means that much of the
boiler plate has disappeared from the charm and into charms.openstack
including the tests.
Change-Id: I4305eb34f314f8f5f1a7d1807508bf1e4dbfb84c
Depends-On: I3c74f60bb4ed7901828902118697f310622c4061
Depends-On: Ic81e65f5a072f67cbd2322e4cfd0eec9a5895823
* Change charm to inherit layer:openstack-api as this is an API charm
This adds the SSL config options to the charms config.yaml
* Barbican now servers the API service through Apache so add code
to manage /etc/apache2/conf-available/barbican-api.conf
* Switch BarbicanConfigurationAdapter to be a child of
APIConfigurationAdapter to inherit methods for configuring haproxy
and apache2.
* Add reactive handle to configure ssl when identity relation is
complete
* Move Juno template dir to mitaka as mitaka is the earliest
supported release.
* Updated host_href in barbican.conf to specify the correct external
url for accessing the service. Without this clients are redirected
to the wrong location.
charms.openstack has been refactered such that OpenStackRelationAdapters has
a new derived class called OpenStackAPIRelationAdapters which contains the
amqp, db and cluster relations. As Barbican needs those, the BarbicanAdapters
needs to be derived from the more specialised class.
The barbican-hsm-plugin interface provides a mechanism for the Barbican
charm to communicate with an HSM plugin. The plugin (from the Barbican
perspective) is provided as a PKCS#11 compliant library (.so) and so is
local to the Barbican installation. Thus, the hsm-plugin charms are
subordinate to the Barbican charm and run on the same unit.
This change also provides two actions (generate-mkek and generate-hmac)
which are 'one-off' operations to initialise the HSM with the global
master keys.
Add a note to the README that the generate-mkek and generate-hmac
actions may only be done once as the HSM may reject overwriting the key.
Add Apache2.0 LICENSE and license headers to files
Removed redundant copyright file
Change the reference for the internal port to 9311 The barbican project
changed the INTERNAL port to the same as the PUBLIC port.
Add in seed_file and seed_length to template. These are needed for a
change in Barbican to support seeding the RNG in the HSM if required.
They are set to /dev/random and 32.
Fetch the barbican sources from a PPA (for bug: 1599550)
Remove the trusty support for Py3 from install hook
This adds in the unit_test framework but there is a name collision
between charm.openstack as a module, and charm.openstack here which the
package loader can't resolve. Therefore, going to change the
charm.openstack package to charms.openstack to avoid the collision.
Alex Kavanagh
James Page
Liam Young