openstack/charm-keystone
Code Issues Proposed changes
664 Commits 34 Branches 5 Tags
0ad7c85c38
Commit Graph

166 Commits

Author SHA1 Message Date
Edward Hope-Morley
0ad7c85c38 [hopem,r=] 
Refactor credentials creation code.
 2015-03-30 19:57:24 +01:00
Liam Young
332fef579c [hopem, r=gnuoy] A previous commit had removed auth_host and service_host from 
the peer relation due to races with resolve_address(). If
we do not place this data on the peer relation we actually
break endpoints that use openstack.context.IdentityServiceContext
which expects *any* keystone relation unit to be able to provide
a complete set of valid settings...which are propagated by the
peer relation and re-propagated to the keystone relations.
 2015-03-30 15:35:34 +01:00
James Page
71d63a8f6f Add full kilo support 2015-03-30 15:25:27 +01:00
Edward Hope-Morley
a2a041b82f [hopem,r=] 
A previous commit had removed auth_host and service_host from
the peer relation due to races with resolve_address(). If
we do not place this data on the peer relation we actually
break endpoints that use openstack.context.IdentityServiceContext
which expects *any* keystone relation unit to be able to provide
a complete set of valid settings...which are propagated by the
peer relation and re-propagated to the keystone relations.
 2015-03-30 00:00:15 +01:00
Edward Hope-Morley
424737f50e fix ssl sync peer actions 2015-03-26 17:27:22 -07:00
Edward Hope-Morley
c4e9c1e6a2 Ensure db not accessed before ready. 
Closes-Bug: 1413753
 2015-03-26 15:50:56 -07:00
James Page
4b26d6b11b Enable cinder v2 api as a service 2015-03-24 09:36:01 +00:00
Edward Hope-Morley
f8e7f32c75 [hopem,r=gnuoy] 
Fixes import error for versions of python-keystoneclient < Icehouse

Closes-Bug: 1423579
 2015-03-20 10:57:38 +00:00
Edward Hope-Morley
3c3faa8728 [trivial] fix peer actions (broken in previous commit) 2015-03-15 11:16:24 +01:00
Edward Hope-Morley
6371af2e5c [hopem,r=gnuoy] 
Implement PKI token signing.

Closes-Bug: 1309667
 2015-03-13 12:56:46 +00:00
Edward Hope-Morley
e47d3a214e cleanuo 2015-03-11 14:46:42 +00:00
Edward Hope-Morley
a4c5b8d4d4 [trivial] fix is_ssl_enabled to not always return True 2015-03-11 11:57:29 +00:00
Edward Hope-Morley
fa4892f524 synced /next 2015-03-10 16:17:27 +00:00
Edward Hope-Morley
277fbae84d [hopem,r=] 
Fixes disable ssl. Allows disable of use-https and https-service-endpoints.

Use '__null__' value to flush out peer relation settings that need to be unset
when forwared to other relations. This will fix ssl disable by ensuring that
peer settings are correctly forwarded to endpoint relations.

Closes-Bug: 1427906
 2015-03-10 12:02:11 +00:00
Edward Hope-Morley
fdba570747 remove pkiz 2015-02-24 14:51:28 +00:00
Edward Hope-Morley
bfeca73d14 don't push race-prone data on cluster relation to avoid spinning 2015-02-24 13:35:09 +00:00
Edward Hope-Morley
d11af8fa62 fix race 2015-02-20 13:34:29 +00:00
Edward Hope-Morley
e08e63c092 fix race 2015-02-20 12:20:16 +00:00
Edward Hope-Morley
fac79a5bdc more 2015-02-20 00:30:36 +00:00
Edward Hope-Morley
987f3f0da6 more 2015-02-19 23:42:38 +00:00
Edward Hope-Morley
17a7e408a2 more 2015-02-19 21:05:09 +00:00
Edward Hope-Morley
63afdd20c7 Fixes import error for versions of python-keystoneclient < Icehouse 2015-02-19 14:35:06 +00:00
Edward Hope-Morley
d0993565ca [hopem,r=] 
Implement PKI token signing.

Closes-Bug: 1309667
 2015-02-18 17:20:23 +00:00
Edward Hope-Morley
e092465fe4 more 2015-02-16 23:56:01 +00:00
Edward Hope-Morley
717d6776b9 always ensure db_ready before migration 2015-02-16 22:59:25 +00:00
Edward Hope-Morley
fb91126bc3 [hopem,r=] 
Ensure db is migrated in identity-relation hooks and
also avoiding unecessarily re-migrating unless an upgrade
is being performed.
 2015-02-16 20:58:06 +00:00
Edward Hope-Morley
f40c92f81b [trivial] keystone_utils code cleanup (no functional changes) 2015-02-16 14:48:02 +00:00
Edward Hope-Morley
1915bb6852 [hopem,r=] 
Synced charmhelpers and now using bool_from_string
 2015-02-16 11:25:45 +00:00
Edward Hope-Morley
849497d132 [hopem,r=gnuoy] 
* improves ssl master election logic
* adds more unit tests
* fixes config changes logic

Closes-Bug: 1415579
 2015-02-05 17:32:30 +00:00
Edward Hope-Morley
c4c78977e8 fix null setting issue 2015-02-03 14:38:55 +00:00
Edward Hope-Morley
b0df8f0b59 Improve ssl master election logic and add more unit tests 2015-02-03 12:56:40 +00:00
Edward Hope-Morley
172c11f7fd [hopem,r=] 
Fixes is_db_ready() logic

Closes-Bug: 1417108
 2015-02-02 13:49:05 +00:00
Edward Hope-Morley
623b173df3 We need to sync all ssl certs for both use-https AND 
https-service-endpoints.
 2015-01-28 16:54:56 +00:00
Edward Hope-Morley
54a58fca29 [hopem,r=] 
Fixes single unit SSL.
 2015-01-27 22:21:37 +00:00
Edward Hope-Morley
f57638d8fe [hopem, r=] 
Wait until DB ready before performing Keystone api ops.
 2015-01-22 18:44:33 +00:00
Edward Hope-Morley
50382ceb7e [hopem,r=gnuoy] 
Fixes ssl cert synchronisation across peers

Closes-Bug: 1317782
 2015-01-22 14:35:41 +00:00
Edward Hope-Morley
208fd9ea7e ignore ssl actions if not enabled and improve support for non-ssl -> ssl 2015-01-21 16:23:15 +00:00
Edward Hope-Morley
928a2ef915 [hopem,r=gnuoy] 
Set root logger level to DEBUG in /etc/logging.conf
if debug is True otherwise keystone logger remains
as WARNING.

Closes-Bug: 1407317
 2015-01-19 10:45:41 +00:00
Edward Hope-Morley
daf3a50801 synced /next 2015-01-16 15:34:46 +00:00
Edward Hope-Morley
040aa5dee3 r104 is broken - reverting to r103 2015-01-16 15:32:31 +00:00
Edward Hope-Morley
fe0c375bb6 synced /next 2015-01-16 14:50:19 +00:00
Edward Hope-Morley
93d0953758 add sync-master stickiness back into the mix 2015-01-16 14:02:29 +00:00
Edward Hope-Morley
6b54d0eab0 [hopem,r=gnuoy] 
Set log level to DEBUG in /etc/logging.conf if debug is True

Closes-Bug: 1407317
 2015-01-16 13:47:42 +00:00
Liam Young
c1d1565048 [gnuoy, r=hopem] 
Set admin password in identity-admin relation regardless of how it was generated
 2015-01-16 11:41:03 +00:00
Edward Hope-Morley
36f65cfde4 synced /next 2015-01-16 11:22:49 +00:00
Liam Young
fb12d7185f Tideyup up after feedback from hopem 2015-01-14 11:04:13 +00:00
Liam Young
943474848a Merged 'next' in 2015-01-14 10:29:20 +00:00
Edward Hope-Morley
c05f6a0447 validate echoed peer data 2015-01-13 22:16:46 +00:00
Edward Hope-Morley
03b0fd66f8 add leader protection to cluster-changed hook 2015-01-13 16:01:25 +00:00
Edward Hope-Morley
2fa428e50b tests passing and cleanup 2015-01-13 13:43:07 +00:00