With the minimal Designate deployment with devstack, keystone module
doesn't load proxy_http so Designate API requests may fail. Explicitly
enable the module to make sure the apache2 setup always works for
Designate.
Closes-Bug: #1999019
Change-Id: I1fc02225b6676b68137245df2279340f215221f4
Adds a configuration variable that allows a user to
declare the CA certificate to be used to verify
traffic with a PowerDNS API endpoint.
Closes-Bug: #1971856
Signed-off-by: Juan Pablo Suazo <jsuazo@whitestack.com>
Change-Id: I57f3d5a1d1f79186cc5b38e76d30f62e01b60482
The current grenade job tests only with pdns4, but it would be valuable
to also test with bind9 to discern upgrade issues when bind9 is in use.
Change-Id: I118cc92e3950540d725f433dfe5d9590cbdab616
During a grenade upgrade test run, we updated the grenade test to migrate
to using uwsgi for the API during the from-Xena upgrade, but missed that
the main grenade upgrade script was starting the API without uwsgi.
This patch corrects the grenade upgrade script to run the API process
properly.
Change-Id: Ia54de92ec44641e16c20281cfa634599073f39e3
This patch updates the grenade job to migrate from using Apache mod_wsgi
to using uwsgi for the Designate API when upgrading from Xena to Yoga.
It also splits out the wsgi devstack configuration into a library file.
Change-Id: Icf8ee4a8e7e2dff67257b0e5f82fbeab6cb7e0b8
The apache configuration file location is different between Ubuntu and CentOS.
Devstack provides us a helper function to get the correct filesystem path.
This patch switches the wsgi ProxyPass configuration to use this helper
function to place the file in the correct location.
Change-Id: Id0472fb25da106a74429e87ee26c5dfdd8c83b6f
To better align with other OpenStack projects and to reduce the
ongoing problem with duplicate imports, this patch re-enables the
H306 check for proper module import order.
Change-Id: Iced92590829f6d9177d64ad4868aebe6eafd6a8a
This reverts commit 185d92d230bdf8149b3ae3f6d1730ec23c0514d7.
Reason for revert: Lets try to move back to uwsgi, as logging is a lot cleaner in the CI with uwsgi. Switches uwsgi from using uwsgi over socket to over localhost HTTP.
This patch also bumps the API_WORKERS setting for devstack from 2 to 4.
This will bump the uwsgi processes and threads from two to four.
Change-Id: I126133564e2ada32448ad36e0d021790939425d4
Previously, the grenade API started check during the upgrade was
checking if the root of the web server was functioning. In this job
that is testing the horizon endpoint and not the designate API.
This patch fixes this to have the check run against the designate
endpoint under apache. This prevents false failures when horizon
has an issue.
Change-Id: Idbfec1adca2024cd5f352017a7c9319dcec65d42
"localhost" can also point to ::1, but the memcached service is only
listening on 127.0.0.1, so be explicit about that in the URL that
we give to tooz.
Depends-On: https://review.opendev.org/759831
Change-Id: I2a2ec20b7645034a23337380005add2e953f9185
We no longer need to deal with xenial or older distro versions, so we
can assume that we can always install pdns4 from the distro directly
and don't need the distro version check any longer.
Drop a config option that was removed in pdns 4.2.x.
Use mysql credentials correctly.
Change-Id: I90af3a092296f943509833608f25522b6f8e9ab6
There is an issue with the unauthed tests
and uwsgi causing the CI to frequently fail.
Lets move back to mod_wsgi until we can figure
that out.
Change-Id: I9fd558cec85da87c8daea36f7a9e2666948e72f1
Devstack is switching back to using distro installed uwsgi, which will
not reside in the same directory as the python binaries. Make sure to
use the right path for it. See also [0].
[0] https://review.opendev.org/577779
Change-Id: Ic1b67c9d0ebfbf444f5ee096d6478fbe0c073329
The updated flake8 seems to have fixed a check for .format() issues that
discovered a bug in one of our tests, which is fixed here.
Also get rid of using "l" as a variable name and tag the imports that
need to stay in order after setting an environment variable.
Change-Id: I28de0ffa68f9bff4685d81fe7b5a5d8909e2313c
The current locking implementation is limited to
the running process. This introduces distributed
locking that will help prevent race conditions
when there are many instances of designate-central
running.
Closes-Bug: #1871332
Change-Id: I98f7f80ce365cdee33528f9964c03274f62a795a
The repo is Python 3 now, so update hacking to version 3.0 which
supports Python 3.
Fix problems found.
Update local hacking checks for new flake8.
# to unbreak gate:
Depends-on: https://review.opendev.org/715835
Change-Id: Icc2f4368cc90689d74510ce36fe77d2346aec625
This is a bit of a security issue, also we don't seem to need it anymore
since we have long switched to running under python3 and the setcap
doesn't have any effect anyway. It will also break deployments once we
drop installing python2 completely, so just remove it now.
Change-Id: I7265c525f1091012011ba12d65e9669a826ab979
The USE_SYSTEMD variable is to be dropped from devstack[0], as running
with systemd is the only option now. Drop it's usage in our plugin.
[0] https://review.opendev.org/703734
Change-Id: I0161bc82878ca936c3b0d9e9f9624be81fad21db
- Ignore duplicate Zone error
- Handle error when contractId or gid is missed
- Ignore port for masters servers, because Akamai uses only 53 port and
does not allow to specify any port in list of masters servers.
- Added timeout and retries for soft Zone Delete
- Added handling errors on the delete zone action
- Added Log info message with RequestId on soft zone delete
- Added processing for TsigKey during creation zone
- Added devsatck_plugin for akamai_v2 backend
Depends-On: https://review.opendev.org/#/c/692819/4
Change-Id: Ib221f4cf0371e70fc6900582d826ffc1bdfc12b9
The old v1 dashboard panel has been removed, when upgrading from an
older version we need to remove the symbolic link for it in order to
avoid horizon from failing.
Change-Id: I383884aa100fd983e1087d7458396f8053414d55
This patch switches to Apache and mod_wsgi by default
for devstack.
Also, use memcached as the coordinatior for single node deployments.
Change-Id: I8798c04f2bc386aca32bda8961efd29298899890
The panel _1720_project_dns_panel.py has been removed in [0], stop
trying to install it in our devstack plugin.
[0] Iabf7d396ea6feb0cd7de1c5408a81a7a3ce1efbf
Change-Id: I7ebc7991bd4f59579195d337f1787fd8abefbe90
That directory was only needed when using PKI tokens, which have been
removed from keystone for some cycles now. Also replace the deprecated
devstack function configure_auth_token_middleware with the current
version.
Change-Id: I7d10a21ed90dc9ea762dc3ea28fb22f55acf413d
Use API_WORKERS for all services, to make sure we
are testing with at least 2 workers for every service.
* Use API_WORKERS for all services.
* Removed deprecated and removed settings for the worker.
* Use enable_host_header is tests.
Change-Id: Iba9ba655c47ee085a47ee98872437f07fdc3346c
The pool-manager has been deprecated since Newton and
is now being removed with the Train release.
Change-Id: Ib258043d492bb25e1c061d765b40885317c73804
* Change dns backends and pools.yaml to use
ipv6 addresses not wrapped in brackets.
* Changed MySQL backends to use MYSQL_HOST.
* Fixed bug in pdns4 driver not allowing
masters to use an ipv6 address.
Depends-On: https://review.opendev.org/#/c/678324/
Change-Id: I8f469e732618732f5417c1b5e6c2049eaa83ea78
We don't need admin or internal endpoints in a normal devstack setup,
other basic projects are also only creating the public endpoint now.
Change-Id: Iaafec07cf9a0196b5da850924b98e3aa94d559f1
* Move to bionic
* Add openSUSE Leap 15
* * Update Bind devstack backend plugin to work on Leap
* Remove port mapping
* Rmove the .gitconfig copy into the VM
Change-Id: I99d228f850e03045febf196f12eef5927f7605b9
Signed-off-by: Graham Hayes <gr@ham.ie>
Keystone V2 is no longer supported and is removed
from the D2D driver in this patch. In addition
we also add support to pass a region_name on to the
driver.
Change-Id: Ia3d2951f4e90817782bf959a6b2402eac26dbc7f
Currently when devstack runs, the following
error message is always displayed.
> WARNING stevedore.named [-] Could not load
This is because no notification driver is set. We
fix this by setting messagingv2 to default.
Change-Id: Id8c293cfab828b568b6cb2654530e8fe657fb69a
1. oslo project provide jsonutils, and designate use it in many place[1],
this PS to update the remained json module to oslo jsonutils for
consistency.
2. fix typos for rst file
[1]: https://github.com/openstack/designate/search?q=jsonutils&unscoped_q=jsonutils
Change-Id: Ib030b8a6e1369aa4ac7449a759580c4fcce247f7
PowerDNS 4.1.0 changed the default value of `webserver-allow-from` from
`0.0.0.0/0` to `127.0.0.1` which blocked designate-worker and
pool-manager from connecting to the API [1]
Updated the allowed list of IPs to include the service host.
1 - https://doc.powerdns.com/authoritative/settings.html#setting-webserver-allow-from
Change-Id: I655ba3264507ba0f4fc30ba8a7c3b35d216a9acd
Signed-off-by: Graham Hayes <gr@ham.ie>
