1726 Commits

Author SHA1 Message Date
Jenkins
3ccd8a3162 Merge "Allow operators to disallow creation of TLS Termination listeners" 2017-06-28 02:15:20 +00:00
Jenkins
e41740c61f Merge "Allow operators to disable v1 or v2.0 api endpoints" 2017-06-28 02:14:55 +00:00
Jenkins
c642c579e1 Merge "Stop provider and flavor API stubs failing calls" 2017-06-27 18:44:19 +00:00
Jenkins
7905862ff5 Merge "DELETE operations don't actually return data (204)" 2017-06-27 18:43:54 +00:00
Jenkins
a6b3c798bf Merge "No need to do a shutdown(wait=True) when in a context-manager" 2017-06-27 06:22:13 +00:00
Adam Harwell
38a5563abc Allow operators to disallow creation of TLS Termination listeners
Change-Id: I93fbc26c775d1a7f6c69a0ab0b5f47a573cb125d
2017-06-26 18:47:15 -07:00
Jenkins
958051384d Merge "Replace the usage of 'admin_manager' with 'os_admin'" 2017-06-27 00:38:16 +00:00
Adam Harwell
1950f078cc DELETE operations don't actually return data (204)
Change-Id: I458cc181d987f4e062910b45ae8026e0e3e7fa71
2017-06-26 16:28:31 -07:00
Adam Harwell
c764abc355 Allow operators to disable v1 or v2.0 api endpoints
Also, create a section for API settings `api_settings` and move some
related settings there.

This patch also enables the configuration settings to be logged
when the api process is started if debug is True.

Change-Id: I31671789d186c4b8a775cc12a414acd2d439512d
2017-06-26 14:37:27 -07:00
johnsom
bc886f2f65 Add v2 L7 Policy API section
This patch adds the L7 policy section to the v2 API reference.

This patch also updates the child object create error code lists to
include 409 as a possible error code.

Change-Id: I6cb469c65832af3440c18dc71c7786a8fbf9bd2b
Partial-Bug: #1558385
2017-06-26 13:33:26 -07:00
Van Hung Pham
05e1a7ce46 Replace the usage of 'admin_manager' with 'os_admin'
In tempest, alias 'admin_manager' has been moved to 'os_admin'
in version Pike, and it will be removed in version Queens [1].

[1] https://review.openstack.org/#/c/467852/

Change-Id: I3bbfda6a866488310393312caa0d1fc368a8becb
2017-06-26 06:35:25 +00:00
Joshua Harlow
fabe867ba2 No need to do a shutdown(wait=True) when in a context-manager
It isn't needed to do this explicitly since the __exit__
method of a executor already does this automatically when
exiting the context that was entered.

See:

https://github.com/python/cpython/blob/master/Lib/\
                  concurrent/futures/_base.py#L580

So might as well save some space and just let the context
manager do its job.

Change-Id: I963d5e3c8a185716dd2bb37fa5cb3197c70bd2e1
2017-06-23 21:26:35 -07:00
Jenkins
32e2d9c3c1 Merge "Use 'get_rpc_transport' for RPC clients and servers." 2017-06-23 21:35:08 +00:00
Jude Cross
487750a877 Add filtering and field selection to API
This patch implements API filtering based off of
query parameters passed to the Octavia API. Additonally
this patch implements field selection for the Octavia
API.

Change-Id: I9fe26abe37f464d9c028b8c476485007143d3b5c
2017-06-22 17:46:22 -07:00
Jenkins
e47c2cb584 Merge "Provide better ComputeBuildExcpetion messages" 2017-06-22 20:12:37 +00:00
Michael Johnson
af71a91603 Stop provider and flavor API stubs failing calls
We have stubbed out provider and flavor in the Octavia v2 API but
these have not yet be fully implemented.
This patch returns the appropriate error when the user specifies a
provider or flavor.

Change-Id: I52350944a377791eafdb407c51301250377c8a49
Closes-Bug: #1698654
2017-06-22 12:16:48 -07:00
Jenkins
9b52452762 Merge "SSL Health Monitors didn't actually ... check very much" 2017-06-22 18:35:01 +00:00
Jenkins
24f972a325 Merge "Refactor the RBAC auth enforcement a bit" 2017-06-22 18:34:46 +00:00
Jenkins
0723b60037 Merge "Add RBAC enforcement to quotas v2 API" 2017-06-22 18:34:40 +00:00
Jenkins
dd390481b6 Merge "Add RBAC enforcement to l7rules v2 API" 2017-06-22 18:34:33 +00:00
Jenkins
a04f31e9a4 Merge "Add RBAC enforcement to L7 policies v2 API" 2017-06-22 18:32:33 +00:00
Jenkins
d521fa8913 Merge "Add RBAC enforcement to health monitors v2 API" 2017-06-22 18:32:28 +00:00
Jenkins
8cc199b7f3 Merge "Add RBAC enforcement to members v2 API" 2017-06-22 18:32:22 +00:00
Jenkins
4547497ec3 Merge "Add RBAC enforcement to pools v2 API" 2017-06-22 17:43:19 +00:00
Michael Johnson
32819ecc8d Provide better ComputeBuildExcpetion messages
Octavia was not exposing the underlying compute driver exception
information to the operator in the octavia logs.  This meant debugging
required examining the compute service logs.

This patch will pass through the fault message provided by the compute
driver in the exceptions raised and clarify in the logs when the
nova driver caused the failure.

Change-Id: If54656c635aac907d78b387a9b191320385d9852
Closes-Bug: #1658900
2017-06-21 21:53:14 -07:00
Adam Harwell
897214a4ff SSL Health Monitors didn't actually ... check very much
Change HTTPS monitors to be a real check, and add TLS-HELLO type to
perform the older check functionality if desired.
The only reason you would need TLS-HELLO instead of HTTPS is if your
application does client-cert validation, as the HAProxy box won't have a
valid client cert.

Also add missing PING type to the DB, so PING monitors can be used.

Change-Id: I15a79b7fb0c2ff1020090b4057909a1f41a2c8ad
2017-06-22 00:04:19 +00:00
Adam Harwell
3ce659e9a5 Refactor the RBAC auth enforcement a bit
Change-Id: Idb0e2fc8560b242e80c2d217384fade5d82f4551
2017-06-21 14:09:31 -07:00
Kenneth Giusti
d192827e29 Use 'get_rpc_transport' for RPC clients and servers.
Currently uses 'get_notification_transport' for RPC.  Notification
transports are for oslo.messaging notifications, not RPC.

Change-Id: I787c230e0eb3b1ce8500ec76b1319684520aa512
Closes-Bug: #1699597
2017-06-21 16:54:52 -04:00
Jenkins
dcf4885a16 Merge "Agent: swap flask responses to webob, handle 404 retries better" 2017-06-21 19:44:04 +00:00
Jenkins
0b13eaab4e Merge "Add RBAC enforcement to Octavia v2 API" 2017-06-21 18:59:22 +00:00
Michael Johnson
335c00ac18 Add RBAC enforcement to quotas v2 API
This patch adds policies and enforcement to the Octavia v2 API for quotas.

Change-Id: I5f2fa38973fce595ea3ec03cdff924336e0e71c8
Partial-Bug: #1690481
2017-06-20 18:52:05 -07:00
Michael Johnson
f4a16a842b Add RBAC enforcement to l7rules v2 API
This patch adds policies and enforcement to the Octavia v2 API for l7rules.

Change-Id: I2050ef70c26bc59d3777842ea3de9900d4e282fe
Partial-Bug: #1690481
2017-06-20 16:22:41 -07:00
Michael Johnson
accf9456cc Add RBAC enforcement to L7 policies v2 API
This patch adds policies and enforcement to the Octavia v2 API for L7 policies.

Change-Id: Ie4de79df3f6f7a6c46c00d2e224979a8e25e9712
Partial-Bug: #1690481
2017-06-20 15:26:54 -07:00
Michael Johnson
aea4f266ee Add RBAC enforcement to health monitors v2 API
This patch adds policies and enforcement to the Octavia v2 API for health
monitors.

Change-Id: I5bd48b0f451b1543fd9710c949d44d2c159ef91f
Partial-Bug: #1690481
2017-06-20 14:35:53 -07:00
Michael Johnson
7fa12cee40 Add RBAC enforcement to members v2 API
This patch adds policies and enforcement to the Octavia v2 API for members.

Change-Id: I8f369e8ad6fa1cf3ee6485f0be95b243b7ade20e
Partial-Bug: #1690481
2017-06-20 13:48:56 -07:00
Adam Harwell
9767f0908e HM Update for url_path uses incorrect validation
Change-Id: I202d337fb362af199d8ee85716c0c752a0f52ccc
2017-06-20 11:17:29 -07:00
Michael Johnson
8987ab39ed Add RBAC enforcement to pools v2 API
This patch adds policies and enforcement to the Octavia v2 API for pools.

It also fixes a minor issue with the specs tox job.

Change-Id: Id2aa4dfad149583f9cb16205cb617f6e2a1bc92e
Partial-Bug: #1690481
2017-06-20 09:38:29 -07:00
Michael Johnson
0ce46fe8d0 Add RBAC enforcement to Octavia v2 API
This patch adds policies and enforcement to the Octavia v2 API for
load balancers and listeners.  Child patches will add the rest of the API.

In this patch I also correct some improper functional tests.

Change-Id: Id8a2d15c117c54bd45fc8bb76bf71aff1b3c8fe9
Closes-Bug: #1690481
2017-06-20 13:43:47 +03:00
Jenkins
e5ac4a0426 Merge "Remove deprecated signing_dir config setting" 2017-06-20 02:01:36 +00:00
OpenStack Proposal Bot
f47172ff28 Updated from global requirements
Change-Id: Ifd35e226fc55e051fb24e245077c161111f26e00
2017-06-19 22:39:26 +00:00
Jenkins
a0b46c676a Merge "Allow operators to tune VIP creation parameters" 2017-06-19 21:59:38 +00:00
Adam Harwell
43199884d5 Agent: swap flask responses to webob, handle 404 retries better
Change-Id: I7c8f7da8db104be54cea1fe6f411dcab9d134e2a
2017-06-18 22:04:29 -07:00
Jenkins
e38e86f0f0 Merge "Small refactor for load_balancer v2 vip validation" 2017-06-17 03:28:27 +00:00
Jenkins
60e1076d7e Merge "Enable DIB trace logging" 2017-06-17 00:18:13 +00:00
Adam Harwell
041d15a4b2 Allow operators to tune VIP creation parameters
Change-Id: Iff46479d530e5e3b09f27fd9d335651521f77a11
2017-06-16 14:44:58 -07:00
Jenkins
4b101f7901 Merge "Also remove amphora_health entry during house_keeping amps" 2017-06-16 00:50:58 +00:00
Adam Harwell
c75908853b Enable DIB trace logging
Change-Id: Ib48e4e36f41e6c292e687cd765b1ccc0464d6457
2017-06-15 15:47:07 -07:00
Adam Harwell
3d4226b98a Small refactor for load_balancer v2 vip validation
Change-Id: Ie7008d6ec0462bc44912799809b9eb816e9b8718
2017-06-15 10:35:15 -07:00
OpenStack Proposal Bot
5e8b56f314 Updated from global requirements
Change-Id: I624e79c1955b6f9e7f58fa2a558c5fa47a536b73
2017-06-15 16:30:14 +00:00
Adam Harwell
978df9981f Also remove amphora_health entry during house_keeping amps
Change-Id: I1d46e5b34b98f920525d38c54288bdc96526bc10
2017-06-14 12:04:48 -07:00