Service_token_roles_required missing in the server config file which
allows backwards compatibility to ensure that the service tokens are
compared against a list of possible roles for validity.
Change-Id: I75c8036cfd0e538309f11284a087753c50d12394
Closes-Bug: 1778198
Remove code that is redundantly tested.
This should not be tested here but in puppet-oslo
where this logic resides.
If we keep this and we do changes in puppet-oslo we
will break these unit tests, this is something we need
to sort out for all modules.
Change-Id: I946583c1f348e57d1738d30db7f48ccf80e27e48
check_revocations_for_cached and hash_algorithms are deprecated for
removel because of PKI token format is no longer supported.
Update warning message and add a release note.
Change-Id: If6988f9cdf4e3edc825b6f9dbfcdb24155458e51
Closes-Bug: #1804562
Closes-Bug: #1804720
When trying to specify the endpoint type in the identity service catalog
to use for communication with OpenStack services an outdated
configuration option was written: endpoint_type was replaced by
interface in aodh.
This change therefore also deprecates the aodh::auth::auth_endpoint_type
parameter in favor of a new aodh::auth::interface parameter.
Change-Id: Ifca3ddc47e02752dcf8503e5691005382bb6073c
Usage of the gnocchi_url configuration option was removed from aodh in
I41ef467750a403841ad96bfa7607ad63bd55702d.
Change-Id: I49f9c44adb3d0dfabfbb701d41c99a8267bed5cf
Both have no effect as aodh-api does not read them as of
Iefd6f4d9f76c69ed9b49483e1feda0b7dbe2cb81.
Change-Id: I0da4dc1ba52bae5becd5e2a9c0f008cbe2907446
Option "auth_uri" from group "keystone_authtoken" is deprecated[1].
Use option "www_authenticate_uri" from group "keystone_authtoken".
[1]https://review.openstack.org/#/c/508522/
Change-Id: I89f82693b22cc61c97f9df3fbbd2bdbfe482f549
Depends-On: I4c82a63baabd6b9304b302c97cd751a0103d8316
Closes-Bug: #1759098
Since pbr 1.4.0, wsgi_scripts entrypoing is supported and it will
generated a wsgi compatible binary file.
Not yet supported on Debian systems.
Change-Id: Ie9b0fe1b7923dbf68db665982eb6003c83c0b4a8
Add pool_timeout option to configure this value for pool_timeout with
SQLAlchemy.
Change-Id: Id6e7a30c6a94d6bf10ed924003dcf672e331c647
Closes-Bug: #1757581
In order to make easy orchestration on all OpenStack db-sync, add this
tag so people can use this tag in composition layer.
A use case it to set some orchestration to make sure MySQL Galera is
ready before running any Exec with this tag.
Change-Id: I8215df855b260b9421df121d136be2e77eab1346
Closes-Bug: #1755102
Adds the kombu_failover_strategy option for configuring
oslo.messaging.rabbit. This will determines how the next RabbitMQ node
is chosen in case the one we are currently connected to becomes
unavailable.
Change-Id: I8c44d54bdefc22bd30d0bc35486354b09611680a
Closes-Bug: #1748353
The move of policy.json into code means the file may not exist. We've
added support to ensure that the file exists in the openstacklib but we
need to make sure the permissions are right for each service. This adds
the group information to the policies so it works right.
Depends-On: I26e8b1384f4f69712da9d06a4c565dfd1f17c9ed
Change-Id: I26091326a1b50e977612a2b34a03bf8a938bfb33
Co-Authored-By: Alex Schultz <aschultz@redhat.com>
Keystone v2 api's are removed in [1], so it's required
to use keystone v3 otherwise all requests fallbacks to
keystone v2.0 and fails.
[1] https://review.openstack.org/#/c/499783/
Change-Id: Ie2794d5fb12785e7c620c4ec8e3ccc2fb64d9e3b
Closes-Bug: #1723838
Due to Python's GIL [1], we can't use multiple threads for running
OpenStack services without a performance penalty, since the execution
ends up serialized, which defeats the purpose.
Instead, we should use several processes, since this approach doesn't
have this limitation.
[1] https://wiki.python.org/moin/GlobalInterpreterLock
Change-Id: I3aa3757a991d4437d0921cb55c1d08b5c9179de1
This allows the setting of the error and access file logs, as well as
the access log format. This was done in a similar fashion as one can
configure these ones in the keystone wsgi manifest.
Change-Id: I0e42e5edacc10060c2906f21fd907845cda203a4
Add parameter to apache_wsgi to allow overwrite
and/or add additional wsgi process options.
This possibility was added to openstacklib
with Change-Id: I41914ce3361988d5db1695f09d21209772fdf548
Change-Id: I93e1d46e1f7c3121f866251620bf88435d4084d1
The revocation_cache_time is deprecated for removel because of PKI
token format is no longer supported.
Update warning message and add a release note.
Change-Id: I18389ff125c9f116b0f0682371698473e6974ac2
Closes-Bug: #1717144
The rpc_backend option has been removed in puppet-oslo[0], so we should
remove it.
[0]https://review.openstack.org/#/c/489264/
Change-Id: I2899da67ed9da1497904f41f6fa38d59e10a4cf9
Closes-Bug: #1708976
Oslo.messaging uses the transport_url to represent the rpc and
notification messaging driver to use and its full configuration. The
rpc_backend configuration option is deprecated for removal and
should not gate oslo.messaging driver configuration options.
This patch:
* deprecate rpc_backend
* remove conditional check
* update spec tests
* add release note
Change-Id: Id779b3cc169bee0d30ae16b37a6e03004b2e0dcc
This change configures the Ceilometer project name.
This allow to use Aodh and Gnocchi alarms as non admin user.
Change-Id: I8b8328a87997a3ba4e15bd711d266b564153a2d3
The unit tests were broken by a change to openstacklib
Id09c3358c5843510e6a2a8c0e2d4aeb3607e098b which renamed some of the
resources in the openstacklib classes. The problem is that our tests in
this module should not have been testing what occurs within openstacklib
so this fix updates the tests to only check what we are doing within
this module.
Change-Id: I0daf11f459ceffecd53a1291a700bb7fcfa21483
Depends-On: I9d535ab38afea852559df2b3073bd4b74a2a3947
