License check shows missing licenses. This is needed
for the package review to add puppet-barbican to OPM.
Change-Id: I1ecf714101ae69d0ff620a95ce29750e9403e9c3
Create a new class to handle all configuration for
keystone_authtoken section in configuration file using
keystone::resource::authtoken
This patch is not backward compatible:
- we have change auth_type in api.pp to auth_strategy,
because auth_type is related to keystone authentication.
- removed all parameters related to keystone_authtoken
from api.pp and moved to authtoken.pp
Change-Id: I2dee8a3d1c399234941f96d8f21f49526777f501
Depends-On: I94914ed5a8b5c1447606547b31ed46bb72b4de01
Related-Bug: #1604463
Currently during creation DB for barbican service we have wrong
dependency on db-sync command: it has incorrect name. This patch
fixes this problem.
Change-Id: I7a51c1a3baae5fd96b75cc73acd4c8c3e2c4ade5
This provides a mechanism for setting default across all modules.
Change-Id: Idb6d7b43900739bee09acb60cac26d7014a45917
Related-Bug: 1599113
Depends-On: I9d0a10d48124ee71ea80134ceef96436c8ee196e
1. Change cert plugin from snakeoil to simple_certificate
The snakeoil plugin offers more functionality, but requires a little
more setup. Ultimately, though, we will likely replace this plugin
with the dogtag plugin, if we do not disable the cert functionality
altogether.
For now, as at least one plugin is required, we use the
simple_certificate plugin, which requires no setup.
2. Make sure Barbican packaging is installed before db-sync
CI is currently failing because db-sync does not work, python-pymysql is
installed *after* running db-sync and this is wrong.
This patch makes sure things like this don't happen anymore.
3. Move keystone settings to barbican.conf
The current settings (in barbican-api-paste.ini) were not working
and putting them in barbican.conf is more in line with other projects.
Change-Id: Ifa3171f794be527c8df66894572ebf2f893986da
While we were already able to pick an independent auth_name and
service_name; the service_name was defaulting to auth_name. Now it
has a value of its own to be consistent with other modules.
Related-Bug: #1590040
Change-Id: Ied45e546667b7c04e9b511a3ae23c529ad78e7df
Cover Barbican::Wsgi::Apache class with spec tests.
Also update dependencies between barbican-api package and services.
Change-Id: Ic6126e774b0a172e89da5721feeff35ade5e3030
Bindep is a binary automation tool used in openstack-infra. With it,
projects can better control the default packages installed into the
OS. Because we are using puppet, we actually don't want any packages
installed by default as to better test our manifests.
Change-Id: I0ef8975cd249cbe35b64732f5b8696c6cb9288b0
Co-Authored-By: Paul Belanger <pabelanger@redhat.com>
Option "verbose" from group "DEFAULT" is deprecated for removal.
The parameter has no effect.
Remove verbose for logging api and acceptance.
Change-Id: I4b0c12db4add7b36bca2397d4ddebebe90beaec5
Upstream Barbican has moved to keystone v3. This patch
makes the necessary modifications to the keystone config
code.
Change-Id: I5ffe3820d3d26dbc3012dc362bcbf0da41c3d155
The acceptance test now has a barbican API server that runs in
a gunicorn instance that uses keystone as an authentication source.
We specify the snakeoil plugin because its a more useful and realistic
plugin to use in acceptance tests.
Fixed barbican manifest to not require including barbican::api,
and fixed typo in dogtag spec.
Added option to not autocreate the database. This allows use of
mysql and dbsync when creating the database.
Fixed a couple of package tags.
Change-Id: I7c25f8692a4388874b05ab561602553f37e4961b
Depends-On: Ia79f3d1bed0c2a66ed17ae2ee91ca70c73f6c434
Depends-On: Ic36fd606fe06202b0ca5b8eeaf5c5bdc2a5708fd
The db_max_retries parameter regulates the number of reconnection
attempts performed after an error raised rather than at startup.
Change-Id: Ief8fe19b1b45cf275f35c05e044ebf226b835311
Closes-Bug: 1579718
Updates the database parameters to actually match what upstream
barbican uses in its config file:
http://git.openstack.org/cgit/openstack/barbican/tree/etc/barbican/barbican.conf#n41
Without these changes I get db sync failures w/ barbican when
using MySQL.
Change-Id: Ia79f3d1bed0c2a66ed17ae2ee91ca70c73f6c434
Co-Authored-By: Alex Schultz <aschultz@mirantis.com>
This change updates the acceptance tests to specify
http://localhost:9311 for the acceptance tests to prevent any external
network access attempts during testing.
Change-Id: I1fb742b2459b149a4bb634c5b83bdcfcefac0deb
This was a comment missed in the last review.
No need for ensure_package to be dependent on barbican::api
Change-Id: If291e226243b33e2f81b675a95ebfa959e99e799