Commit Graph

653 Commits (1e09e553edf091f53b3bbfe667630adc236cf223)

Author SHA1 Message Date
Denis Egorenko 1e09e553ed Move Glance to new authtoken scheme
Use glance::<service>::authtoken to configure keystone_authtoken
section in glance configs, with all parameters required
to configure keystonemiddleware.

Also changed auth_type to auth_strategy, because auth_type is
related to keystone authentication.

Change-Id: I722a1e41b2cee0b3040c37f07adfd13c33edaa5c
Closes-bug: #1604463
2016-08-05 13:46:22 +03:00
Alexander Arzhanov 804afb9c3e Fix typo in values for disk_format
Fix typo in value vmd to vmdk.

Closes-Bug: #1604829

Change-Id: I0f2a3b7e37a3adbde7fdfaf91e518e0b97a40679
2016-07-20 17:40:18 +03:00
Juan Antonio Osorio Robles d84c42f7e2 Add option to enable Glance's SSL middleware
Glance is now using the HTTPProxyToWSGI middleware from
oslo.middlware in its default api-paste configuration [1]. This commit
gives us the ability to enable/disable that middleware.

[1] I481d88020b6e8420ce4b9072dd30ec82fe3fb4f7

Change-Id: I51fbc6050dfbdc72f7ee56a2d17dd5223a208a17
2016-07-13 12:07:40 +03:00
Jenkins 08519a992b Merge "Deprecate auth_region option for Glare" 2016-07-12 09:40:11 +00:00
Denis Egorenko e5fedfaa30 Deprecate auth_region option for Glare
Patch Ie50ab3371386691b72e25e1088198c05edb920b6 is missed deprecation
for Glare service, so this patch fix it.

Also fix typo in release note.

Change-Id: If6292e518d1ccd7b83072c99cff1e76078753218
2016-07-11 14:32:36 +03:00
Sofer Athlan-Guyot 5a83a8d56d Include openstacklib defaults manifest.
This provides a mechanism for setting default across all modules.

Change-Id: I28c8f651f8c81de6ab2d3cb73ac67d57cad0a264
Related-Bug: 1599113
2016-07-08 08:56:03 +00:00
Emilien Macchi e2c322095a Prepare 9.1.0 (newton-2)
Prepare the second milestone of Newton cycle.

Change-Id: I5ec4b868eb29e7394acab8f964773ef8242f6c5f
2016-07-07 09:07:48 -04:00
ZhongShengping ef27233788 Deprecate auth_region option
The auth_region options in the [DEFAULT] configuration section in
glance-api.conf are deprecated, and will be removed in the O release.

Change-Id: Ie50ab3371386691b72e25e1088198c05edb920b6
2016-07-05 16:59:37 +08:00
Iury Gregory Melo Ferreira 272e1df0ce Remove 12.04 and add 16.04 to metadata
Change-Id: I49b1628d74d1d6b0f5cd564be844b5922d8406d3
2016-06-29 22:09:02 -03:00
Emilien Macchi 57c5f9917a Remove mitaka release prelude note
We had a prelude note when releasing Mitaka. This note
keep showing-up at every release while we're on Newton now.

We don't need a prelude release note, we already have nice sections
for every note we push.

This patch aims to remove this prelude starting from Newton.

Change-Id: I9897cdd0acb161cc0a919288ae36d9cdd3e42b27
2016-06-28 15:07:53 -04:00
Clayton O'Neill 18b010975c Add hooks for external install & svc management
This adds defined anchor points for external modules to hook into the
software install, config and service dependency chain.  This allows
external modules to manage software installation (virtualenv,
containers, etc) and service management (pacemaker) without needing rely
on resources that may change or be renamed.

Change-Id: If683fbd098e701a3c4da91941cf818b18b41b209
2016-06-17 13:17:34 +00:00
Jenkins a2acbc7110 Merge "Switch $service_name to 'glance' for keystone" 2016-06-15 03:09:28 +00:00
Dan Prince 44bf1232a5 Switch $service_name to 'glance' for keystone
This patch switches the service name from 'Image Service' to
just 'glance' so that it matches what we do for other services.
Typically we use the project (auth) name for the service_name.

Not having a consistent catalog can cause failure to find
endpoints for some services. Mistral for example would fail
to lookup the glance endpoint due to it being set as 'Image Service'
rather than 'glance'.

Change-Id: I17116c0f995ab76ed79bd8b2df57629c1ed4e4d0
Closes-bug: #1584229
2016-06-10 19:02:21 +00:00
Emilien Macchi f562023d2e Add nodepool-xenial.yml file
To run Beaker jobs in OpenStack Infra, we need this file so we run tests
on the right nodeset

Change-Id: Id0ccb15274e7466aca6a65b920eac564bece1105
2016-06-10 13:30:58 -04:00
Jenkins 20a186b8d9 Merge "Provide consisent default name for service_identity resource" 2016-06-09 11:36:49 +00:00
Juan Antonio Osorio Robles f2855769b3 Provide consisent default name for service_identity resource
This change updates glance::keystone::auth to include the
user-provided auth_name as a parameter for the service_identity
provider. Hardcoding the namevar of that resource as was agreed. the
service_name parameter was not undef as in other resources, so the
name was left as-is. And we no longer pick a service_name out of the
service_name and auth_name; now only the service_name is taken into

Closes-Bug: #1590040
Change-Id: I757930e05b6e14cb15139840c9e4a513c9af5d17
2016-06-09 07:46:08 +03:00
Mohammed Naser 92d9ac9368 Fix Keystone integration documentation
The README file refers to an invalid *_address parameters
when *_url parameters should be used.  The example in the
manifest does not show a password listed (which is required).

Change-Id: I03eb31f0c660afca1688e6fc7a992cfb70317706
2016-06-07 18:37:20 -04:00
Benedikt Trefzer 0600f74179 fix comment of database to connect to
Change-Id: I5bf714baeb06ab8fab086e8f1d4d0fc789e1b952
2016-06-06 21:38:07 +02:00
Jenkins 7651c49cac Merge "Remove deprecated keystone::auth options" 2016-06-04 21:30:56 +00:00
Jenkins 41abdbdf89 Merge "Prepare 9.0.0 release" 2016-06-03 16:46:04 +00:00
Jenkins 2481120369 Merge "Change wiki to docs" 2016-06-03 14:18:19 +00:00
Denis Egorenko 9b4096145b Cleanup README
Change-Id: If9ba4bfdc6b215bbbbc0eb98943611fc6f79e345
2016-06-03 12:45:38 +03:00
Iury Gregory Melo Ferreira 1c1dd86ed7 Remove deprecated keystone::auth options
Change-Id: Id94793f682728b612e5324d28e01d6548fa53299
2016-06-03 04:36:22 +00:00
Iury Gregory Melo Ferreira 35bdf06429 Change wiki to docs
Change-Id: Ia4e2f86260e62f9426fc6d661d32f15de9ad134c
2016-06-02 23:05:48 -03:00
Emilien Macchi ad28f8e521 Prepare 9.0.0 release
First release of Newton.

Change-Id: I88336f1f552c73cfc19b8b910c279b831b926268
2016-06-02 18:41:03 -04:00
Jenkins e42fe7b004 Merge "Correction configuration due with the new parameters" 2016-05-26 14:29:34 +00:00
Alexander Arzhanov dbb86cf076 Correction configuration due with the new parameters
- vmware_api_insecure deprecated - use vmware_insecure
- vmware_datacenter_path and vmware_datastore_name
  deprecated - use vmware_datastores
- update tests

Change-Id: Ie3d544b41f0736cbaedce26e5b52558adf2f29b4
Closes-bug: #1537017
2016-05-26 15:00:37 +03:00
Alfredo Moralejo 3079b7caae Add option id to glance_image
In glance, user can specify the desired id when creating
a new image. This can be convenient for some cases where
users want predictable ids for image, as referencing ramdisk_id
or kernel_id for AMI images.

Change-Id: I7868f2005041dea6ecd63cd601e9244cefd08e5b
2016-05-25 09:26:27 +00:00
Emilien Macchi 13281189b2 Add other-requirements.txt for bindep
Bindep is a binary automation tool used in openstack-infra.  With it,
projects can better control the default packages installed into the
OS. Because we are using puppet, we actually don't want any packages
installed by default as to better test our manifests.

Change-Id: I3cb870959a8e9b009fffbc65a544aef6ed2c3b68
Co-Authored-By: Paul Belanger <>
2016-05-19 22:09:16 +00:00
Iury Gregory Melo Ferreira cf604fc6a6 Deprecate verbose option in logging
Option "verbose" from group "DEFAULT" is deprecated for removal.
The parameter has no effect.
-Deprecated verbose for logging and init
-Remove verbose in README
-Remove verbose from tests.

If this option is not set explicitly, there is no such warning

Change-Id: I7e58412fe26962337845b3cb9d67679bac0709d8
2016-05-18 01:12:46 -03:00
Carlos Camacho 283e33c00b Add support for db_max_retries param
The db_max_retries parameter regulates the number of reconnection
attempts performed after an error raised rather than at startup.

Change-Id: Ic1192deded14f9640aa02fe00f5339d3a878de70
Closes-Bug: 1579718
Co-Authored-By: Giulio Fidende <>
2016-05-12 20:40:35 +00:00
Alex Schultz 0cf9a7ae60 acceptance: ignore CLI warnings
Relax beaker CLI tests so we tolerate warnings like:
"Ignoring domain related configs because identity API version is 2.0"

The warnings are present in the images test.

Change-Id: Icffd95cea91c707c151faf44e16331217978009b
2016-05-11 12:29:42 -06:00
iberezovskiy d70f4c5434 Remove docs duplication for notification_driver
Change-Id: Ic915a855296cca9e2d74b12382bee143d0d1141b
2016-04-20 19:41:38 +03:00
Denis Egorenko af8da24358 Totally drop Qpid support
Qpid was removed in Mitaka from Oslo Messaging, so now we can
drop it in manifests.

Change-Id: I336c99b7709f061734ca09128a366361f13a934e
2016-04-18 14:15:28 +03:00
Jenkins e648bb5830 Merge "Configure oslo related parameters using puppet-oslo module" 2016-04-15 20:46:20 +00:00
Jenkins 48c2ec493a Merge "Use oslo module for messaging (rabbit) configuration" 2016-04-14 19:44:17 +00:00
iberezovskiy 558fa4d212 Configure oslo related parameters using puppet-oslo module
Database, logging and policy parameters for api, registry
and glare services are configured from oslo defines now.

Change-Id: Iee5ee3adfaf9cef1dd3f634806d47c3c52c648fb
2016-04-14 14:20:18 +03:00
Jenkins 63cbebc02e Merge "Fix the purge_config option for api and registry" 2016-04-13 10:59:58 +00:00
iberezovskiy 51c2793738 Use oslo module for messaging (rabbit) configuration
Additonal changes:

  * switch messaging related parameters to $::os_service_default
    as they are used in oslo::messaging_rabbit define
  * update unit tests
  * update docs for notify::rabbitmq class
  * drop deprecated rabbit_durable_queues parameter
  * fix notification parameters according to mitaka config file

Change-Id: Ib20c13f136a299c958d9ac064e8ad93ceb0ebd40
2016-04-13 13:29:23 +03:00
Nathan A. Taylor aa2c4c9213 Fix the purge_config option for api and registry
It appears that the resources decleration, that made purge_config work,
was accidently removed. I am adding it back so that the option will work
again. This resources decleration was setting the purge flag with a
boolean, so that inifile would handle it.
  * Adding in spec tests

Change-Id: Ib80b89932c60aeab0d252109d2e79ac0f209596b
2016-04-12 11:33:56 -06:00
Javier Pena 109cda8b24 Fix image list in glance_image provider changed the way images are listed,
by removing the '--long' parameter. This breaks when called by the
openstacklib provider, because that was the "properties" argument in
adb0b1d012/lib/puppet/provider/openstack.rb (L74)
so the command-line used '' as a last argument, causing the failure.

This will require a stable/mitaka backport.

Change-Id: I69e3cc848fbacbda01f9bd7d8a079c99b15cb5cf
2016-04-08 19:27:00 +00:00
Emilien Macchi 31c15aefd4 acceptance: drop dependency cycles tests
They bring no value in our CI, we already test a full deployment of
Glance and workflow of image upload, we don't need them.
Moreover, they make our life complicated when debbuging CI issues.

Let's drop the tests.

Change-Id: I94fa88d661dc83d4f1803ab3275ff0cfa58b6c5b
2016-04-08 15:24:42 -04:00
Jenkins 5d6e42356e Merge "Switch glance to os_service_default facts" 2016-04-07 14:11:53 +00:00
Alex Schultz e6f19c9553 Release notes for glance_image updates
Adds the release notes for the glance_image update to support managing
image properties

Change-Id: I4d5cbc5e89cd9bc8b46dd3b05a3df3125f46aa78
2016-04-06 12:12:24 -06:00
Mykyta Karpin 037545fb3e Switch glance to os_service_default facts
Change-Id: If860858e2bdfe0387b6a3260b81a97625d05b9fe
2016-04-06 18:56:34 +03:00
Jenkins ecfcaa5264 Merge "Add ability to set properties with glance_image" 2016-04-05 11:51:17 +00:00
Michael Polenchuk d0957fb622 Add ability to set properties with glance_image
This change updates the glance_image provider to support the ability to
specify properties for an image.  This change only adds the support for
setting properties. The conversion and update to using the v2 will
require further rework of this provider.

Change-Id: I22b92c5ccd0f77c837e9abe987cee07c7d90867e
Co-Authored-By: Alex Schultz <>
2016-04-04 14:57:25 -06:00
Jenkins 4923d0441c Merge "Implement ability to pass CA bundle certificate for vCenter server" 2016-04-04 13:18:20 +00:00
Igor Zinovik a1fbd1a42c Implement ability to pass CA bundle certificate for vCenter server
Glance with vsphere backend by default verifies vCenter server TLS/SSL
certificate using system truststore (e.g.
/etc/ssl/certs/ca-certificates.crt). Here is a problem with connection
to vCenter: if we consider case with default installation, then vCenter
starts with self-signed certificate which cannot be verified using linux
shipped CA bundle. Glance starts, but fails to do any useful work,
because it generates SSL errors due to inability to verify vCenter
TLS/SSL certificate.

User can provide its own CA bundle file for Glance to verify connection,
but currently puppet-glance does not support this. This patch aims to
fix this problem, it:
- introduces new optional parameter $vcenter_ca_file which undef by
  default, which means that value will not be written to glance-api.conf
- it switches default value of vmware_api_insecure to True
- provides rspec tests for changed behaviour

Change-Id: Icef5c35ad1128df465da548dd880a0dfeeadb5e1
Related-bug: #1559067
2016-04-04 07:34:25 +00:00
Dan Prince 006c32a38f Add options to set swift auth domains
We need options to be able to set the user and project domain
when using keystone v3 credentials for the swift backend. Without
these options keystone v3 swift will fail.

Change-Id: Id384b0eca750e0946b42cb8ccb60a7f9ed64d21a
2016-04-01 14:16:12 -04:00