Use glance::<service>::authtoken to configure keystone_authtoken
section in glance configs, with all parameters required
to configure keystonemiddleware.
Also changed auth_type to auth_strategy, because auth_type is
related to keystone authentication.
Change-Id: I722a1e41b2cee0b3040c37f07adfd13c33edaa5c
Closes-bug: #1604463
Glance is now using the HTTPProxyToWSGI middleware from
oslo.middlware in its default api-paste configuration [1]. This commit
gives us the ability to enable/disable that middleware.
[1] I481d88020b6e8420ce4b9072dd30ec82fe3fb4f7
Change-Id: I51fbc6050dfbdc72f7ee56a2d17dd5223a208a17
The auth_region options in the [DEFAULT] configuration section in
glance-api.conf are deprecated, and will be removed in the O release.
Change-Id: Ie50ab3371386691b72e25e1088198c05edb920b6
This adds defined anchor points for external modules to hook into the
software install, config and service dependency chain. This allows
external modules to manage software installation (virtualenv,
containers, etc) and service management (pacemaker) without needing rely
on resources that may change or be renamed.
Change-Id: If683fbd098e701a3c4da91941cf818b18b41b209
Option "verbose" from group "DEFAULT" is deprecated for removal.
The parameter has no effect.
-Deprecated verbose for logging and init
-Remove verbose in README
-Remove verbose from tests.
If this option is not set explicitly, there is no such warning
Change-Id: I7e58412fe26962337845b3cb9d67679bac0709d8
It appears that the resources decleration, that made purge_config work,
was accidently removed. I am adding it back so that the option will work
again. This resources decleration was setting the purge flag with a
boolean, so that inifile would handle it.
* Adding in spec tests
Change-Id: Ib80b89932c60aeab0d252109d2e79ac0f209596b
Add missing options to allow Glance API to connect to Glance Registry
when SSL is enabled on both services.
Also switching SSL options to os_service_default to avoid useless
conditions in manifests.
Change-Id: Ia40228fc165ef8ce1213fed7f5eec4de1c12c013
This patch removes File resources which should be delivered by packaging
tools. These resources (files, directories, modes, users, and group
attributes) could be in conflict with different OS packaging systems
which isn't a desired result.
Co-Authored-By: Ivan Berezovskiy <iberezovskiy@mirantis.com>
Closes-Bug: #1458915
Change-Id: I02fe8cc99dcd56e16ac66136a0da244a1eeb630b
This patch moves the default_store config option to the glance::api
class, and makes it possible to configure more than one store while
supplying a value for the default store to be used. If only one store
is given for glance_store/stores, the default store is automatically
set to be the same value. If multiple stores are given and no default
store is explicitly set, the config will fail and ask the user to
provide a default store.
Change-Id: I28a79ae36e673a3537ea16910d338666b65c80f7
Closes-bug: #1481460
Co-Authored-By: Alex Schultz <aschultz@mirantis.com>
This patch add support for IPv6 address in registry_host.
It adds brackets if an IPv6 is detected.
Change-Id: Ic1d75984fac7bce3d0239df54a877ae2b713c442
This review creates the glance::cache::logging class to be in feature
parity with glance::api and glance::registry.
Change-Id: Ia3f27e991b1e525ee3604502d6afc6dc7d45247c
This commit [1] introduced a weird warning that send a warning by
default.
This patch:
* sets auth_region to the default value in OpenStack using
$::os_service_default
* drops the warning
[1] Id7a6894e5bb12fc7697dfe23e5f9d4a44a719086
Change-Id: Ia5fcbb6333c3466232ac16a552f90f950313230f
Another modules already implement a <component>::db class that
is not implemented in Glance. This commit aims to apply here the same logic.
Change-Id: Icd65a3303ccd512d5e34598d3e3a78bc924f8128
Currently logging configuration is splitted in two distinct classes, the init.pp
and the logging.pp classes.
This review aims to centralize all logging related parameters in a single class,
the logging.pp one.
The impacted parameters are :
* use_syslog
* use_stderr
* log_facility
* verbose
* debug
* log_dir
* log_file
This change remains backward compatible with what is currently in place
Change-Id: Ic268104fd9bc77bc142fc635285b0459f3d4314f
In order to standardize the way dbsync are run across our modules,
we create a new class glance::db::sync.
This class will be included if sync_db is enabled.
By making this transition the glance::db::sync class
can be returned by the ENC.
A use case would be in an highly available environment, with 3 galera
nodes, include glance::registry on every node with sync_db set to false
and have the ENC return glance::db::sync just for one node.
Change-Id: I16c8bc411bd34f720513a5d4c94e82b07105af20
Currently we specify the ordering of config resources wherever it is
necessary based on the presence of the file it will write to, or the
presence of the package in charge of providing the file it will write
to.
Those kind of ordering can be specified directly at the resource level
using the autorequire mechanism. With this patch, any config resource
will make sure the package in charge of providing the file will be
installed first.
Change-Id: Idb19da25958e79787b0c66e4ae275216849a9a2e
When logging is already set up, it can be useful to disable this option
to avoid logs duplication (collected by Upstart, for example)
Change-Id: I1787191d9a512fdd3c3f79d6fadda110c5e41d54
Closes-bug: #1482564
In order to be able to take an action after all the packages of the
module have been installed/updated or all the services have been
started/restarted, we set a 'glance-package' and 'glance-service'
tag for each package and service of this module.
At the moment, there is a generic openstack tag that is not specific
enough if one wants to take action upon a single module change.
Use case :
If an action needs to be taken after all the packages have been
installed or updated : Package <| tag == 'glance-package' |> -> X
Change-Id: If43e27e80500deebf6b758b11541d3d6f50cb129
This reverts commit d302170d26.
We can unrevert this change once we are ready for kilo specific
changes.
Change-Id: I3079727c8333de3e9b4382a68fca3ef293ce2d48
This reverts commit e6e8f6a562.
Kilo deprecates these settings, but they still work. We should wait to
merge this until upstream distro packages are ready so that master is
not broken.
Change-Id: Ib05943e89969eb810527943426c566cf4a77e7ad
Due to a patch in RDO packaging, puppet-glance is broken for RHEL platforms.
This reverts commit 5f15e05704.
Change-Id: I7ba146714d1b0e8d461c556eff5a9f8c4ad9627f
Starting in Kilo, Red Hat-based platforms are using separate
glance-api and glance-registry packages (for an example, see
http://trunk.rdoproject.org/f21/current/).
Change-Id: I3ad476846d7dec3ca612e5b0d20b21b8577f4af0
Kilo oslo-messaging deprecates rabbit/kombu settings in the
DEFAULT section.
Move these settings to proper oslo_messaging_rabbit section.
Change-Id: Ica8cd70ece41f55b827f74d3f14cbc35f37ae13d
Setting up cache requires ops to be aware of how cache works in Glance
and the fact they'll need more space on disk. It can be dangerous when
using shared storage (Ceph for example).
This patch aims to default to 'keystone' without cachemanagement
anymore.
This is not backward compatible, so if the deployer is not overriding
this parameter, Glance API won't manage the cache anymore.
Change-Id: Ibac35501658b2ba79081cbc7a53245d4a4eb7839
This changes the puppet-lint requirement to 1.1.x, so that we can use
puppet-lint plugins. Most of these plugins are for 4.x compat, but some
just catch common errors.
Change-Id: I3d21236d5bf3b0b6c625e38e20492d35aaa13307
This patch adds the ability to set a new identity_uri parameter.
It also deprecates the old auth_host, auth_port, auth_protocol,
and auth_admin_prefix parameters. Logic is in place so that
users of the deprecated settings should have a smooth upgrade
process and get deprecation warnings until they adopt the
new settings.
Change-Id: Id72991da18dd1f467a7683f8f450e157da64f969
Closes-Bug: #1391235