318 Commits

Author SHA1 Message Date
Iury Gregory Melo Ferreira
ddfd2150b9 Remove old authtoken options
Since we are in ocata lets remove all old parameters in api
to configure the keystone_authtoken section

Change-Id: I4dc0bd544f91fd52ad437b4c3ebbd16a43895726
2016-11-15 23:40:36 -03:00
Alex Schultz
1b123d9be5 Deprecate rabbitmq connection parameters
The rabbitmq connection parameters have been deprecated in favor of the
transport_url setting.

Change-Id: I891570dde75dc58f45e5ad6386be9e522b2706eb
Related-Bug: #1625198
2016-11-08 12:43:44 -07:00
ZhongShengping
f7daa47f54 Add test for policy
Change-Id: I6faf75e4bf352d9fde4b94376747b57a5c0222cf
2016-10-28 00:25:02 +08:00
Andrew Woodward
33f96d71ed Ensure that swiftclient is installed
It's possible for glance-api to get stuck in a loop starting when
the backend is swift, and python-swiftclient is not present on
the system.

Depends-On: I65fb0736e9fa9e68c3c7877cf6caf228c49eb82d
Change-Id: I1eeb9f12cf82961ae820067ad8fe91d096d1d6e1
Closes-bug: #1632143
2016-10-14 13:06:31 -07:00
Maksym Yatsenko
74e52d294c Change worker defaults to ::os_workers
This patch changes the default worker count from ::processorcount to the
new ::os_workers fact. ::os_workers is based on the number of processors
(currently cpu/4) but is capped at a maximum of 8 worker processors.
This is a much more reasonable default in general and prevents excessive
resource consumption on systems with a large number of CPUs.

Change-Id: I3808177027a880c88f075cdbef0aba2a56fb26bc
2016-10-07 11:53:48 +03:00
Alex Schultz
3468d0fa21 Move rspec-puppet-facts to spec helper
This change updates the module to use the rspec-puppet-facts as defined
in the puppet-openstack_spec_helper.

Change-Id: Ia38009a890b0e11fa90f7747e82fd10bd7fe1954
2016-09-30 13:18:28 -06:00
François Charlier
a2cacecd11 Add options for taskflow_executor & conversion
Add parameters to configure tasks & taskflow executor. Allows mainly to
allow enabling automatic image conversion at import using the
'conversion_format' parameter.

Change-Id: Ice376ca219ee36ddc97a8317fac20bf8f157b7db
2016-09-19 16:01:45 +02:00
Denis Egorenko
1e09e553ed Move Glance to new authtoken scheme
Use glance::<service>::authtoken to configure keystone_authtoken
section in glance configs, with all parameters required
to configure keystonemiddleware.

Also changed auth_type to auth_strategy, because auth_type is
related to keystone authentication.

Change-Id: I722a1e41b2cee0b3040c37f07adfd13c33edaa5c
Closes-bug: #1604463
2016-08-05 13:46:22 +03:00
Juan Antonio Osorio Robles
d84c42f7e2 Add option to enable Glance's SSL middleware
Glance is now using the HTTPProxyToWSGI middleware from
oslo.middlware in its default api-paste configuration [1]. This commit
gives us the ability to enable/disable that middleware.

[1] I481d88020b6e8420ce4b9072dd30ec82fe3fb4f7

Change-Id: I51fbc6050dfbdc72f7ee56a2d17dd5223a208a17
2016-07-13 12:07:40 +03:00
Jenkins
08519a992b Merge "Deprecate auth_region option for Glare" 2016-07-12 09:40:11 +00:00
Denis Egorenko
e5fedfaa30 Deprecate auth_region option for Glare
Patch Ie50ab3371386691b72e25e1088198c05edb920b6 is missed deprecation
for Glare service, so this patch fix it.

Also fix typo in release note.

Change-Id: If6292e518d1ccd7b83072c99cff1e76078753218
2016-07-11 14:32:36 +03:00
Sofer Athlan-Guyot
5a83a8d56d Include openstacklib defaults manifest.
This provides a mechanism for setting default across all modules.

Change-Id: I28c8f651f8c81de6ab2d3cb73ac67d57cad0a264
Related-Bug: 1599113
2016-07-08 08:56:03 +00:00
ZhongShengping
ef27233788 Deprecate auth_region option
The auth_region options in the [DEFAULT] configuration section in
glance-api.conf are deprecated, and will be removed in the O release.

Change-Id: Ie50ab3371386691b72e25e1088198c05edb920b6
2016-07-05 16:59:37 +08:00
Clayton O'Neill
18b010975c Add hooks for external install & svc management
This adds defined anchor points for external modules to hook into the
software install, config and service dependency chain.  This allows
external modules to manage software installation (virtualenv,
containers, etc) and service management (pacemaker) without needing rely
on resources that may change or be renamed.

Change-Id: If683fbd098e701a3c4da91941cf818b18b41b209
2016-06-17 13:17:34 +00:00
Jenkins
a2acbc7110 Merge "Switch $service_name to 'glance' for keystone" 2016-06-15 03:09:28 +00:00
Dan Prince
44bf1232a5 Switch $service_name to 'glance' for keystone
This patch switches the service name from 'Image Service' to
just 'glance' so that it matches what we do for other services.
Typically we use the project (auth) name for the service_name.

Not having a consistent catalog can cause failure to find
endpoints for some services. Mistral for example would fail
to lookup the glance endpoint due to it being set as 'Image Service'
rather than 'glance'.

Change-Id: I17116c0f995ab76ed79bd8b2df57629c1ed4e4d0
Closes-bug: #1584229
2016-06-10 19:02:21 +00:00
Emilien Macchi
f562023d2e Add nodepool-xenial.yml file
To run Beaker jobs in OpenStack Infra, we need this file so we run tests
on the right nodeset

Change-Id: Id0ccb15274e7466aca6a65b920eac564bece1105
2016-06-10 13:30:58 -04:00
Iury Gregory Melo Ferreira
1c1dd86ed7 Remove deprecated keystone::auth options
Change-Id: Id94793f682728b612e5324d28e01d6548fa53299
2016-06-03 04:36:22 +00:00
Jenkins
e42fe7b004 Merge "Correction configuration due with the new parameters" 2016-05-26 14:29:34 +00:00
Alexander Arzhanov
dbb86cf076 Correction configuration due with the new parameters
- vmware_api_insecure deprecated - use vmware_insecure
- vmware_datacenter_path and vmware_datastore_name
  deprecated - use vmware_datastores
- update tests

Change-Id: Ie3d544b41f0736cbaedce26e5b52558adf2f29b4
Closes-bug: #1537017
2016-05-26 15:00:37 +03:00
Alfredo Moralejo
3079b7caae Add option id to glance_image
In glance, user can specify the desired id when creating
a new image. This can be convenient for some cases where
users want predictable ids for image, as referencing ramdisk_id
or kernel_id for AMI images.

Change-Id: I7868f2005041dea6ecd63cd601e9244cefd08e5b
2016-05-25 09:26:27 +00:00
Iury Gregory Melo Ferreira
cf604fc6a6 Deprecate verbose option in logging
Option "verbose" from group "DEFAULT" is deprecated for removal.
The parameter has no effect.
-Deprecated verbose for logging and init
-Remove verbose in README
-Remove verbose from tests.

If this option is not set explicitly, there is no such warning

Change-Id: I7e58412fe26962337845b3cb9d67679bac0709d8
2016-05-18 01:12:46 -03:00
Carlos Camacho
283e33c00b Add support for db_max_retries param
The db_max_retries parameter regulates the number of reconnection
attempts performed after an error raised rather than at startup.

Change-Id: Ic1192deded14f9640aa02fe00f5339d3a878de70
Closes-Bug: 1579718
Co-Authored-By: Giulio Fidende <gfidente@redhat.com>
2016-05-12 20:40:35 +00:00
Alex Schultz
0cf9a7ae60 acceptance: ignore CLI warnings
Relax beaker CLI tests so we tolerate warnings like:
"Ignoring domain related configs because identity API version is 2.0"

The warnings are present in the images test.

Change-Id: Icffd95cea91c707c151faf44e16331217978009b
2016-05-11 12:29:42 -06:00
Denis Egorenko
af8da24358 Totally drop Qpid support
Qpid was removed in Mitaka from Oslo Messaging, so now we can
drop it in manifests.

Change-Id: I336c99b7709f061734ca09128a366361f13a934e
2016-04-18 14:15:28 +03:00
Jenkins
e648bb5830 Merge "Configure oslo related parameters using puppet-oslo module" 2016-04-15 20:46:20 +00:00
Jenkins
48c2ec493a Merge "Use oslo module for messaging (rabbit) configuration" 2016-04-14 19:44:17 +00:00
iberezovskiy
558fa4d212 Configure oslo related parameters using puppet-oslo module
Database, logging and policy parameters for api, registry
and glare services are configured from oslo defines now.

Change-Id: Iee5ee3adfaf9cef1dd3f634806d47c3c52c648fb
2016-04-14 14:20:18 +03:00
Jenkins
63cbebc02e Merge "Fix the purge_config option for api and registry" 2016-04-13 10:59:58 +00:00
iberezovskiy
51c2793738 Use oslo module for messaging (rabbit) configuration
Additonal changes:

  * switch messaging related parameters to $::os_service_default
    as they are used in oslo::messaging_rabbit define
  * update unit tests
  * update docs for notify::rabbitmq class
  * drop deprecated rabbit_durable_queues parameter
  * fix notification parameters according to mitaka config file

Change-Id: Ib20c13f136a299c958d9ac064e8ad93ceb0ebd40
2016-04-13 13:29:23 +03:00
Nathan A. Taylor
aa2c4c9213 Fix the purge_config option for api and registry
It appears that the resources decleration, that made purge_config work,
was accidently removed. I am adding it back so that the option will work
again. This resources decleration was setting the purge flag with a
boolean, so that inifile would handle it.
  * Adding in spec tests

Change-Id: Ib80b89932c60aeab0d252109d2e79ac0f209596b
2016-04-12 11:33:56 -06:00
Javier Pena
109cda8b24 Fix image list in glance_image provider
https://review.openstack.org/298718 changed the way images are listed,
by removing the '--long' parameter. This breaks when called by the
openstacklib provider, because that was the "properties" argument in
adb0b1d012/lib/puppet/provider/openstack.rb (L74)
so the command-line used '' as a last argument, causing the failure.

This will require a stable/mitaka backport.

Change-Id: I69e3cc848fbacbda01f9bd7d8a079c99b15cb5cf
2016-04-08 19:27:00 +00:00
Emilien Macchi
31c15aefd4 acceptance: drop dependency cycles tests
They bring no value in our CI, we already test a full deployment of
Glance and workflow of image upload, we don't need them.
Moreover, they make our life complicated when debbuging CI issues.

Let's drop the tests.

Change-Id: I94fa88d661dc83d4f1803ab3275ff0cfa58b6c5b
2016-04-08 15:24:42 -04:00
Jenkins
5d6e42356e Merge "Switch glance to os_service_default facts" 2016-04-07 14:11:53 +00:00
Mykyta Karpin
037545fb3e Switch glance to os_service_default facts
Change-Id: If860858e2bdfe0387b6a3260b81a97625d05b9fe
2016-04-06 18:56:34 +03:00
Jenkins
ecfcaa5264 Merge "Add ability to set properties with glance_image" 2016-04-05 11:51:17 +00:00
Michael Polenchuk
d0957fb622 Add ability to set properties with glance_image
This change updates the glance_image provider to support the ability to
specify properties for an image.  This change only adds the support for
setting properties. The conversion and update to using the v2 will
require further rework of this provider.

Change-Id: I22b92c5ccd0f77c837e9abe987cee07c7d90867e
Co-Authored-By: Alex Schultz <aschultz@mirantis.com>
2016-04-04 14:57:25 -06:00
Jenkins
4923d0441c Merge "Implement ability to pass CA bundle certificate for vCenter server" 2016-04-04 13:18:20 +00:00
Igor Zinovik
a1fbd1a42c Implement ability to pass CA bundle certificate for vCenter server
Glance with vsphere backend by default verifies vCenter server TLS/SSL
certificate using system truststore (e.g.
/etc/ssl/certs/ca-certificates.crt). Here is a problem with connection
to vCenter: if we consider case with default installation, then vCenter
starts with self-signed certificate which cannot be verified using linux
shipped CA bundle. Glance starts, but fails to do any useful work,
because it generates SSL errors due to inability to verify vCenter
TLS/SSL certificate.

User can provide its own CA bundle file for Glance to verify connection,
but currently puppet-glance does not support this. This patch aims to
fix this problem, it:
- introduces new optional parameter $vcenter_ca_file which undef by
  default, which means that value will not be written to glance-api.conf
- it switches default value of vmware_api_insecure to True
- provides rspec tests for changed behaviour

Change-Id: Icef5c35ad1128df465da548dd880a0dfeeadb5e1
Related-bug: #1559067
2016-04-04 07:34:25 +00:00
Dan Prince
006c32a38f Add options to set swift auth domains
We need options to be able to set the user and project domain
when using keystone v3 credentials for the swift backend. Without
these options keystone v3 swift will fail.

Change-Id: Id384b0eca750e0946b42cb8ccb60a7f9ed64d21a
2016-04-01 14:16:12 -04:00
Denis Egorenko
ea0c4d5b51 Add posibility to configure Glance backend settings for Glare service
This patch adds posibility to configure backend settings for Glare
service.

Since Glare service is experimental feature, it can be usually disabled
for deployment. Hence was added a optional parameter 'glare_enabled' for
each backend manifest. So, if Glare is enabled glance glare config
will (and should) have same backend options as main glance api config.

Change-Id: I112a332f490d2e57eef5fa7d41d465c0eb89da04
Related-bug: #1555697
2016-03-28 16:18:13 +03:00
Jenkins
3941da05fc Merge "Add missed glare_config options for glance::config class" 2016-03-24 21:19:20 +00:00
Denis Egorenko
a2fe12405e Add missed glare_config options for glance::config class
Change I3371d1d57486e79ccfae565417f2195d3ae66bc9 is introduced a new
glance service - Glare, but it missed options for glance::config

Also this patch adds tests for glance::config class

Change-Id: Ie07480562b2c0761f5218eb00b3ed3f335bd7cfb
2016-03-24 13:49:06 +03:00
Denis Egorenko
e0b34f450d Configure endpoint for Glance Glare
Change I3371d1d57486e79ccfae565417f2195d3ae66bc9 is introduced a new
glance service - Glare and it has own endpoint. This patch adds it.

Change-Id: Ibea50c249e6f0f33dbcfae4bf7cf3569f27c21e5
Related-bug: #1555697
2016-03-23 21:16:18 +03:00
Denis Egorenko
da8a3aa022 Add Glance Glare API service
In Mitaka Glance v3 was moved to stand alone service [1] - now
it's called Glance Artifacts Repository (Glare).

This patch adds appropriate service managing, package installation,
configuration and related spec tests.

[1] I5b7bd4cdcc5f2a40fc4a5f74bcc422fd700c4fb0

Change-Id: I3371d1d57486e79ccfae565417f2195d3ae66bc9
Closes-bug: #1555697
2016-03-22 18:50:29 +03:00
Xingchao
5eacf1c039 Update stores option's example value
stores and default_store option's example value has changed.
See more info in [1].

[1] http://docs.openstack.org/kilo/config-reference/content/section_glance-api.conf.html

Change-Id: I913be3415c02adbaa3b1aafe120366a097ede09d
2016-03-18 11:23:20 +08:00
Jenkins
fbf285e95d Merge "api: allow ssl communications with registry" 2016-03-10 14:35:20 +00:00
Emilien Macchi
7bf43b2b13 api: allow ssl communications with registry
Add missing options to allow Glance API to connect to Glance Registry
when SSL is enabled on both services.
Also switching SSL options to os_service_default to avoid useless
conditions in manifests.

Change-Id: Ia40228fc165ef8ce1213fed7f5eec4de1c12c013
2016-03-09 13:23:07 -05:00
Mykyta Karpin
7d1c73ba0a spec: Add Unit Tests for glance paste_ini types/providers
Change-Id: Ia6688b80f983c76db5b076eafc842bfe2be4481b
Partial-bug: #1440401
2016-03-09 14:47:48 +03:00
Jenkins
bf7765f66d Merge "Remove POSIX users, groups, and file modes." 2016-03-09 00:03:32 +00:00