12 Commits

Author SHA1 Message Date
Takashi Kajinami
da45ce8a21 Replace legacy facts and use fact hash
... because the latest lint no longer allows usage of legacy facts and
top scope fact.

Change-Id: Ib395d70d0d528adfef6600f67f9cd6bb238f8206
2023-03-02 11:31:36 +09:00
Takashi Kajinami
bd92c63d41 Add Apache WSGI logging parameters for pipe/syslog
Add parameters for advanced logging configurations in Apache to
support piped logging and support for syslog (via mod_syslog
available in Apache >= 2.5.0)

Co-Authored-By: Andy Botting <andy@andybotting.com>
Change-Id: Idb3d73309588a7436cd2e067121119c5878eee18
2022-08-26 16:49:56 +09:00
Takashi Kajinami
1516806fc5 Adapt to new type validation in puppetlabs-apache
The puppetlabs-apache module is enforcing more strict data type
validation[1].

This change updates the default values to adapt to that change.

[1] f41251e336

Closes-Bug: #1983300
Depends-on: https://review.opendev.org/851652
Change-Id: I2df44be85cb73144ce45b8f5bea2ccba64d0be86
2022-08-02 16:54:29 +09:00
Takashi Kajinami
51cfa30945 Expose headers option of apache::vhost
The headers option in apache::vhost is required in some case, for
example when adding the X-XSS-Protection header. This change allows
customizing the option for the api vhost.

Change-Id: I2c527b5511db04f9daa7f605b565a567599b5431
2022-07-30 23:06:04 +09:00
Takashi Kajinami
0585656937 apache+mod_wsgi: Disable SSL by default
During the previous cycle, a warning message was added to inform users
of this change.

Now the default value is updated so that SSL is disabled by default.

Change-Id: I6bd11a340b8623b45da7284e52ee505ea6870562
2022-05-06 20:46:39 +09:00
Takashi Kajinami
a06217b838 Use native support to define RequestHeader statement
... instead of injecting it by vhost_custom_fragment.

Depends-on: https://review.opendev.org/821082
Change-Id: I684e077d03b318cef01688c1b11ea37d7fc2f664
2021-12-09 00:24:40 +09:00
Luke Short
0e85f1c7b0 Expose vhost_custom_fragment
It is provided by the Puppet class 'openstacklib::wsgi::apache'.
This change exposes it for the Heat CFN service.

Change-Id: If689eb5e896dba443358ac83cd7f566aacc276f1
Signed-off-by: Luke Short <ekultails@gmail.com>
2020-08-18 13:53:38 -04:00
ZhongShengping
8befe4fb09 Add customization for wsgi process display name
Change-Id: I952b51508d5ec6ad6d0aab7e19df14f4dcd96ba3
Closes-Bug: #1626550
2017-11-01 15:54:54 +08:00
Juan Antonio Osorio Robles
7a137e2355 apache wsgi: Exchange defaults for workers and threads
Due to Python's GIL [1], we can't use multiple threads for running
OpenStack services without a performance penalty, since the execution
ends up serialized, which defeats the purpose.

Instead, we should use several processes, since this approach doesn't
have this limitation.

[1] https://wiki.python.org/moin/GlobalInterpreterLock

Change-Id: I116df85f259528d547a958850b9c3793d01e2a45
2017-10-13 08:49:12 +03:00
Juan Antonio Osorio Robles
781c75cebc Allow setting log files for apache vhost
This allows the setting of the error and access file logs, as well as
the access log format. This was done in a similar fashion as one can
configure these ones in the keystone wsgi manifest.

Change-Id: Ic2ffef73f6a12d6225f87d285003c3deb7541126
2017-10-06 14:23:53 +03:00
Benedikt Trefzer
10a7db8463 add parameter to overwrite/add wsgi process options
Add parameter to apache_wsgi to allow overwrite and/or
add additional wsgi process options.

This possibility was added to openstacklib
with Change-Id: I41914ce3361988d5db1695f09d21209772fdf548

Change-Id: I3df74ddc4a258083ccfe4e47180f022742655ba6
2017-09-04 18:38:40 +02:00
Juan Antonio Osorio Robles
fe394add6f Add manifests to deploy APIs over httpd
This includes a resource that will generically create the vhost for
the specified API.

Co-Authored-By: Thomas Herve <therve@redhat.com>
Depends-On: I9a9246522810de546a7c460ab1133d6bf9081a15
Change-Id: I253f46f5ad943971dd9ea6995591c72a36953bdb
2017-03-02 14:15:18 +02:00