Require absolutepath for cache cert/key file

.. to make sure these files are loaded from the expected place.

Change-Id: Ib0e2dfc7f4c0149dc02e13058037707ac4d655a2
This commit is contained in:
Takashi Kajinami 2024-10-08 00:07:09 +09:00
parent dfce4a9d13
commit ce86df8101

View File

@ -569,117 +569,117 @@
#
class horizon(
$secret_key,
$package_ensure = 'present',
Boolean $purge_conf_d_dir = false,
Optional[Integer[0]] $memoized_max_size_default = undef,
$cache_backend = 'django.core.cache.backends.locmem.LocMemCache',
Hash $cache_options = {},
$cache_timeout = undef,
$cache_server_url = undef,
$cache_server_ip = undef,
$cache_server_port = '11211',
Boolean $cache_tls_enabled = false,
$cache_tls_cafile = undef,
$cache_tls_certfile = undef,
$cache_tls_keyfile = undef,
$cache_tls_allowed_ciphers = undef,
Boolean $manage_memcache_package = true,
Array[Stdlib::HTTPUrl] $horizon_app_links = [],
Stdlib::HTTPUrl $keystone_url = 'http://127.0.0.1:5000',
$keystone_default_role = 'member',
$django_debug = false,
$site_branding = undef,
$openstack_endpoint_type = undef,
$secondary_endpoint_type = undef,
$openstack_keystone_endpoint_type = undef,
$available_regions = undef,
$api_result_limit = undef,
$api_result_page_size = undef,
$dropdown_max_items = undef,
Array[String[1]] $log_handlers = ['file'],
$log_level = 'INFO',
$django_log_level = undef,
$django_template_log_level = 'INFO',
$syslog_facility = 'local1',
Optional[Stdlib::HTTPUrl] $help_url = undef,
Optional[Stdlib::HTTPUrl] $bug_url = undef,
$local_settings_template = 'horizon/local_settings.py.erb',
Boolean $configure_apache = true,
$bind_address = undef,
$servername = $facts['networking']['fqdn'],
$server_aliases = $facts['networking']['fqdn'],
$allowed_hosts = $facts['networking']['fqdn'],
Boolean $listen_ssl = false,
$http_port = 80,
$https_port = 443,
Boolean $ssl_no_verify = false,
$openstack_ssl_cacert = '',
Boolean $ssl_redirect = true,
$ssl_cert = undef,
$ssl_key = undef,
$ssl_ca = undef,
$ssl_verify_client = undef,
$wsgi_processes = $facts['os_workers'],
$wsgi_threads = '1',
$custom_wsgi_process_options = {},
Boolean $compress_enabled = true,
Boolean $compress_offline = true,
Optional[Stdlib::Absolutepath] $compress_root = undef,
$package_ensure = 'present',
Boolean $purge_conf_d_dir = false,
Optional[Integer[0]] $memoized_max_size_default = undef,
$cache_backend = 'django.core.cache.backends.locmem.LocMemCache',
Hash $cache_options = {},
$cache_timeout = undef,
$cache_server_url = undef,
$cache_server_ip = undef,
$cache_server_port = '11211',
Boolean $cache_tls_enabled = false,
Optional[Stdlib::Absolutepath] $cache_tls_cafile = undef,
Optional[Stdlib::Absolutepath] $cache_tls_certfile = undef,
Optional[Stdlib::Absolutepath] $cache_tls_keyfile = undef,
$cache_tls_allowed_ciphers = undef,
Boolean $manage_memcache_package = true,
Array[Stdlib::HTTPUrl] $horizon_app_links = [],
Stdlib::HTTPUrl $keystone_url = 'http://127.0.0.1:5000',
$keystone_default_role = 'member',
$django_debug = false,
$site_branding = undef,
$openstack_endpoint_type = undef,
$secondary_endpoint_type = undef,
$openstack_keystone_endpoint_type = undef,
$available_regions = undef,
$api_result_limit = undef,
$api_result_page_size = undef,
$dropdown_max_items = undef,
Array[String[1]] $log_handlers = ['file'],
$log_level = 'INFO',
$django_log_level = undef,
$django_template_log_level = 'INFO',
$syslog_facility = 'local1',
Optional[Stdlib::HTTPUrl] $help_url = undef,
Optional[Stdlib::HTTPUrl] $bug_url = undef,
$local_settings_template = 'horizon/local_settings.py.erb',
Boolean $configure_apache = true,
$bind_address = undef,
$servername = $facts['networking']['fqdn'],
$server_aliases = $facts['networking']['fqdn'],
$allowed_hosts = $facts['networking']['fqdn'],
Boolean $listen_ssl = false,
$http_port = 80,
$https_port = 443,
Boolean $ssl_no_verify = false,
$openstack_ssl_cacert = '',
Boolean $ssl_redirect = true,
$ssl_cert = undef,
$ssl_key = undef,
$ssl_ca = undef,
$ssl_verify_client = undef,
$wsgi_processes = $facts['os_workers'],
$wsgi_threads = '1',
$custom_wsgi_process_options = {},
Boolean $compress_enabled = true,
Boolean $compress_offline = true,
Optional[Stdlib::Absolutepath] $compress_root = undef,
# TODO(tkajinam) Consider adding more strict validation about key-value
Hash $hypervisor_options = {},
Hash $cinder_options = {},
Hash $keystone_options = {},
Hash $neutron_options = {},
Hash $instance_options = {},
Boolean $use_simple_tenant_usage = true,
Stdlib::Absolutepath $file_upload_temp_dir = '/tmp',
Optional[Stdlib::Absolutepath] $policy_files_path = undef,
Optional[Hash[String, String]] $policy_files = undef,
$redirect_type = 'permanent',
Hash $api_versions = {},
Boolean $keystone_multidomain_support = false,
$keystone_default_domain = undef,
$keystone_domain_choices = undef,
Hash[String, Hash[String, String]] $image_backend = {},
$overview_days_range = undef,
$root_url = $::horizon::params::root_url,
Stdlib::Absolutepath $root_path = "${::horizon::params::static_path}/openstack-dashboard",
$access_log_format = undef,
$session_timeout = 3600,
$token_timeout_margin = 0,
$simultaneous_sessions = undef,
$timezone = 'UTC',
Boolean $secure_cookies = false,
$django_session_engine = undef,
$vhost_extra_params = undef,
Horizon::AvailableThemes $available_themes = undef,
Optional[String[1]] $default_theme = undef,
Array[String[1]] $authentication_plugins = [],
Enum['on', 'off'] $password_autocomplete = 'off',
$create_image_defaults = undef,
Boolean $password_retrieve = false,
Boolean $disable_password_reveal = false,
Boolean $enforce_password_check = false,
Boolean $enable_secure_proxy_ssl_header = false,
$secure_proxy_addr_header = undef,
Boolean $disallow_iframe_embed = true,
Boolean $websso_enabled = false,
$websso_initial_choice = undef,
$websso_choices = undef,
Boolean $websso_choices_hide_keystone = false,
$websso_idp_mapping = undef,
Boolean $websso_default_redirect = false,
$websso_default_redirect_protocol = undef,
$websso_default_redirect_region = undef,
$websso_default_redirect_logout = undef,
Boolean $totp_enabled = false,
$password_validator = undef,
$password_validator_help = undef,
$customization_module = undef,
$horizon_upload_mode = undef,
$default_boot_source = undef,
$system_scope_services = undef,
Boolean $show_diff = false,
Hash $hypervisor_options = {},
Hash $cinder_options = {},
Hash $keystone_options = {},
Hash $neutron_options = {},
Hash $instance_options = {},
Boolean $use_simple_tenant_usage = true,
Stdlib::Absolutepath $file_upload_temp_dir = '/tmp',
Optional[Stdlib::Absolutepath] $policy_files_path = undef,
Optional[Hash[String, String]] $policy_files = undef,
$redirect_type = 'permanent',
Hash $api_versions = {},
Boolean $keystone_multidomain_support = false,
$keystone_default_domain = undef,
$keystone_domain_choices = undef,
Hash[String, Hash[String, String]] $image_backend = {},
$overview_days_range = undef,
$root_url = $::horizon::params::root_url,
Stdlib::Absolutepath $root_path = "${::horizon::params::static_path}/openstack-dashboard",
$access_log_format = undef,
$session_timeout = 3600,
$token_timeout_margin = 0,
$simultaneous_sessions = undef,
$timezone = 'UTC',
Boolean $secure_cookies = false,
$django_session_engine = undef,
$vhost_extra_params = undef,
Horizon::AvailableThemes $available_themes = undef,
Optional[String[1]] $default_theme = undef,
Array[String[1]] $authentication_plugins = [],
Enum['on', 'off'] $password_autocomplete = 'off',
$create_image_defaults = undef,
Boolean $password_retrieve = false,
Boolean $disable_password_reveal = false,
Boolean $enforce_password_check = false,
Boolean $enable_secure_proxy_ssl_header = false,
$secure_proxy_addr_header = undef,
Boolean $disallow_iframe_embed = true,
Boolean $websso_enabled = false,
$websso_initial_choice = undef,
$websso_choices = undef,
Boolean $websso_choices_hide_keystone = false,
$websso_idp_mapping = undef,
Boolean $websso_default_redirect = false,
$websso_default_redirect_protocol = undef,
$websso_default_redirect_region = undef,
$websso_default_redirect_logout = undef,
Boolean $totp_enabled = false,
$password_validator = undef,
$password_validator_help = undef,
$customization_module = undef,
$horizon_upload_mode = undef,
$default_boot_source = undef,
$system_scope_services = undef,
Boolean $show_diff = false,
) inherits horizon::params {
include horizon::deps