The puppetlabs-apache module is enforcing more strict data type
validation[1].
This change updates the default values to adapt to that change.
[1] f41251e336
Closes-Bug: #1983300
Depends-on: https://review.opendev.org/851652
Change-Id: I102a35c38f100a729ccea7c955b7e015590f2500
The headers option in apache::vhost is required in some case, for
example when adding the X-XSS-Protection header. This change allows
customizing the option for the api vhost.
This change also adds support for request_headers so that both request
headers and response headers can customized.
Change-Id: I23568d804f97c804f8883b49690f77d2119c4b87
During the previous cycle, a warning message was added to inform users
of this change.
Now the default value is updated so that SSL is disabled by default.
Change-Id: Ie8c6291188c039293ad9e3d6cee6fe3bd3d7fcdb
This change removes direct reference to some classes in
puppetlabs-apache. Details are explained below.
- The api class doesn't need access to anything defined in
apache::params
- The following classes are included by the openstacklib::wsgi::apache
resource type, and current inclusions are just redundant.
Change-Id: I4f103dc90dd0cb92d94bdc5edcdb9557262ff8e0
It is provided by the Puppet class 'openstacklib::wsgi::apache'.
This change exposes it for the Nova API and metadata services.
Change-Id: Ifcc1f2c882f7b03ced18f48b54138792a41c3329
Signed-off-by: Luke Short <ekultails@gmail.com>
Due to Python's GIL [1], we can't use multiple threads for running
OpenStack services without a performance penalty, since the execution
ends up serialized, which defeats the purpose.
Instead, we should use several processes, since this approach doesn't
have this limitation.
[1] https://wiki.python.org/moin/GlobalInterpreterLock
Change-Id: I0dedcec2a7bb9983e66878e89dc651cb08939f4f
This allows the setting of the error and access file logs, as well as
the access log format. This was done in a similar fashion as one can
configure these ones in the keystone wsgi manifest.
Change-Id: I7e39baa2fefdc63d6f300cb037241846e0871eeb
Depends-On: I5e7d3588b7b3b106813d6d37b55aa812273d04d6
Add parameter to apache_wsgi to allow overwrite
and/or add additional wsgi process options.
This possibility was added to openstacklib
with Change-Id: I41914ce3361988d5db1695f09d21209772fdf548
Change-Id: I1d50ee01ebfdfaeb2ac02bc5b944f5b996cbc2db
The unit tests were broken by a change to openstacklib
Id09c3358c5843510e6a2a8c0e2d4aeb3607e098b which renamed some of the
resources in the openstacklib classes. The problem is that our tests in
this module should not have been testing what occurs within the modules
so this fix updates the tests to only check what we are doing within
this module.
Depends-On: I9d535ab38afea852559df2b3073bd4b74a2a3947
Change-Id: I3a43867c18fec07360333e876312c2d25b868b57
nova-api-wsgi is now available at /usr/bin/nova-api-wsgi in RDO
packaging so let's use it instead of relying on the python script
in /usr/share like before. UCA will be updated later when the script
is available in packaging.
Change-Id: I426bfdb9e6c852eb32d10a12e521bb8b47701c41
- Nova Placement API deployment in WSGI with Apache
by using nova::wsgi::apache_placement.
- Keystones resources support for Nova Placement API
by using nova::keystone::auth_placement.
- Allow to configure [placement] section in nova.conf by using nova::placement.
- nova::wsgi::apache is deprecated in favor of nova::wsgi::apache_api.
Notes:
- This service will be required in the future.
See docs.openstack.org/developer/nova/placement.html
- Disable testing on Ubuntu, the package is broken and not idempotent.
Change-Id: I7f9bc831005029f12d4259b411b58c0319c2a043
