17 Commits

Author SHA1 Message Date
Takashi Kajinami
6b79034191 Reduce number of workers
This adds a few more parameters so that we spawn less processes from
each service, to reduce resource footprint in our CI.

Change-Id: I30f32b6414960c341d64282d91b8f958c8996772
2023-08-03 18:12:40 +09:00
Takashi Kajinami
20824c70d5 Enable service user token for interaction with nova/barbican
This enables usage of service user token for interaction with nova and
barbican to avoid failure caused by token expiration during operations.

This also enables service_token_roles_required option in authtoken
middleware to allow only users with the service role to use this
feature.

Change-Id: Id6b0aad7aa24af2b6d03d484ada23357828c4325
2023-05-23 16:42:34 +09:00
Takashi Kajinami
3c2a869947 Mysql: Enable SSL
Change-Id: Ia4276ef65947c36c5d3712859381bd7536018b0c
2023-03-21 01:04:47 +09:00
Takashi Kajinami
5fe9276030 ec2api: Enable ssl in api/metadata
Depends-on: https://review.opendev.org/877343
Change-Id: Ib8158a983e806c0c5a7a82a6e941074f2dc71250
2023-03-14 08:28:20 +00:00
Takashi Kajinami
2f1d35f59c Replace legacy facts and use fact hash
... because the latest lint no longer allows usage of legacy facts and
top scope fact.

Change-Id: I25d27829f66c4ee56e2755579dad21530ef09c3a
2023-03-01 13:30:01 +09:00
Zuul
310f3acb23 Merge "MySQL: Use appropriate IP version" 2023-02-27 19:42:11 +00:00
Takashi Kajinami
b123f825b6 MySQL: Use appropriate IP version
Currently we always use IPv4 for MySQL even in the test cases which are
supposed to use IPv6. This fixes that and ensures the expected ip
version is used.

Change-Id: I483f04376f29b75dcca20061ae381c7e71f26caf
2023-02-24 16:15:04 +09:00
Takashi Kajinami
16e54a52b0 Use appropriate IP version for EC2 API
Previously EC2 API is always deployed with IPv4. This fixes that and
ensure the appropriate IP version is used. This also fixes the wrong
endpoint urls (we have never enabled ssl for EC2 API).

Depends-on: https://review.opendev.org/872369
Change-Id: I9cf64609c4f2095ae0456388d3b05dd3a512b41f
2023-02-06 06:04:39 +00:00
Takashi Kajinami
241e74a08d Globally enable memcache backend for authtoken middleware
This change enables memcache backend for authtoken middleware for
all services currently supported by this module.

In-process token cache was deprecated and memcache backend is
currently recommended.

Change-Id: I3599fd0318d617641bebcc4b990698d62f364289
2022-08-31 02:16:24 +09:00
Takashi Kajinami
9c2d58221c Ubuntu: Use utf8mb3_general_ci collate in MySQL
Currently idempotency in Ubuntu is broken because of the below change
detected in collate in MySQL.

```
/Stage[main]/Keystone::Db::Mysql/Openstacklib::Db::Mysql[keystone]/
Mysql_database[keystone]/collate: collate changed 'utf8mb3_general_ci'
to 'utf8_general_ci'
```

Similarly to what we observed in the past about charset[1], it seems
MySQL in Ubuntu is automatically converting the collate value and that
is causing the "unexpected" change detected in the 2nd puppet run.

This fixes the idempotency by using utf8mb3_general_ci in Ubuntu to
avoid the mismatch caused by internal translation.

[1] 085d3569021441810c1dff7c8f4396003c690805

Change-Id: I56f31397669d3d7b08aa2e9808947141e003ab0b
2022-08-02 08:20:24 +09:00
Takashi Kajinami
085d356902 Ubuntu: Use utf8mb3 charset in MySQL
We are observing the failure in Ubuntu integration job caused by
broken idempotency. It seems current mysql/mariadb in Ubuntu replaces
utf8 with uft8mb3 automatically and this behavior results in unexpected
change in second run.

This change ensures that we use utf8mb3 in Ubuntu to avoid such
mismatch caused by internal translation. Note this change is intended
to be a quick gate fix and the charset would be updated to utf8mb4
later.

Closes-Bug: #1929073
Change-Id: I7742120758057b5a00f1d093f355fda3791f4e02
2021-08-12 10:29:05 +00:00
Takashi Kajinami
15dbc6ed79 Revert "ec2api: Use volumev3 instead of volumev2"
This reverts commit 01f74c0ba5f0fce1a715255e45534853ee45cc42.

Reason for revert:
Now ec2api uses volumev3 by default so we don't need to set
it explicitly.

Depends-on: https://review.opendev.org/768182

Change-Id: I486c6f66294529544f0f2469ce2436bad935e957
2021-01-28 01:24:50 +00:00
Takashi Kajinami
01f74c0ba5 ec2api: Use volumev3 instead of volumev2
... because volumev2 service will be removed shortly from cinder.

Change-Id: I07700ffc6a746d57eb02e6614ddc4bcfdd006e3f
2020-12-22 18:17:13 +09:00
Tobias Urdin
81687e2ead Convert all class usage to relative names
In Puppet 3 there was a need to use absolute
names to prevent issues. Since Puppet 4 everything
is absolute by default which makes this not needed.

We need to change this everywhere so that we can
revert the pin in [1] that now prevents us from
using the latest version of the puppet-lint check
puppet-lint-absolute_classname_check that properly
checks that we dont use absolute names.

[1] https://review.opendev.org/#/c/697742/

Change-Id: I78b74fbeb08be7234189e4d266412fb7fb7a73c0
2019-12-08 14:58:12 +01:00
zhubingbing
b8719a10a6 Switch to www_authenticate_uri for ec2api
puppet-ec2api switched to www_authenticate_uri in
[1], update puppet-openstack-integration for the same.

[1] https://review.openstack.org/#/c/558441/

Change-Id: I02f4bf8328bd40a00a1901beb9c55d647cf13543
2018-04-24 20:23:40 +08:00
ZhongShengping
168629622f Support Debian warning
error[1] when testing on ubuntu system.

[1]http://logs.openstack.org/51/552851/1/check/puppet-openstack-beaker-xenial/62d73e2/job-output.txt.gz#_2018-03-14_09_46_26_569462

Change-Id: Iaf66cbc4bf1aebc98edf8df6cfb7f92d2d9e7e6f
Closes-Bug: #1755953
2018-03-15 11:26:49 +08:00
Sven Anderson
34bc917b98 scenario002: Enable ec2api tempest tests
Depends-On: I2a60bde92e8522362fefebc34c99cbb0346c6347
Change-Id: Ibebf638af2bf4daf867b7d06856bdf7758de54d3
2016-10-14 18:34:43 +02:00