20 Commits

Author SHA1 Message Date
Christian Schwede
969babc71e Add system/project reader roles parameters
Change-Id: I34640f6245ad94d32c0a8eba46bf5ffc5e2efb81
2021-08-30 20:26:43 +09:00
Tobias Urdin
e7d670b13a Fix rspec-puppet-facts testing
Moves all spec tests over to using rspec-puppet-facts
and runs the tests for all our supported operating systems.

Change-Id: Ie2d60acac835affaf46a5276c9755640a723bca4
2018-05-19 14:17:20 +02:00
Adam Vinsh
3fb02701f3 Add reseller_admin_role config to proxy::keystone
The reseller admin role has the ability to create and delete accounts.
Set the default as undef, so that new config is not added until
a user wants to add it.

Also clean up leftover concat items from proxy spec tests.

Change-Id: I5936fe30b1cb7197bf37748f204a054b1e49e430
2016-11-03 09:34:14 -06:00
Adam Vinsh
60ed2ee79c Replace proxy concat/template with ini provider
Maintains full backward compatibility.
Use swift_proxy_config ini provider to mange proxy-server.conf.
Remove all erb templates. Move all template logic into proxy
middleware classes. To purge proxy.conf of settings that are
not specified set the new paramater "purge_config" to "true".

Change-Id: I0a143cf812043ea0f9a008a6e5c60ec87f9a4e9a
2016-10-06 10:29:04 -04:00
Christian Schwede
0bb520569b Deprecate is_admin option from Keystone mw config in Swift proxy
This option has been deprecated some time ago, and finally been removed
in Mitaka. Let's deprecate this setting in puppet-swift too; there is no
longer a reason to use it from Mitaka on. This patch makes it a noop
parameter.

See Id6bc10c3e84262c0a9e6160a76af03c0ad363e9c in Swift for reference.

Change-Id: I525f5010d56ccdd205a0f9d55db99b0f359f35c3
Co-Authored-By: Pete Zaitcev <zaitcev@redhat.com>
2016-07-21 16:59:08 +02:00
Sergii Golovatiuk
a94df7b02a Fix tests for concat 2.1.0
Depends-On: I8e3cd60fa50e04221aedf5c153c1ecb8a5bd97b5

Change-Id: I920479f9d5f0d94151c63a5fdc1445edf984a01a
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
2016-05-23 11:57:56 +02:00
Emilien Macchi
b73516aff6 Stop calling ::concat::setup
::concat::setup is a private class deprecated as a public class [1].
This patch makes sure we use concat module the right way and avoid
a warning.

[1] https://github.com/puppetlabs/puppetlabs-concat/blob/master/manifests/setup.pp#L14

Change-Id: Ib7f72f696e8704f3f4d5cff6b06dbcd981d6b395
2016-01-03 13:23:28 -05:00
Sebastien Badia
f4cfe8e8e4 spec: updates for rspec-puppet 2.x and rspec 3.x
This patch aim to update our specs test in order to work with the
rspec-puppet release 2.0.0, in the mean time, we update rspec syntax
in order to be prepared for rspec 3.x move.

In details:
  * Use shared_examples "a Puppet::Error" for puppet::error tests
  * Convert 'should' keyword to 'is_expected.to' (prepare rspec 3.x)
  * Fix spec tests for rspec-puppet 2.0.0
  * Upgrade and pin rspec-puppet from 1.0.1 to 2.0.0
  * Clean Gemfile (remove over-specificication of runtime deps of puppetlabs_spec_helper)
  * Remove un-used puppet-lint (name_containing_dash config)

Change-Id: I5488507176d4665895eef65ddb4b6f0fb4eda3e7
Card: https://trello.com/c/eHXc1Ryd/4-investigate-the-necessary-change-to-be-rspec-puppet-2-0-0-compliant
2015-03-24 15:22:16 +01:00
Michal Skalski
e6a225d79b Enlarging the scope of ssh module
Including only ssh::server::install class in init.pp give too small scope
and cause warnings about inability to look up ssh::server::ensure.

Closes-Bug: 1355873

Change-Id: I443c9f006b47c609e4a05da38b4a2124acbf886e
2014-12-03 11:11:18 +01:00
Mohammed Naser
2a845da294 Allow setting reseller_prefix for keystone filter
When using keystone, it's possible to modify the behaviour to
use a different prefix instead of the default AUTH_.

This patch allows you to be able to set that option when
declaring your class definition.

Change-Id: I11ff23d118e0f3d1792b43e1dc7a2c82c6826427
2014-09-05 18:44:13 -04:00
Chmouel Boudjnah
000d63b654 Fix auth_token configuration.
- cache=swift.cache need to be in auth_token configuration not in
  keystoneauth.
- Make auth_token using the same facility for logging than main swift.

Closes-Bug: #1254487

Change-Id: If5a09da4d18f247dc42b99e6f666bc2867d06dcb
2013-11-24 18:52:48 +01:00
Mathieu Gagné
e2e39f0ede Revert "Fix compatibility with latest puppetlabs-concat"
This fix broke everything. Lets revert it.

This reverts commit 23cc3616cea78b8431181af748a1827add18974f.

Change-Id: I9ce82c2e8f65606fbcedb4e2a4b37bc81edc5656
2013-10-29 23:13:47 -04:00
Mathieu Gagné
23cc3616ce Fix compatibility with latest puppetlabs-concat
concat::setup has been made a private class and can no longer be
included from modules outside concat itself.

concat::setup is already included by the concat define. Removing
its inclusion from puppet-swift classes shouldn't result in breakage
or loss of functionality.

Change-Id: I7566e09bd4e93aec719a495279cf92d8a898057e
Closes-bug: #1245936
2013-10-29 11:48:48 -04:00
Dan Prince
9d7ba981d1 Drop Swift requirement on keystone:python.
I believe this requirement was added to obtain support auth_token
middleware (keystone auth support). This is now provided via
keystoneclient.

Since this requirement no longer works we should drop it since
it is heavyweight to install keystone source code on all the
swift proxies.

Most packages automatically require keystoneclient as well so
we can probably ignore automatically adding this dep in here. I'm open
to doing that if we thing it worthwhile... but we'll first need to
make a keystone::client module to support it.

Change-Id: I2a85ea964d2b9e1a93c3ec0ba8de31b188c140ea
2013-04-12 08:05:00 -04:00
Dan Prince
ab00ec58e2 Update keystone fragment to use egg.
Update keystone.conf.erb to use egg:swift#keystoneauth.

This resolves issues in trying to configure keystone with the
latest Swift releases.

Change-Id: Idf160eb143150bed9a9c7081a6900c6169887be8
2013-04-11 10:03:43 -04:00
François Charlier
caad4e3732 Implement additional proxy middlewares
This commit implements additional proxy middlewares
  - catch_errors - handles errors
  - ratelimit    - limits incoming requests
  - s3token - misddleware for s3auth
  - swift3 - implement swift APIs

These middlewares needed to be modeled b/c they
are configurable interfaces that needed to be
configurable via Puppet.
2012-06-04 13:47:52 -07:00
Dan Bode
1413a9ed6e Merge pull request #24 from fcharlier/operator_roles
Fix operator_roles test after changes in 2304e863
2012-05-29 09:25:07 -07:00
François Charlier
0b397ac492 Fix operator_roles test after changes in 2304e863 2012-05-21 15:05:20 +02:00
Branan Purvine-Riley
0684d1f6cd Add concat_basedir fact to tests that validate concat fragments 2012-05-08 15:51:51 -07:00
Dan Bode
24a01d1bea Implement proxy pipline into fragments
The swift pipeline is commonly used to plug
capabilities in.

This pipeline should be implemented in a way that
is easier to extend as people desire additional
pipelines.

This commit implements classes that can be used
to configure the following pipelines:
  - proxy::cache
  - proxy::healthcheck
  - proxy::keystone
  - proxy::swauth

It also reimplements swift::proxy to utilize those
pipelines for configuration.
2012-04-22 12:11:27 -07:00