RETIRED, A Python library for code common to TripleO CLI and TripleO UI.
Go to file
Alex Schultz aa4825cb53 Handle redirects for blobs better
This patch adds a new function that checks if a response was a redirect
for an a request and removes the Authorization header that we usually
send if it is not one of our trusted hosts. This prevents authorization
keys from going to insecure places. This is similar logic that exists in
the moby registry code[0].

Additionally improves the cachability of blobs from docker.io because
they are redirects to files that exist on a CDN that doesn't actually
require authentication. The upstream CI registry caching system doesn't
cache any requests with the Authorization header per the apache cache
documentation[1].

[0] a072d726c7/registry/registry.go (L140-L174)
[1] https://httpd.apache.org/docs/2.4/caching.html

Change-Id: I415eec5d307ac73456aa556db9d61ceac1eaa565
Partial-Bug: #1889122
(cherry picked from commit d3af314147)
2020-08-03 13:03:59 +00:00
container-images container-images: add librados2 to gnocchi-base 2020-07-29 12:20:42 +00:00
contrib Rename contrib to container-images for packaging 2017-04-07 16:56:29 +12:00
doc/source Bump the openstackdocstheme extension to 1.20 2019-08-22 13:49:10 +08:00
healthcheck Fix nova-virtlogd container healthcheck 2020-05-28 14:13:24 +00:00
heat_docker_agent Migrate building IPA to ironic-python-agent-builder 2019-09-03 12:48:12 +02:00
image-yaml Add missing image yaml for centos 8 2020-04-02 10:58:16 +02:00
releasenotes Don't assume default tag exists in container repo 2020-07-17 11:41:18 +00:00
scripts Implement a new Container Images layout 2020-07-08 01:53:42 +00:00
tools tox: Keeping going with docs 2019-11-03 02:36:43 +08:00
tripleo_common Handle redirects for blobs better 2020-08-03 13:03:59 +00:00
undercloud_heat_plugins Add custom subclass to revert mapping 2018-03-27 12:33:24 +02:00
workbooks Remove access.yaml workbook 2020-04-29 14:36:02 +05:30
zuul.d tcib: move cradox to gnocchi-base & enable ci on scenario001 2020-07-14 01:51:49 +00:00
.coveragerc Make coverage tests work 2015-11-30 23:01:07 +00:00
.gitignore [Configuration] Remove testrepository. 2019-01-23 10:00:19 +01:00
.gitreview Update .gitreview for stable/ussuri 2020-05-26 15:04:39 +00:00
.mailmap Initial Cookiecutter Commit. 2015-04-29 13:34:49 +02:00
.pre-commit-config.yaml linters refresh w/ afferent bugfixes 2020-05-12 10:50:20 +00:00
.stestr.conf Use stestr for unit tests 2018-11-18 21:39:33 +00:00
babel.cfg Initial Cookiecutter Commit. 2015-04-29 13:34:49 +02:00
bindep.txt fix linters 2019-10-17 14:53:05 +01:00
CONTRIBUTING.rst Fix non-exiting link to TripleO-common bugs 2018-11-27 08:29:25 +01:00
HACKING.rst Update the documentation link for doc migration 2017-07-25 15:00:27 +08:00
LICENSE Initial Cookiecutter Commit. 2015-04-29 13:34:49 +02:00
lower-constraints.txt Use unittest.mock instead of third party mock 2020-05-15 18:58:43 +02:00
README.rst Replace git.openstack.org URLs with opendev.org URLs 2019-05-31 10:51:20 +08:00
requirements.txt Cleanup py27 support 2020-04-13 20:01:42 +02:00
setup.cfg Remove tripleo.deployment.overcloudrc action 2020-05-27 02:54:10 +00:00
setup.py Cleanup py27 support 2020-04-13 20:01:42 +02:00
sudoers Remove tripleo-deploy-openshift file 2019-08-22 12:38:08 +00:00
test-requirements.txt Cleanup py27 support 2020-04-13 20:01:42 +02:00
tox.ini Avoid tox-in-tox issue 2020-06-24 23:22:05 +00:00

Team and repository tags

image

tripleo-common

A common library for TripleO workflows.

Action Development

When developing new actions, you will checkout a copy of tripleo-common to an undercloud machine and add actions as needed. To test the actions they need to be installed and selected services need to be restarted. Use the following code to accomplish these tasks. :

sudo rm -Rf /usr/lib/python2.7/site-packages/tripleo_common*
sudo python setup.py install
sudo cp /usr/share/tripleo-common/sudoers /etc/sudoers.d/tripleo-common
sudo systemctl restart openstack-mistral-executor
sudo systemctl restart openstack-mistral-engine
# this loads the actions via entrypoints
sudo mistral-db-manage populate
# make sure the new actions got loaded
mistral action-list | grep tripleo

Workflow Development

When developing new workflows, you will need to reload the modified workflows, e.g the following will reload all the workflows from the default packaged location, or you can use a similar approach to replace only a single workbook while under development. :

for workbook in $(openstack workbook list -f value -c Name | grep tripleo); do
    openstack workbook delete $workbook
done
for workflow in $(openstack workflow list -f value -c Name | grep tripleo); do
    openstack workflow delete $workflow
done
for workbook in $(ls /usr/share/openstack-tripleo-common/workbooks/*); do
    openstack workbook create $workbook
done

Validations

Prerequisites

If you haven't installed the undercloud with the enable_validations set to true, you will have to prepare your undercloud to run the validations:

$ sudo pip install git+https://opendev.org/openstack/tripleo-validations
$ sudo yum install ansible
$ sudo useradd validations

Finally you need to generate an SSH keypair for the validation user and copy it to the overcloud's authorized_keys files:

$ mistral execution-create tripleo.validations.v1.copy_ssh_key

Running validations using the mistral workflow

Create a context.json file containing the arguments passed to the workflow:

{
  "validation_names": ["512e", "rabbitmq-limits"]
}

Run the tripleo.validations.v1.run_validations workflow with mistral client:

mistral execution-create tripleo.validations.v1.run_validations context.json

Running groups of validations

Create a context.json file containing the arguments passed to the workflow:

{
  "group_names": ["network", "post-deployment"]
}

Run the tripleo.validations.v1.run_groups workflow with mistral client:

mistral execution-create tripleo.validations.v1.run_groups context.json