8ab1e2d7c6
local registry uses admin's username&password for authentication. And admin's password could be changed by openstack client cmd. It will cause auth info in secrets obsolete, and lead to invalid authentication in keystone. To keep secrets info updated, keystone event notification is enabled. And event notification listener is added in sysinv. So when there is user password change, a user update event will be sent out by keystone. And sysinv will call function audit_local_registry_secrets to check whether kubernetes secret info need be updated or not. A periodic task is added also to ensure secrets are always synced, in case notification is missed or there is failure in handle notification. oslo_messaging is added to tox's requirements.txt to avoid tox failure. The version is based on global-requirements.txt from Openstack Train. Test: Pass deployment and secrets could be updated automatically with new auth info. Pass host-swact in duplex mode. Closes-Bug: 1853017 Depends-On: https://review.opendev.org/700677 Depends-On: https://review.opendev.org/699547 Change-Id: I959b65288e0834b989aa87e40506e41d0bba0d59 Signed-off-by: Shuicheng Lin <shuicheng.lin@intel.com>
48 lines
1000 B
Plaintext
48 lines
1000 B
Plaintext
pbr>=0.5
|
|
SQLAlchemy
|
|
amqplib>=0.6.1
|
|
argparse
|
|
boto3
|
|
botocore>=1.11.0
|
|
cryptography!=2.0 # BSD/Apache-2.0
|
|
eventlet==0.20.0
|
|
greenlet>=0.3.2 # MIT
|
|
keyring
|
|
kombu>=2.4.8
|
|
lxml>=2.3
|
|
WebOb>=1.7.1 # MIT
|
|
sqlalchemy-migrate>=0.7
|
|
netaddr
|
|
paramiko>=1.8.0
|
|
passlib>=1.7.0
|
|
iso8601>=0.1.4
|
|
oslo.i18n # Apache-2.0
|
|
oslo.config>=3.7.0 # Apache-2.0
|
|
oslo.concurrency>=3.7.1 # Apache-2.0
|
|
oslo.db>=4.1.0 # Apache-2.0
|
|
oslo.messaging!=9.0.0 # Apache-2.0
|
|
oslo.service>=1.10.0 # Apache-2.0
|
|
oslo.utils>=3.5.0 # Apache-2.0
|
|
oslo.serialization>=1.10.0,!=2.19.1 # Apache-2.0
|
|
pycrypto
|
|
python-cinderclient>=3.1.0 # Apache-2.0
|
|
python-glanceclient>=2.8.0 # Apache-2.0
|
|
python-keystoneclient>=3.8.0 # Apache-2.0
|
|
keystonemiddleware>=4.12.0 # Apache-2.0
|
|
stevedore>=0.10
|
|
websockify>=0.8.0 # LGPLv3
|
|
pecan>=1.0.0
|
|
retrying!=1.3.0 # Apache-2.0
|
|
six>=1.4.1
|
|
jsonpatch>=1.1
|
|
WSME>=0.5b2
|
|
pyghmi
|
|
PyYAML>=3.10
|
|
psutil
|
|
simplejson>=2.2.0 # MIT
|
|
rpm
|
|
ruamel.yaml>=0.13.14 # MIT
|
|
docker # Apache-2.0
|
|
kubernetes # Apache-2.0
|
|
Django<2,>=1.11.20 # BSD
|