1449 Commits

Author SHA1 Message Date
Zuul
1434beceb7 Merge "Install packages before ensuring container-sync-realms.conf" 2025-03-11 18:16:35 +00:00
Takashi Kajinami
7b132a881f Drop unnecessary memcached::max_memory
Because we do not deploy memcached actually we don't have to set this
tuning option.

Change-Id: I972c3d3fd596d47ef4f984df716fcf3eece9c108
2025-03-11 20:45:32 +09:00
Takashi Kajinami
5fc89ad787 Install packages before ensuring container-sync-realms.conf
... otherwise the resource may fail due to missing /etc/swift .

Also remove the swift-config-file tag which is not really used.

Change-Id: I867eb934c81c72ab729c29a4527a5c0bab20026b
2025-03-09 09:32:44 +09:00
Takashi Kajinami
fb53f21702 Fix new lint errors
Fix "WARNING: there should be a single space before '=>'" newly
detected by new puppet-lint.

Note that [ssl] enable option in an example file is removed because
the option no longer exists in keystone.

Change-Id: Ief08abd4217f661ebaa240efbbc3cdfe88e52030
2025-03-09 09:32:25 +09:00
Takashi Kajinami
fa28c1cd58 Add support for stale_worker_timeout option
... which was added during this cycle.

Depends-on: https://review.opendev.org/789035
Change-Id: I3a73d316169d0e78cf03669cd0e6d0e0595385d9
2025-02-24 19:20:57 +09:00
Takashi Kajinami
4c95be36b4 Add support for swift_owner_headers option
Change-Id: Ie0cf2206d58d1789d2e4985e0b8bf5e18a6d3e12
2025-02-24 19:20:47 +09:00
Takashi Kajinami
88d364c885 Deprecate support for [oslo_messaging_rabbit] heartbeat_in_pthread
... because the option has been deprecated.

Note that the deprecation warning may be added in puppet-oslo so is not
implemented in individual module.

Depends-on: https://review.opendev.org/925778
Change-Id: Ibab11aff6c0fede46d53fc36c93238c6138d45e0
2025-02-20 09:55:26 +09:00
Zuul
b7fbe8740c Merge "Mark puppet 8 supported" 2025-02-14 15:43:21 +00:00
Takashi Kajinami
561d1801e3 Mark puppet 8 supported
Now we test puppet 8 in CI so can declare that we support it.

Change-Id: Ice4d2fb2f1b91bb289dcb1147ef8b79b0c7e44f7
2025-02-14 22:53:42 +09:00
Takashi Kajinami
ade8b31f9a Deprecate support for expiring_objects_account_name
... because the option in swift was deprecated.

Depends-on: https://review.opendev.org/920452
Change-Id: I85c28a8ab44b12ea4df06d4e2cf577dfc2a13779
2025-02-08 17:37:44 +00:00
cafa9a6ab7 reno: Update master for unmaintained/2023.1
Update the 2023.1 release notes configuration to build from
unmaintained/2023.1.

Change-Id: Ib1d714dbe1b389d184d069bb576d5e886c616ca0
2025-01-23 16:11:30 +00:00
Takashi Kajinami
cd0dd76014 Remove swauth support
It was deprecated during zed cycle[1], because swauth was already
retired at that time.

[1] 0eda2a0a50e57d3183ef4d70ee6ce9d257d59bb3

Change-Id: I4567f6339f277c0cc2d0c3ee91671067af65a156
2025-01-15 19:10:52 +09:00
Takashi Kajinami
feec56d0c8 Fix undefined variable
Make sure that auth_type variable is always defined to avoid
PreformattedError in Puppet 8.

Change-Id: Ia8d2a850987bec95ac646ae0a7cd579c37fe08f7
2025-01-15 12:31:12 +09:00
Zuul
275d6a2ffe Merge "Use specific log name for independent daemons" 2024-10-31 15:04:59 +00:00
Zuul
18b6f051fa Merge "drive-audit: Simplify handling of log udp options" 2024-10-28 15:47:29 +00:00
Zuul
f9554393fd Merge "Support customizing log_max_line_length" 2024-10-28 15:47:28 +00:00
Zuul
260ab6af21 Merge "Support more log_address options" 2024-10-28 15:31:09 +00:00
Zuul
21f883bccf Merge "objectexpirer: Fix lack of validation of service_provider" 2024-10-28 15:31:08 +00:00
Takashi Kajinami
fbe591166c Use specific log name for independent daemons
Use specific log name for container-reconciler and object-expirer so
that operators can easily distinguish their logs from the logs
generated by the other services.

Change-Id: I918c90789ccd4fef5478ea51440ee22345986342
2024-10-27 03:18:32 +09:00
Takashi Kajinami
90dbcc1260 drive-audit: Simplify handling of log udp options
log_udp_port is ignored when log_udp_host is not set, so we don't have
to explicitly drop log_udp_port according to log_udp_host.

Change-Id: I728212bf8d52728dc5eb5aefe77ed2844a55084e
2024-10-26 20:59:21 +09:00
Takashi Kajinami
8afd4fa6d3 Support customizing log_max_line_length
Change-Id: Id7d89b82703469838bcdd71ab0b2a0e82480f971
2024-10-26 20:58:25 +09:00
Takashi Kajinami
e4941136f1 Support more log_address options
Support customizing log_address options for object-expirer and
container-reconciler for better parameter coverage.

Change-Id: I60a2fef439e2e70019d906bab33c8ea7ebe9098e
2024-10-26 18:26:28 +09:00
Takashi Kajinami
90a97dbbbc objectexpirer: Fix lack of validation of service_provider
We introduced the validation of service_provider but didn't update
the one in object-expirer manifest.

Change-Id: I921eb2b12a9ca469fb23e8dedde234e78e1854f8
2024-10-26 18:24:16 +09:00
Takashi Kajinami
84c31437c0 proxy: Support options to enable SSL
Swift has built-in feature to enable SSL for proxy-server. Add support
for the options to use this feature so that we can test deployment with
SSL enabled for swift.

Change-Id: I9dc2b1fb752b2e4bf27ce252b724ae9220053cd2
2024-10-26 13:08:15 +09:00
80db22c066 Update master for stable/2024.2
Add file to the reno documentation build to show release notes for
stable/2024.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.2.

Sem-Ver: feature
Change-Id: I9d9b8dc480a32332f873b87a166491e6ab40ab1b
2024-10-04 10:41:22 +00:00
Takashi Kajinami
430536d6c8 Prepare 2024.2 release
Change-Id: Ieff29602daafb9a436a93364ec992a2a761ee930
25.0.0
2024-10-02 10:32:42 +09:00
Zuul
9b1d41ad22 Merge "Fix missing puppet-oslo dependency" 2024-09-25 07:02:58 +00:00
Zuul
c9b7819a23 Merge "Remove unused test script" 2024-09-24 22:37:07 +00:00
Zuul
c04d12ee9e Merge "Stop manipulating SELinux state" 2024-09-24 22:23:28 +00:00
Takashi Kajinami
b09cff2f91 Fix missing puppet-oslo dependency
Since 119d8fc8190783723df81e92d540f5fa482f961b was merged,
the puppet-oslo module is required .

Change-Id: Idf9b9ccccf62519e51059078687e162de361d091
2024-09-24 23:34:03 +09:00
Zuul
d2845254bf Merge "Add validations for keystone resource parameters" 2024-09-23 18:38:56 +00:00
Takashi Kajinami
c8f1cb326c Remove unused test script
This is not actually used by any manifests.

Change-Id: Iaf80c98eeb6c7b9e636678db2f9fa51136e15487
2024-09-24 01:34:29 +09:00
Takashi Kajinami
0294685932 Stop manipulating SELinux state
... because it's now down during preparing the node[1].

Also remove the curl package which is not actually required.

[1] 69adc6a870e141d8e47313b1d3d6a6313f023ce4

Change-Id: Ia124e242a066fcb44b7d372d8a7bfd142fdde0ec
2024-09-24 01:31:51 +09:00
Takashi Kajinami
93f15aa78c Define separator explicitly in set_value call
set_value method of Puppet::Util::IniFile uses '' for separator when
called without the separator argument[1]. Set the argument explicitly
to avoid broken rendering. Note that the argument was added in
puppetlabs-inifile 2.0.0 so we don't need to bump the min version.

[1] https://github.com/puppetlabs/puppetlabs-inifile/issues/544

Closes-Bug: #2081303
Change-Id: I6112c6d12e860bd4b4030e5f784952a7358f617f
2024-09-20 13:03:37 +00:00
Takashi Kajinami
b788228cfd Add validations for keystone resource parameters
The underlying implementation already have type validations. Inherit
these and make a few adjustment so that validation failures are raised
from the external interface layer instead of the internal interface.

Change-Id: I58b05a81022ba813d6831b7a22c3d3ebdef3af2c
2024-09-18 16:07:18 +09:00
Takashi Kajinami
5b6630e97b storage: Add support for db_preallocation
Change-Id: I6f9f46b2c00e29d108d9f943b54e2205844ef973
2024-08-14 18:44:56 +09:00
Takashi Kajinami
ebc1224ee1 proxy: Adjust parameter description
Change description order to make it consistent with actual parameter
definition order. Also adjust the format and fix the wrong default
value described.

Change-Id: Ib3ce1f0b2b83627a39daa6bd46c7ecf2002f713f
2024-07-30 08:51:45 +09:00
Takashi Kajinami
1033656f6c Accept array/dict for affinity options
write_affinity and read_affinity accepts values which represent array
(for write) or hash (for read). Allow using native array or hash so
that users can manage the values passed more easily.

Change-Id: Id628cf07ec78e6239d91be3a8ab22dd4c609e348
2024-07-30 08:51:45 +09:00
Takashi Kajinami
ea34ed8ee9 Support more options to control internal request behavior
Add support for the following options to control internal requests
within the cluster.
 - timing_expiry
 - request_node_count
 - write_affinity_handoff_delete_count

Change-Id: I47d111127cf37d46988c858cb553f765a303af70
2024-07-30 08:51:41 +09:00
Takashi Kajinami
b97128abdb Require write_affinity when write_affinity_node_count is customized
This imports the logic in swift::proxy to swift::internal_client
to apply the same validation to equivalent parameters.

Change-Id: I87b2b6d936aa3d12453fd76df6394ad934b073cb
2024-07-30 01:47:24 +09:00
Takashi Kajinami
2f38c2923b Allow customizing sorting_method
Add a new option to customize sorting_method. This allows usage of
the 'timing' sorting method.

Change-Id: I9589b420b8d1c6fcbd29d83945dbdcc2da2e22ef
2024-07-30 01:47:20 +09:00
Zuul
d9eda0394f Merge "Support per-method backend ratelimit options" 2024-07-29 08:52:26 +00:00
Zuul
968faff446 Merge "Support [DEFAULT] cors_expose_headers" 2024-07-29 08:47:23 +00:00
Takashi Kajinami
4ba3863451 Support per-method backend ratelimit options
Depends-on: https://review.opendev.org/840542
Change-Id: Ia3b337e4681e03c03bd30581d278a0479df15fdd
2024-07-10 00:45:05 +09:00
Takashi Kajinami
5297605ad4 Support [DEFAULT] cors_expose_headers
... so that all options rleated to CORS can be customized.

Change-Id: If93fc6b7c16afb5e422f2e7cc6063769d9ce46fe
2024-07-10 00:39:11 +09:00
Takashi Kajinami
845404bd05 Add support for allow_open_expired
Depends-on: https://review.opendev.org/874710
Change-Id: Ie3603dd6fe7403c4268070049202b5cc4592c3f9
2024-07-09 21:45:39 +09:00
Zuul
e0cb20b506 Merge "Set appropriate ownership/permission to config files" 2024-06-27 16:00:21 +00:00
Thomas Goirand
3d72d3b0ea Support for barbican_endpoint in kms_keymaster
This patch adds support for specifying barbican_endpoint, which is
mandatory if doing a multi-region deployment with kms_keymaster.
Indeed, without it, Castellan may use the wrong endpoint of the
wrong cluster.

Depends-On: Ib7f4219ef5fdef65e9cfd5701e28b5288741783e
Change-Id: If62756770b1a3cdb4215b59aee5f368f54986706
2024-06-17 12:26:36 +09:00
Takashi Kajinami
b0e59971b8 Set appropriate ownership/permission to config files
... to avoid making any config files world readable.

Also swift processes do not need write access to these files, thus
write access can be blocked.

Closes-Bug: #2068898
Change-Id: I8b11fbdb0ea0ca814b962dd72b5c1cb4cd201c24
2024-06-11 12:03:47 +09:00
Jake Yip
7f1a945550 Add keymaster middleware
Add support for configuring swift-proxy keymaster middleware. The
keymaster middleware handles keys for swift encryption[1].

[1] https://docs.openstack.org/swift/latest/overview_encryption.html

Change-Id: Ic6c34c5381eb4f57642493b5acf127dba4f7834e
2024-06-10 02:31:21 +09:00