1434 Commits

Author SHA1 Message Date
Zuul
18b6f051fa Merge "drive-audit: Simplify handling of log udp options" 2024-10-28 15:47:29 +00:00
Zuul
f9554393fd Merge "Support customizing log_max_line_length" 2024-10-28 15:47:28 +00:00
Zuul
260ab6af21 Merge "Support more log_address options" 2024-10-28 15:31:09 +00:00
Zuul
21f883bccf Merge "objectexpirer: Fix lack of validation of service_provider" 2024-10-28 15:31:08 +00:00
Takashi Kajinami
90dbcc1260 drive-audit: Simplify handling of log udp options
log_udp_port is ignored when log_udp_host is not set, so we don't have
to explicitly drop log_udp_port according to log_udp_host.

Change-Id: I728212bf8d52728dc5eb5aefe77ed2844a55084e
2024-10-26 20:59:21 +09:00
Takashi Kajinami
8afd4fa6d3 Support customizing log_max_line_length
Change-Id: Id7d89b82703469838bcdd71ab0b2a0e82480f971
2024-10-26 20:58:25 +09:00
Takashi Kajinami
e4941136f1 Support more log_address options
Support customizing log_address options for object-expirer and
container-reconciler for better parameter coverage.

Change-Id: I60a2fef439e2e70019d906bab33c8ea7ebe9098e
2024-10-26 18:26:28 +09:00
Takashi Kajinami
90a97dbbbc objectexpirer: Fix lack of validation of service_provider
We introduced the validation of service_provider but didn't update
the one in object-expirer manifest.

Change-Id: I921eb2b12a9ca469fb23e8dedde234e78e1854f8
2024-10-26 18:24:16 +09:00
Takashi Kajinami
84c31437c0 proxy: Support options to enable SSL
Swift has built-in feature to enable SSL for proxy-server. Add support
for the options to use this feature so that we can test deployment with
SSL enabled for swift.

Change-Id: I9dc2b1fb752b2e4bf27ce252b724ae9220053cd2
2024-10-26 13:08:15 +09:00
80db22c066 Update master for stable/2024.2
Add file to the reno documentation build to show release notes for
stable/2024.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.2.

Sem-Ver: feature
Change-Id: I9d9b8dc480a32332f873b87a166491e6ab40ab1b
2024-10-04 10:41:22 +00:00
Takashi Kajinami
430536d6c8 Prepare 2024.2 release
Change-Id: Ieff29602daafb9a436a93364ec992a2a761ee930
25.0.0
2024-10-02 10:32:42 +09:00
Zuul
9b1d41ad22 Merge "Fix missing puppet-oslo dependency" 2024-09-25 07:02:58 +00:00
Zuul
c9b7819a23 Merge "Remove unused test script" 2024-09-24 22:37:07 +00:00
Zuul
c04d12ee9e Merge "Stop manipulating SELinux state" 2024-09-24 22:23:28 +00:00
Takashi Kajinami
b09cff2f91 Fix missing puppet-oslo dependency
Since 119d8fc8190783723df81e92d540f5fa482f961b was merged,
the puppet-oslo module is required .

Change-Id: Idf9b9ccccf62519e51059078687e162de361d091
2024-09-24 23:34:03 +09:00
Zuul
d2845254bf Merge "Add validations for keystone resource parameters" 2024-09-23 18:38:56 +00:00
Takashi Kajinami
c8f1cb326c Remove unused test script
This is not actually used by any manifests.

Change-Id: Iaf80c98eeb6c7b9e636678db2f9fa51136e15487
2024-09-24 01:34:29 +09:00
Takashi Kajinami
0294685932 Stop manipulating SELinux state
... because it's now down during preparing the node[1].

Also remove the curl package which is not actually required.

[1] 69adc6a870e141d8e47313b1d3d6a6313f023ce4

Change-Id: Ia124e242a066fcb44b7d372d8a7bfd142fdde0ec
2024-09-24 01:31:51 +09:00
Takashi Kajinami
93f15aa78c Define separator explicitly in set_value call
set_value method of Puppet::Util::IniFile uses '' for separator when
called without the separator argument[1]. Set the argument explicitly
to avoid broken rendering. Note that the argument was added in
puppetlabs-inifile 2.0.0 so we don't need to bump the min version.

[1] https://github.com/puppetlabs/puppetlabs-inifile/issues/544

Closes-Bug: #2081303
Change-Id: I6112c6d12e860bd4b4030e5f784952a7358f617f
2024-09-20 13:03:37 +00:00
Takashi Kajinami
b788228cfd Add validations for keystone resource parameters
The underlying implementation already have type validations. Inherit
these and make a few adjustment so that validation failures are raised
from the external interface layer instead of the internal interface.

Change-Id: I58b05a81022ba813d6831b7a22c3d3ebdef3af2c
2024-09-18 16:07:18 +09:00
Takashi Kajinami
5b6630e97b storage: Add support for db_preallocation
Change-Id: I6f9f46b2c00e29d108d9f943b54e2205844ef973
2024-08-14 18:44:56 +09:00
Takashi Kajinami
ebc1224ee1 proxy: Adjust parameter description
Change description order to make it consistent with actual parameter
definition order. Also adjust the format and fix the wrong default
value described.

Change-Id: Ib3ce1f0b2b83627a39daa6bd46c7ecf2002f713f
2024-07-30 08:51:45 +09:00
Takashi Kajinami
1033656f6c Accept array/dict for affinity options
write_affinity and read_affinity accepts values which represent array
(for write) or hash (for read). Allow using native array or hash so
that users can manage the values passed more easily.

Change-Id: Id628cf07ec78e6239d91be3a8ab22dd4c609e348
2024-07-30 08:51:45 +09:00
Takashi Kajinami
ea34ed8ee9 Support more options to control internal request behavior
Add support for the following options to control internal requests
within the cluster.
 - timing_expiry
 - request_node_count
 - write_affinity_handoff_delete_count

Change-Id: I47d111127cf37d46988c858cb553f765a303af70
2024-07-30 08:51:41 +09:00
Takashi Kajinami
b97128abdb Require write_affinity when write_affinity_node_count is customized
This imports the logic in swift::proxy to swift::internal_client
to apply the same validation to equivalent parameters.

Change-Id: I87b2b6d936aa3d12453fd76df6394ad934b073cb
2024-07-30 01:47:24 +09:00
Takashi Kajinami
2f38c2923b Allow customizing sorting_method
Add a new option to customize sorting_method. This allows usage of
the 'timing' sorting method.

Change-Id: I9589b420b8d1c6fcbd29d83945dbdcc2da2e22ef
2024-07-30 01:47:20 +09:00
Zuul
d9eda0394f Merge "Support per-method backend ratelimit options" 2024-07-29 08:52:26 +00:00
Zuul
968faff446 Merge "Support [DEFAULT] cors_expose_headers" 2024-07-29 08:47:23 +00:00
Takashi Kajinami
4ba3863451 Support per-method backend ratelimit options
Depends-on: https://review.opendev.org/840542
Change-Id: Ia3b337e4681e03c03bd30581d278a0479df15fdd
2024-07-10 00:45:05 +09:00
Takashi Kajinami
5297605ad4 Support [DEFAULT] cors_expose_headers
... so that all options rleated to CORS can be customized.

Change-Id: If93fc6b7c16afb5e422f2e7cc6063769d9ce46fe
2024-07-10 00:39:11 +09:00
Takashi Kajinami
845404bd05 Add support for allow_open_expired
Depends-on: https://review.opendev.org/874710
Change-Id: Ie3603dd6fe7403c4268070049202b5cc4592c3f9
2024-07-09 21:45:39 +09:00
Zuul
e0cb20b506 Merge "Set appropriate ownership/permission to config files" 2024-06-27 16:00:21 +00:00
Thomas Goirand
3d72d3b0ea Support for barbican_endpoint in kms_keymaster
This patch adds support for specifying barbican_endpoint, which is
mandatory if doing a multi-region deployment with kms_keymaster.
Indeed, without it, Castellan may use the wrong endpoint of the
wrong cluster.

Depends-On: Ib7f4219ef5fdef65e9cfd5701e28b5288741783e
Change-Id: If62756770b1a3cdb4215b59aee5f368f54986706
2024-06-17 12:26:36 +09:00
Takashi Kajinami
b0e59971b8 Set appropriate ownership/permission to config files
... to avoid making any config files world readable.

Also swift processes do not need write access to these files, thus
write access can be blocked.

Closes-Bug: #2068898
Change-Id: I8b11fbdb0ea0ca814b962dd72b5c1cb4cd201c24
2024-06-11 12:03:47 +09:00
Jake Yip
7f1a945550 Add keymaster middleware
Add support for configuring swift-proxy keymaster middleware. The
keymaster middleware handles keys for swift encryption[1].

[1] https://docs.openstack.org/swift/latest/overview_encryption.html

Change-Id: Ic6c34c5381eb4f57642493b5acf127dba4f7834e
2024-06-10 02:31:21 +09:00
Takashi Kajinami
140456e44a Bump upper version of puppet-memcached
Now puppet-memcached 9.0.0 is used in CI.

Depends-on: https://review.opendev.org/920219
Change-Id: I834406328cec44c8c05e093c933e30f80cbbf148
2024-05-23 23:16:48 +09:00
Zuul
2a5ec303af Merge "Ensure app/filter factory options exist" 2024-05-14 15:51:59 +00:00
Takashi Kajinami
a123fd166b Ensure app/filter factory options exist
All middleware filters and apps enabled in pipeline should have
the corresponding factory option (use = ... ) but the lines may not
exist in case the config file does not exist or is generated in advance
incompletely.

Change-Id: I714fe28547ea8308d7e82b66687ea0f24f816cda
2024-05-14 12:42:59 +09:00
Takashi Kajinami
f07105ad24 Expose log_name_per_daemon configurable
Add the log_name_per_daemon parameter to the all class so that this
parameter can be customized via the simplified definition.

Change-Id: I34989778f607db869d7acd1787682f5a8c97be5b
2024-05-13 21:45:46 +09:00
2655744dcf reno: Update master for unmaintained/zed
Update the zed release notes configuration to build from
unmaintained/zed.

Change-Id: I0159549d367587ba9a8260f8e178345082fb1216
2024-05-10 09:26:05 +00:00
Takashi Kajinami
8476a1914e Remove support for amqp1 messaging driver
The base implementation in puppet-oslo was deprecated during the 2023.2
cycle[1], so can be removed now.

[1] e174113210699b433dbae4c2c5a68bc3d269b5c3

Change-Id: I233cf0d5048db44df5c77cb509a1bca4e89555da
2024-05-08 17:14:03 +09:00
Thomas Goirand
f07444d3c4 Allow using device uuid in storage::mount
Previously, the `swift::storage::mount` allowed any type of string,
making it possible to use UUID=4aa242a4-0ab3-4037-9137-1d58c7f2b5f8 or
even 4aa242a4-0ab3-4037-9137-1d58c7f2b5f8 for example. But now, as
the device parameter is Swift::MountDevice, this cannot be done.

This patch fixes this regression.

Change-Id: I57619c628ee7a6d5e60260235fbd6d83f514be83
2024-05-02 15:48:33 +09:00
Takashi Kajinami
9ac945a2cb Add unit test of Swift::MountDevice type
Change-Id: I4486bf134e068b95c1ec71848efabd24069b186b
2024-05-02 00:47:39 +09:00
Zuul
b35d4af619 Merge "ceilometer: Require default_transport_url" 2024-04-26 05:21:36 +00:00
Zuul
e4cd48cc50 Merge "Make sure storage server config files are not world-readable" 2024-04-26 03:32:23 +00:00
Takashi Kajinami
bca2639e5b ceilometer: Require default_transport_url
The default_transport_url parameter should be configured appropriately
so that the ceilometer middleware can send notifications.

Change-Id: I4fb26670668073619ad3629ea47194ddc33981f0
2024-04-26 09:59:08 +09:00
Zuul
bba25b4a95 Merge "ceilometer: Fix wrong rendering of ignore_projects" 2024-04-25 17:06:58 +00:00
Zuul
f2ee4500cd Merge "ceilometer: Use dedicated config file for oslo.messaging options" 2024-04-25 15:37:22 +00:00
Zuul
b5905818ca Merge "Remove config_file_path" 2024-04-25 15:37:21 +00:00
Zuul
1347526af1 Merge "Avoid deprecated config_file_path" 2024-04-25 15:24:50 +00:00