1425 Commits

Author SHA1 Message Date
80db22c066 Update master for stable/2024.2
Add file to the reno documentation build to show release notes for
stable/2024.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.2.

Sem-Ver: feature
Change-Id: I9d9b8dc480a32332f873b87a166491e6ab40ab1b
2024-10-04 10:41:22 +00:00
Takashi Kajinami
430536d6c8 Prepare 2024.2 release
Change-Id: Ieff29602daafb9a436a93364ec992a2a761ee930
25.0.0
2024-10-02 10:32:42 +09:00
Zuul
9b1d41ad22 Merge "Fix missing puppet-oslo dependency" 2024-09-25 07:02:58 +00:00
Zuul
c9b7819a23 Merge "Remove unused test script" 2024-09-24 22:37:07 +00:00
Zuul
c04d12ee9e Merge "Stop manipulating SELinux state" 2024-09-24 22:23:28 +00:00
Takashi Kajinami
b09cff2f91 Fix missing puppet-oslo dependency
Since 119d8fc8190783723df81e92d540f5fa482f961b was merged,
the puppet-oslo module is required .

Change-Id: Idf9b9ccccf62519e51059078687e162de361d091
2024-09-24 23:34:03 +09:00
Zuul
d2845254bf Merge "Add validations for keystone resource parameters" 2024-09-23 18:38:56 +00:00
Takashi Kajinami
c8f1cb326c Remove unused test script
This is not actually used by any manifests.

Change-Id: Iaf80c98eeb6c7b9e636678db2f9fa51136e15487
2024-09-24 01:34:29 +09:00
Takashi Kajinami
0294685932 Stop manipulating SELinux state
... because it's now down during preparing the node[1].

Also remove the curl package which is not actually required.

[1] 69adc6a870e141d8e47313b1d3d6a6313f023ce4

Change-Id: Ia124e242a066fcb44b7d372d8a7bfd142fdde0ec
2024-09-24 01:31:51 +09:00
Takashi Kajinami
93f15aa78c Define separator explicitly in set_value call
set_value method of Puppet::Util::IniFile uses '' for separator when
called without the separator argument[1]. Set the argument explicitly
to avoid broken rendering. Note that the argument was added in
puppetlabs-inifile 2.0.0 so we don't need to bump the min version.

[1] https://github.com/puppetlabs/puppetlabs-inifile/issues/544

Closes-Bug: #2081303
Change-Id: I6112c6d12e860bd4b4030e5f784952a7358f617f
2024-09-20 13:03:37 +00:00
Takashi Kajinami
b788228cfd Add validations for keystone resource parameters
The underlying implementation already have type validations. Inherit
these and make a few adjustment so that validation failures are raised
from the external interface layer instead of the internal interface.

Change-Id: I58b05a81022ba813d6831b7a22c3d3ebdef3af2c
2024-09-18 16:07:18 +09:00
Takashi Kajinami
5b6630e97b storage: Add support for db_preallocation
Change-Id: I6f9f46b2c00e29d108d9f943b54e2205844ef973
2024-08-14 18:44:56 +09:00
Takashi Kajinami
ebc1224ee1 proxy: Adjust parameter description
Change description order to make it consistent with actual parameter
definition order. Also adjust the format and fix the wrong default
value described.

Change-Id: Ib3ce1f0b2b83627a39daa6bd46c7ecf2002f713f
2024-07-30 08:51:45 +09:00
Takashi Kajinami
1033656f6c Accept array/dict for affinity options
write_affinity and read_affinity accepts values which represent array
(for write) or hash (for read). Allow using native array or hash so
that users can manage the values passed more easily.

Change-Id: Id628cf07ec78e6239d91be3a8ab22dd4c609e348
2024-07-30 08:51:45 +09:00
Takashi Kajinami
ea34ed8ee9 Support more options to control internal request behavior
Add support for the following options to control internal requests
within the cluster.
 - timing_expiry
 - request_node_count
 - write_affinity_handoff_delete_count

Change-Id: I47d111127cf37d46988c858cb553f765a303af70
2024-07-30 08:51:41 +09:00
Takashi Kajinami
b97128abdb Require write_affinity when write_affinity_node_count is customized
This imports the logic in swift::proxy to swift::internal_client
to apply the same validation to equivalent parameters.

Change-Id: I87b2b6d936aa3d12453fd76df6394ad934b073cb
2024-07-30 01:47:24 +09:00
Takashi Kajinami
2f38c2923b Allow customizing sorting_method
Add a new option to customize sorting_method. This allows usage of
the 'timing' sorting method.

Change-Id: I9589b420b8d1c6fcbd29d83945dbdcc2da2e22ef
2024-07-30 01:47:20 +09:00
Zuul
d9eda0394f Merge "Support per-method backend ratelimit options" 2024-07-29 08:52:26 +00:00
Zuul
968faff446 Merge "Support [DEFAULT] cors_expose_headers" 2024-07-29 08:47:23 +00:00
Takashi Kajinami
4ba3863451 Support per-method backend ratelimit options
Depends-on: https://review.opendev.org/840542
Change-Id: Ia3b337e4681e03c03bd30581d278a0479df15fdd
2024-07-10 00:45:05 +09:00
Takashi Kajinami
5297605ad4 Support [DEFAULT] cors_expose_headers
... so that all options rleated to CORS can be customized.

Change-Id: If93fc6b7c16afb5e422f2e7cc6063769d9ce46fe
2024-07-10 00:39:11 +09:00
Takashi Kajinami
845404bd05 Add support for allow_open_expired
Depends-on: https://review.opendev.org/874710
Change-Id: Ie3603dd6fe7403c4268070049202b5cc4592c3f9
2024-07-09 21:45:39 +09:00
Zuul
e0cb20b506 Merge "Set appropriate ownership/permission to config files" 2024-06-27 16:00:21 +00:00
Thomas Goirand
3d72d3b0ea Support for barbican_endpoint in kms_keymaster
This patch adds support for specifying barbican_endpoint, which is
mandatory if doing a multi-region deployment with kms_keymaster.
Indeed, without it, Castellan may use the wrong endpoint of the
wrong cluster.

Depends-On: Ib7f4219ef5fdef65e9cfd5701e28b5288741783e
Change-Id: If62756770b1a3cdb4215b59aee5f368f54986706
2024-06-17 12:26:36 +09:00
Takashi Kajinami
b0e59971b8 Set appropriate ownership/permission to config files
... to avoid making any config files world readable.

Also swift processes do not need write access to these files, thus
write access can be blocked.

Closes-Bug: #2068898
Change-Id: I8b11fbdb0ea0ca814b962dd72b5c1cb4cd201c24
2024-06-11 12:03:47 +09:00
Jake Yip
7f1a945550 Add keymaster middleware
Add support for configuring swift-proxy keymaster middleware. The
keymaster middleware handles keys for swift encryption[1].

[1] https://docs.openstack.org/swift/latest/overview_encryption.html

Change-Id: Ic6c34c5381eb4f57642493b5acf127dba4f7834e
2024-06-10 02:31:21 +09:00
Takashi Kajinami
140456e44a Bump upper version of puppet-memcached
Now puppet-memcached 9.0.0 is used in CI.

Depends-on: https://review.opendev.org/920219
Change-Id: I834406328cec44c8c05e093c933e30f80cbbf148
2024-05-23 23:16:48 +09:00
Zuul
2a5ec303af Merge "Ensure app/filter factory options exist" 2024-05-14 15:51:59 +00:00
Takashi Kajinami
a123fd166b Ensure app/filter factory options exist
All middleware filters and apps enabled in pipeline should have
the corresponding factory option (use = ... ) but the lines may not
exist in case the config file does not exist or is generated in advance
incompletely.

Change-Id: I714fe28547ea8308d7e82b66687ea0f24f816cda
2024-05-14 12:42:59 +09:00
Takashi Kajinami
f07105ad24 Expose log_name_per_daemon configurable
Add the log_name_per_daemon parameter to the all class so that this
parameter can be customized via the simplified definition.

Change-Id: I34989778f607db869d7acd1787682f5a8c97be5b
2024-05-13 21:45:46 +09:00
2655744dcf reno: Update master for unmaintained/zed
Update the zed release notes configuration to build from
unmaintained/zed.

Change-Id: I0159549d367587ba9a8260f8e178345082fb1216
2024-05-10 09:26:05 +00:00
Takashi Kajinami
8476a1914e Remove support for amqp1 messaging driver
The base implementation in puppet-oslo was deprecated during the 2023.2
cycle[1], so can be removed now.

[1] e174113210699b433dbae4c2c5a68bc3d269b5c3

Change-Id: I233cf0d5048db44df5c77cb509a1bca4e89555da
2024-05-08 17:14:03 +09:00
Thomas Goirand
f07444d3c4 Allow using device uuid in storage::mount
Previously, the `swift::storage::mount` allowed any type of string,
making it possible to use UUID=4aa242a4-0ab3-4037-9137-1d58c7f2b5f8 or
even 4aa242a4-0ab3-4037-9137-1d58c7f2b5f8 for example. But now, as
the device parameter is Swift::MountDevice, this cannot be done.

This patch fixes this regression.

Change-Id: I57619c628ee7a6d5e60260235fbd6d83f514be83
2024-05-02 15:48:33 +09:00
Takashi Kajinami
9ac945a2cb Add unit test of Swift::MountDevice type
Change-Id: I4486bf134e068b95c1ec71848efabd24069b186b
2024-05-02 00:47:39 +09:00
Zuul
b35d4af619 Merge "ceilometer: Require default_transport_url" 2024-04-26 05:21:36 +00:00
Zuul
e4cd48cc50 Merge "Make sure storage server config files are not world-readable" 2024-04-26 03:32:23 +00:00
Takashi Kajinami
bca2639e5b ceilometer: Require default_transport_url
The default_transport_url parameter should be configured appropriately
so that the ceilometer middleware can send notifications.

Change-Id: I4fb26670668073619ad3629ea47194ddc33981f0
2024-04-26 09:59:08 +09:00
Zuul
bba25b4a95 Merge "ceilometer: Fix wrong rendering of ignore_projects" 2024-04-25 17:06:58 +00:00
Zuul
f2ee4500cd Merge "ceilometer: Use dedicated config file for oslo.messaging options" 2024-04-25 15:37:22 +00:00
Zuul
b5905818ca Merge "Remove config_file_path" 2024-04-25 15:37:21 +00:00
Zuul
1347526af1 Merge "Avoid deprecated config_file_path" 2024-04-25 15:24:50 +00:00
Zuul
217144a91b Merge "proxy: Support keepalive_timeout" 2024-04-25 15:24:48 +00:00
Takashi Kajinami
003f4fe6ea Make sure storage server config files are not world-readable
... instead of vaguely rely on the umask.

Change-Id: I685888c8368cea53c225c103c62e5147db2ee28b
2024-04-24 00:53:55 +09:00
Takashi Kajinami
e751dda37b ceilometer: Fix wrong rendering of ignore_projects
The ignore_projects option is not a multi-valued option but accepts
only comma-separated strings.

Change-Id: I7977ea4c84417078457afb0d0834934ba5481e5d
2024-04-23 09:55:07 +09:00
Takashi Kajinami
119d8fc819 ceilometer: Use dedicated config file for oslo.messaging options
The mechanism to load additional config files for oslo.messaging option
was introduced to ceilometermiddleware. Use this mechanism to inject
oslo.messaging options so that we can customize behavior of the library
like use_ssl.

Depends-on: https://review.opendev.org/904328
Change-Id: I5a82a52ddea610b4dda6658378d78a6cf13e3bb2
2024-04-23 01:18:01 +09:00
Takashi Kajinami
e701669ba9 Remove config_file_path
This parameter was deprecated during the previous cycle[1] and has had
no effect.

[1] bb656e5ee8ceb8bc32889cfe1abe836b99386105

Change-Id: I6fd0ddaa526b8abdc5f48ce6586435c845af17be
2024-04-20 17:46:30 +09:00
Takashi Kajinami
f5be5ea566 Avoid deprecated config_file_path
This parameter was deprecated[1] and has no effect.

[1] bb656e5ee8ceb8bc32889cfe1abe836b99386105

Change-Id: I8f18e65ea9466a9033084bc5bd3e91c520bccb6e
2024-04-20 17:46:30 +09:00
Takashi Kajinami
d9f986eb0a proxy: Support keepalive_timeout
... which was added in 2.32.0.

Depends-on: https://review.opendev.org/873744
Change-Id: I32711cc8c3d354c395439cb8d83daa9b4393dd39
2024-04-19 10:27:49 +09:00
9c66538fec Update master for stable/2024.1
Add file to the reno documentation build to show release notes for
stable/2024.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.1.

Sem-Ver: feature
Change-Id: I12fb060c4b957a869b9462374519485f29fb9ec8
2024-04-18 10:50:31 +00:00
Takashi Kajinami
3af1a20fe0 Prepare 2024.1 release
Change-Id: Ifb4ab6f5f8e7faa5f5d8306a6823e2de36cca9e3
24.0.0
2024-04-15 22:34:42 +09:00