openstack/kolla-ansible
Code Issues Proposed changes
6,204 Commits 5 Branches 115 Tags
306e0cea12
Commit Graph

11 Commits

Author SHA1 Message Date
Eduardo Gonzalez
775d8019b6 Add custom policies in service.json 
Include custom policy.json files in service-api.json.j2 files

Change-Id: Ic55bfc6f61131aa72c3497ce8b2282056bcc7f92
Partially-Implements: blueprint custom-policies
 2016-12-02 16:22:17 +00:00
Jenkins
7fcff0e1f2 Merge "Fix barbican upgrade permission issue" 2016-12-02 13:17:18 +00:00
zhubingbing
af3eaa5a23 Fix barbican upgrade permission issue 
Change-Id: I08bfa65223fd42df218bfd9e81765d6f1a4e10c8
Closes-Bug: #1646008
 2016-11-30 12:43:51 +00:00
portdirect
200dbafb1c Update Barbican to use correct mysql connection string 
PyMySQL is prefered to PythonMySQL for Sqlalchemy, as it provides
python3 support and is actively maintained, and is therefore the
currently recommended lib for db connections.
 * https://wiki.openstack.org/wiki/PyMySQL_evaluation

Kolla currently uses PyMySQL for all connections bar Barbican
(which works fine with PyMySQL): once this commit is merged it will
be possible to remove the PythonMySQL libs, and mysql libs for kolla
images (except kolla-toolbox).

TrivialFix

Change-Id: Id256387134ca551a181c5e49c9b6d63f62b72523
 2016-11-17 14:27:47 +00:00
Pete Birley
51e6c102d1 Barbican: Fix race condition when starting procs simultaneously 
This fixes a race condition when starting barbican processes,
as by default they attempt to manage the db schema on startup.

TrivialFix

Change-Id: Ic168211880709a3279511ce519756e4cbdd57fe8
 2016-11-03 14:24:02 +00:00
Jenkins
5661f72f98 Merge "Remove default values from conf file" 2016-10-14 02:17:00 +00:00
liyingjun
626967c1a4 Enable keystone authentication for Barbican 
By default Barbican has not enabled the Keystone authentication:

[pipeline:barbican_api]
pipeline = cors unauthenticated-context apiapp

According to the Barbican install guide[1] this pipeline should be:

pipeline = cors authtoken context apiapp

[1]: http://docs.openstack.org/developer/barbican/setup/keystone.html

Change-Id: I941515a98772a72762b20507e100e7872f3b4ab8
Closes-bug: #1625337
 2016-10-11 17:44:17 +08:00
liyingjun
cd0336658f Fix 'Address already in use' for barbican-api 
By default barbican uwsgi is configured to listen all address on host
[1], we need to change this to the ip address of the host.

[1]:
https://github.com/openstack/barbican/blob/master/etc/barbican/vassals/barbican-api.ini

Change-Id: I4a1f9fb44ad55caf21f82c1b6d272a9743d65fd8
Closes-bug: #1632177
 2016-10-11 17:43:19 +08:00
Mauricio Lima
579dd2eb7e Remove default values from conf file 
baf5edfbf9/barbican/common/config.py (L108-L131)

TrivialFix

Change-Id: I64baf401718ee694be4651fea6c1aae7cece358c
 2016-10-06 10:15:02 -03:00
Christian Berendt
6bc976aa07 Set ownership of barbican configuration files to barbican 
Change-Id: I6fe7f0928812f816080ced76dec2659f2094276d
Closes-bug: #1625317
 2016-09-19 20:58:06 +02:00
zhubingbing
e0537385d0 Add Barbican ansible role 
Partially-Implements: blueprint barbican-ansible

Change-Id: Id6be35b1d0527d5c38d4ea8576b233ebcc404718
 2016-09-13 02:56:27 +00:00