Merge lp:~hopem/charms/trusty/glance/pki-token-support into lp:~openstack-charmers-archive/charms/trusty/glance/next

[Edward Hope-Morley]

[uosci-testing-bot (uosci-testing-bot)]

charm_lint_check #2135 glance-next for hopem mp250368
    LINT OK: passed

Build: http://10.245.162.77:8080/job/charm_lint_check/2135/

[uosci-testing-bot (uosci-testing-bot)]

charm_unit_test #1924 glance-next for hopem mp250368
    UNIT OK: passed

Build: http://10.245.162.77:8080/job/charm_unit_test/1924/

[uosci-testing-bot (uosci-testing-bot)]

charm_amulet_test #2043 glance-next for hopem mp250368
    AMULET OK: passed

Build: http://10.245.162.77:8080/job/charm_amulet_test/2043/

[lp:~hopem/charms/trusty/glance/pki-token-support]

101. By Edward Hope-Morley on 2015-02-24

synced /next

102. By Edward Hope-Morley on 2015-02-24

synced charm-helpers;

[uosci-testing-bot (uosci-testing-bot)]

charm_lint_check #2208 glance-next for hopem mp250368
    LINT OK: passed

Build: http://10.245.162.77:8080/job/charm_lint_check/2208/

[uosci-testing-bot (uosci-testing-bot)]

charm_unit_test #1997 glance-next for hopem mp250368
    UNIT OK: passed

Build: http://10.245.162.77:8080/job/charm_unit_test/1997/

[uosci-testing-bot (uosci-testing-bot)]

charm_amulet_test #2154 glance-next for hopem mp250368
    AMULET FAIL: amulet-test failed

AMULET Results (max last 2 lines):
  ERROR subprocess encountered error code 1
  make: *** [test] Error 1

Full amulet test output: http://paste.ubuntu.com/10396503/
Build: http://10.245.162.77:8080/job/charm_amulet_test/2154/

[Liam Young (gnuoy)]

Approve

review: Approve

=== modified file 'hooks/charmhelpers/contrib/openstack/context.py'
--- hooks/charmhelpers/contrib/openstack/context.py	2015-01-26 09:45:23 +0000
+++ hooks/charmhelpers/contrib/openstack/context.py	2015-02-24 12:38:35 +0000
@@ -279,9 +279,25 @@
 class IdentityServiceContext(OSContextGenerator):
     interfaces = ['identity-service']
 
+    def __init__(self, service=None, service_user=None):
+        self.service = service
+        self.service_user = service_user
+
     def __call__(self):
         log('Generating template context for identity-service', level=DEBUG)
         ctxt = {}
+
+        if self.service and self.service_user:
+            # This is required for pki token signing if we don't want /tmp to
+            # be used.
+            cachedir = '/var/cache/%s' % (self.service)
+            if not os.path.isdir(cachedir):
+                log("Creating service cache dir %s" % (cachedir), level=DEBUG)
+                mkdir(path=cachedir, owner=self.service_user,
+                      group=self.service_user, perms=0o700)
+
+            ctxt['signing_dir'] = cachedir
+
         for rid in relation_ids('identity-service'):
             for unit in related_units(rid):
                 rdata = relation_get(rid=rid, unit=unit)
@@ -291,15 +307,16 @@
                 auth_host = format_ipv6_addr(auth_host) or auth_host
                 svc_protocol = rdata.get('service_protocol') or 'http'
                 auth_protocol = rdata.get('auth_protocol') or 'http'
-                ctxt = {'service_port': rdata.get('service_port'),
-                        'service_host': serv_host,
-                        'auth_host': auth_host,
-                        'auth_port': rdata.get('auth_port'),
-                        'admin_tenant_name': rdata.get('service_tenant'),
-                        'admin_user': rdata.get('service_username'),
-                        'admin_password': rdata.get('service_password'),
-                        'service_protocol': svc_protocol,
-                        'auth_protocol': auth_protocol}
+                ctxt.update({'service_port': rdata.get('service_port'),
+                             'service_host': serv_host,
+                             'auth_host': auth_host,
+                             'auth_port': rdata.get('auth_port'),
+                             'admin_tenant_name': rdata.get('service_tenant'),
+                             'admin_user': rdata.get('service_username'),
+                             'admin_password': rdata.get('service_password'),
+                             'service_protocol': svc_protocol,
+                             'auth_protocol': auth_protocol})
+
                 if context_complete(ctxt):
                     # NOTE(jamespage) this is required for >= icehouse
                     # so a missing value just indicates keystone needs
@@ -1021,6 +1038,8 @@
                     for unit in related_units(rid):
                         ctxt['zmq_nonce'] = relation_get('nonce', unit, rid)
                         ctxt['zmq_host'] = relation_get('host', unit, rid)
+                        ctxt['zmq_redis_address'] = relation_get(
+                            'zmq_redis_address', unit, rid)
 
         return ctxt
 

=== added file 'hooks/charmhelpers/contrib/openstack/templates/zeromq'
--- hooks/charmhelpers/contrib/openstack/templates/zeromq	1970-01-01 00:00:00 +0000
+++ hooks/charmhelpers/contrib/openstack/templates/zeromq	2015-02-24 12:38:35 +0000
@@ -0,0 +1,14 @@
+{% if zmq_host -%}
+# ZeroMQ configuration (restart-nonce: {{ zmq_nonce }})
+rpc_backend = zmq
+rpc_zmq_host = {{ zmq_host }}
+{% if zmq_redis_address -%}
+rpc_zmq_matchmaker = oslo.messaging._drivers.matchmaker_redis.MatchMakerRedis
+matchmaker_heartbeat_freq = 15
+matchmaker_heartbeat_ttl = 30
+[matchmaker_redis]
+host = {{ zmq_redis_address }}
+{% else -%}
+rpc_zmq_matchmaker = oslo.messaging._drivers.matchmaker_ring.MatchMakerRing
+{% endif -%}
+{% endif -%}

=== modified file 'hooks/glance_utils.py'
--- hooks/glance_utils.py	2015-01-08 10:02:48 +0000
+++ hooks/glance_utils.py	2015-02-24 12:38:35 +0000
@@ -76,7 +76,9 @@
     (GLANCE_REGISTRY_CONF, {
         'hook_contexts': [context.SharedDBContext(ssl_dir=GLANCE_CONF_DIR),
                           context.PostgresqlDBContext(),
-                          context.IdentityServiceContext(),
+                          context.IdentityServiceContext(
+                              service='glance',
+                              service_user='glance'),
                           context.SyslogContext(),
                           glance_contexts.LoggingConfigContext(),
                           glance_contexts.GlanceIPv6Context(),
@@ -90,7 +92,9 @@
         'hook_contexts': [context.SharedDBContext(ssl_dir=GLANCE_CONF_DIR),
                           context.AMQPContext(ssl_dir=GLANCE_CONF_DIR),
                           context.PostgresqlDBContext(),
-                          context.IdentityServiceContext(),
+                          context.IdentityServiceContext(
+                              service='glance',
+                              service_user='glance'),
                           glance_contexts.CephGlanceContext(),
                           glance_contexts.ObjectStoreContext(),
                           glance_contexts.HAProxyContext(),

=== modified file 'templates/parts/keystone'
--- templates/parts/keystone	2014-04-12 16:16:54 +0000
+++ templates/parts/keystone	2015-02-24 12:38:35 +0000
@@ -7,6 +7,7 @@
 admin_tenant_name = {{ admin_tenant_name }}
 admin_user = {{ admin_user }}
 admin_password = {{ admin_password }}
+signing_dir = {{ signing_dir }}
 
 [paste_deploy]
 flavor = keystone