vault-charm:stable/1.6

Last commit made on 2023-09-14
Get this branch:
git clone -b stable/1.6 https://git.launchpad.net/vault-charm

Branch merges

Branch information

Name:
stable/1.6
Repository:
lp:vault-charm

Recent commits

8c56593... by Robert Gildein

Improve snap channel refresh mechanism

- stop vault.service before refreshing it
- added a warning note that changing the channel config option will
  cause the vault to be sealed

Related-Bug: 2007587
Change-Id: I240ebb4bd14932a6bf95f41da3f2cd7776742266
(cherry picked from commit 9e927889d0e29de919816c315b2c6f5643f53049)

1648b97... by Felipe Reyes

Pin PyYAML<5.4.0

PyYAML fails to build with Cython, this patch pins PyYAML to the latest
version that doesn't use Cython.

Also relax the pinning of charm-tools to allow the use of maintenance
releases.

Related-Bug: #2030789
Change-Id: I0ad7427fc0f5e71ace597490bf97b72f2b8f8cfe

c68ccef... by Alex Kavanagh

Revert "Implement cert cache for vault units (v3)"

This reverts commit fd4f7dc95fdf9efb9ba9213a11d0aafc392f9371.

Reason for revert:

Reason for revert:

The bug in [1] caused all the yoga tests to fail in integration testing. Testing with a version of the charm without this commit allowed tests to complete. Thus reverting this until a more complete solution can be found to the original bug(s) [2..4]

[1] https://bugs.launchpad.net/charm-keystone/+bug/2015103
[2] LP #1940549
[3] LP #1983269
[4] LP #1845961

Change-Id: I5f07f65c4cb857d94710ab6195c8d29c8b43bc59

fd4f7dc... by Martin Kalcok

Implement cert cache for vault units (v3)

This cache is used to store certificates and keys
issued by the leader unit. Non-leader units read
these certificates and keep data in their
"tls-certificates" relations up to date.
This ensures that charm units that receive certs
from vault can read from relation data of any
vault unit and receive correct data.

This patch is mostly the same as
f55055b8783ca6f3f569209b4f82285377f5ac64
but improved to avoid LP#1983269 by breaking
down the cert cache into separate key-value pairs
for each remote unit and avoiding a race-condition
caused by get-csr action. Instead of using
leader-settings, this patch is now using
application data bag provided by a new vault-ha
relation implementation.

Co-Authored-By: Rodrigo Barbieri <email address hidden>

Change-Id: I18aa6c9193379ea454851b6f60a8f331ef88a980
Closes-Bug: #1940549
Closes-Bug: #1983269
Closes-Bug: #1845961
(cherry picked from commit 04a237660b0e1aaa8d35f7c110c8f4fa2c38621d)
(cherry picked from commit 7a8a667a68bdfb1e63a9765fb39badff52ebd694)
(cherry picked from commit acabfa31a7d6dbef20e6a3b5110141dad57cac7c)

f1f2f40... by Herve Beraud

Use unittest.mock instead of mock

The mock third party library was needed for mock support in py2
runtimes. Since we now only support py36 and later, we can use the
standard lib unittest.mock module instead.

Note that https://github.com/openstack/charms.openstack is used during tests
and he need `mock`, unfortunatelly it doesn't declare `mock` in its
requirements so it retrieve mock from other charm project (cross dependency).
So we depend on charms.openstack first and when
Ib1ed5b598a52375e29e247db9ab4786df5b6d142 will be merged then CI
will pass without errors.

Depends-On: Ib1ed5b598a52375e29e247db9ab4786df5b6d142
Change-Id: I1d7de2bd4d704ffc331fdeacea725e903890f296
(cherry picked from commit 1de27bc18f8879c4782476a8daacbdf0a1cb7077)
(cherry picked from commit 946ae6b1d2fee6cfaa8f884e01f8e9795b654dd8)

c7a5b96... by Corey Bryant

Pin tox to < 4.0.0

Tox 4.0.0 was recently released and it has several breaking changes.
We pin to < 4.0.0 here. We are planning to move forward only on the
master charm branches.

Tox is also pinned to < 4.0.0 for stable branches in upstream
openstack-zuul-jobs as well as in zosci-config. However, the
requires= section in the charm's tox.ini file ends up installing
tox>4, wiping out the zuul-pinned tox<4 that was already installed
installed. This patch fixes that.

Additional changes included in this patch:
- Add bindep.txt to install standard binary dependencies.
- Switch charm-tools to 2.8.4 to remove ruamel requirement that
  doesn't work on Python 3.10 (required for pep8/cover).
- Pin zaza and zaza-openstack-tests to stable/yoga branch as
  stable/21.10 is no longer supported.
- Pin urllib3 in test-requirements.txt for py35 unit tests

Related-Bug: #2002788
Change-Id: Ib60536bae9fa69ec9966407dd352e521528cb6f1

456401e... by Alex Kavanagh

Update charmcraft to build bionic, run bionic/focal

This updates the charmcraft.yaml to correctly build on bionic and also
run on focal so that 1.6 can be used on bionic.

Change-Id: Id826ed806d848d03d59cd32d550a5f70d0970691

ad030fd... by James Page

Switch default config to 1.6 snap track

Ensure that the intended UX matches the actual default
configuration for the vault charm by using the 1.6/stable
channel by default.

Change-Id: I2fbc88f15262610cbd249f0a054d3a0dff071b50

42ee135... by Alex Kavanagh

Update to build using charmcraft - stable/1.6

Batch to add building by charmcraft for the 1.6 branch of vault.
Tests on focal.

Change-Id: Ib94899793311d17bbe71a5b6f391827d90e4242c

b09d5aa... by Alex Kavanagh

21.10 - Release

Remove the "channel: candidate" from the func-test
bundles.

Change-Id: I0dea4ca9bdfc94dc8a2bcf8d66772fab65c27121