aboutsummaryrefslogtreecommitdiff
path: root/tests/check-config.sh
AgeCommit message (Collapse)AuthorFilesLines
2024-02-15Template system scoped admin-openrc and clouds.yml filesBartosz Bezak1-0/+1
Ironic enabled secure RBAC with system scoped enforcement [1]. Some API calls, for instance 'baremetal:driver:get' needs system scope role by design [2], even with elevated access project scope service role [3]. [1] https://review.opendev.org/c/openstack/ironic/+/902009 [2] https://opendev.org/openstack/ironic/src/commit/8ec56066223301230ac0ed0f0c471a10d366b474/ironic/common/policy.py#L1349-L1357 [3] https://review.opendev.org/c/openstack/kolla-ansible/+/908007 Related-Bug: #2051837 Change-Id: Id6313d7dd343b82d4c9ccf7bf429d340ea0e93d1
2022-09-27Change clouds.yaml locationMichal Nasiadka1-0/+1
It's a followup to 73a1812c5856be635827b6c6de81b39c22346457 addressing post-merge comments. Change-Id: Idd458ad6ef29e4eee2f9e537b4eae39d26eb9f64
2021-03-02CI: Move from ceph-ansible to cephadmMichał Nasiadka1-1/+0
Change-Id: I81a4f8f8b8faa7559740531bb16d8aec7fc23f9b
2020-10-08add octavia openrc filewu.chunyang1-1/+1
we use octavia user to upload image currently, so it is better to create a octavia openrc file for user Implements: blueprint implement-automatic-deploy-of-octavia Change-Id: Ib53d00fa4a6ee59b8a0b2245f83786a6af0cbf53
2020-10-08octavia: generate certificates automaticallyMark Goddard1-0/+1
implemented as a separate command (kolla-ansible octavia-certificates) Implements: blueprint implement-automatic-deploy-of-octavia Co-Authored-By: wu.chunyang <wuchunyang@yovole.com> Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com> Change-Id: I2c5b26ce9e363f35c523865904a582f7960aa682
2020-04-09Add support for encrypting backend Keystone HAProxy trafficJames Kirsch1-0/+2
This patch introduces an optional backend encryption for Keystone service. When used in conjunction with enabling TLS for service API endpoints, network communcation will be encrypted end to end, from client through HAProxy to the Keystone service. Change-Id: I6351147ddaff8b2ae629179a9bc3bae2ebac9519 Partially-Implements: blueprint add-ssl-internal-network
2020-01-28CI: Add TLS testsgeneralfuzz1-0/+2
Add a TLS scenario in zuul to generate self signed certificates and to configure TLS to be enabled in the open stack deployment. Change-Id: If10a23dfa67212e843ef26486c9523074cc920e7 Partially-Implements: blueprint custom-cacerts
2020-01-24CI: Add Ceph-Ansible jobsMichal Nasiadka1-0/+2
* Adding zuul centos-source/ubuntu-source ceph-ansible jobs * Jobs will deploy all Ceph integrated OpenStack components, i.e. cinder, glance, nova * Will utilize core openstack testing script Depends-On: https://review.opendev.org/685032 Depends-On: https://review.opendev.org/698301 Implements: blueprint ceph-ansible Change-Id: I233082b46785f74014177f579aeac887a25b2ae2
2019-07-01CI: Use template-overrides.j2 from kollaRadosław Piliszek1-1/+2
Some kolla-ansible jobs failed due to using external mirrors instead of local ones. This was due to not using the template override provided by kolla. This patch fixes that. Depends-On: https://review.opendev.org/668226 Change-Id: I27f714fdf05e521aa8ce25c5683a452ceb35eeb8 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-04-03Check configuration file permissions in CIMark Goddard1-0/+52
Typically, non-executable files should have 660 or 600 and executable files and directories should have 770. All should be owned by the 'config_owner_user' and 'config_owner_group' variables. This change adds a script to check the owner and permissions of config files under /etc/kolla, and runs it at the end of CI jobs. Change-Id: Icdbabf36e284b9030017a0dc07b9dc81a37758ab Related-Bug: #1821579
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 15:47:57 +0000