openstack/kolla.git/docker/keystone/extend_start.sh, branch master

Add dockerfiles for keystone fernet

2016-08-25T10:13:02+00:00

This adds the docker aspects of fernet key bootstrapping as well as distributed key rotation. - Bootstrapping is handled in the same way as keystone bootstrap. - A new keystone-fernet and keystone-ssh container is created to allow the nodes to communicate with each other (taken from nova-ssh). - The keystone-fernet is a keystone container with crontab installed. This will handle key rotations through keystone-manage and trigger an rsync to push new tokens to other nodes. The Ansible component is implemented in: https://review.openstack.org/#/c/349366 Change-Id: Id610e00e8c63c7f1bc0974c0aa1b3f44c18e1019 Partially-Implements: blueprint keystone-fernet-token Partially-Implements: blueprint third-party-plugin-support

Add kolla-kubernetes bootstrap capability to Keystone

2016-06-05T16:44:34+00:00

Kolla-kubernetes requires there be an alternative way to bootstrap the container. Kolla-kubernetes needs to signal the Kubernetes API endpoint to make the cluster aware a bootstrap is in progress. Partially-implements: blueprint kolla-kubernetes-extended-dockerfiles Change-Id: Ie078017496eec81188d4c7c7916a70d1722f8aee

Change keystone log dir

2016-03-28T11:51:35+00:00

Proposed patch to change keystone and heka log dir from /var/log/kolla/apache2/ to /var/log/kolla/keystone/ Closes-Bug: #1560620 Change-Id: I70c65ceba5a301cc56880313ca86f01bd35676cb

Fix bad apache2 close

2016-03-21T18:59:50+00:00

Change-Id: Id19450a566da1bf7b824f0050e7c3e3f73581a9b Closes-Bug: #1557036

Make Heka collect Keystone logs

2016-02-19T21:49:21+00:00

Partially implements: blueprint heka Change-Id: I940143876981a04464af67aff65c09a06926701d

Move the admin account creation to register.yml

2015-12-15T15:20:53+00:00

Create the admin project, user, role and keystone service info by using ansible task rather than shell script Closes-Bug: #1526251 Change-Id: Ieee215b9de1618b3d31f3d1a766a9d0ebafdee4d

Clean up keystone httpd pid files for RPM distros

2015-11-05T11:46:14+00:00

In some cases we're seeing httpd not cleaning up properly after itself, which results in the keystone container failing to restart. This is confirmed to happen on rpm based distros, but have not had any reports on Ubuntu. Change-Id: I58b006189e700f1c851601b4f64dd0fae931103c Closes-Bug: #1489676 Co-Authored-By: Tim Potter

Fix issue with su and bad kernels

2015-10-13T15:13:55+00:00

Long story short, some kernels before 3.15 had an issue with using su in a container when the network namespace was --net=host. The gate has a 3.10 and a 3.13 kernel and has a problem with this. This changes everything to use sudo backport: liberty Partially-Implements: blueprint functional-testing-gate Change-Id: I4d79ccaa1cddffcc8393f64e7e1be2538efe33e5

Common start.sh

2015-10-06T03:30:26+00:00

The majority of the start.sh code is identical. This removes that duplicate code while still maintaining the ability to call code in a specific container. The start.sh is moved into /usr/local/bin/kolla_start in the container The extend_start.sh script is called by the kolla_start script at the location /usr/local/bin/kolla_extend_start . It always exists because we create a noop kolla_extend_start in the base directory. We override it with extend_start.sh in a specific image should we need to. Of note, the neutron-agents container is exempt from this new structure due to it being a fat container. Additionally, we fix the inconsistent permissions throughout. 644 for repo files and the scripts are set to 755 via a Docker RUN command to ensure someones local perm change won't break upstream containers. Change-Id: I7da8d19965463ad30ee522a71183e3f092e0d6ad Closes-Bug: #1501295