bd057784d5
Add functionality to keystone to act as a certificate transfer provider. Add actions to add, remove, list CA certs to keystone. Add Certificate Transfer requires handler in ops_sunbeam. Update keystone_auth section cafile option if certificate is available in receive-ca-cert relation. Update metadata.yaml for keystone and rest of k8s charms. Change-Id: I9c800e8f8a0c9197b195331be7b445bafe794780
144 lines
4.2 KiB
Python
Executable File
144 lines
4.2 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
# Copyright 2022 Canonical Ltd.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
|
|
"""Placement Operator Charm.
|
|
|
|
This charm provide Placement services as part of an OpenStack deployment
|
|
"""
|
|
|
|
import logging
|
|
from typing import (
|
|
List,
|
|
)
|
|
|
|
import ops.pebble
|
|
import ops_sunbeam.charm as sunbeam_charm
|
|
import ops_sunbeam.container_handlers as sunbeam_chandlers
|
|
import ops_sunbeam.core as sunbeam_core
|
|
from ops.framework import (
|
|
StoredState,
|
|
)
|
|
from ops.main import (
|
|
main,
|
|
)
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class WSGIPlacementPebbleHandler(sunbeam_chandlers.WSGIPebbleHandler):
|
|
"""Placement Pebble Handler."""
|
|
|
|
def init_service(self, context: sunbeam_core.OPSCharmContexts) -> None:
|
|
"""Enable and start WSGI service."""
|
|
container = self.charm.unit.get_container(self.container_name)
|
|
try:
|
|
process = container.exec(
|
|
["a2dissite", "placement-api"], timeout=5 * 60
|
|
)
|
|
out, warnings = process.wait_output()
|
|
if warnings:
|
|
for line in warnings.splitlines():
|
|
logger.warning("a2dissite warn: %s", line.strip())
|
|
logging.debug(f"Output from a2dissite: \n{out}")
|
|
except ops.pebble.ExecError:
|
|
logger.exception("Failed to disable placement-api site in apache")
|
|
super().init_service(context)
|
|
|
|
|
|
class PlacementOperatorCharm(sunbeam_charm.OSBaseOperatorAPICharm):
|
|
"""Charm the service."""
|
|
|
|
_state = StoredState()
|
|
service_name = "placement-api"
|
|
wsgi_admin_script = "/usr/bin/placement-api"
|
|
wsgi_public_script = "/usr/bin/placement-api"
|
|
|
|
db_sync_cmds = [
|
|
["sudo", "-u", "placement", "placement-manage", "db", "sync"]
|
|
]
|
|
|
|
def get_pebble_handlers(self) -> List[sunbeam_chandlers.PebbleHandler]:
|
|
"""Pebble handlers for the service."""
|
|
return [
|
|
WSGIPlacementPebbleHandler(
|
|
self,
|
|
self.service_name,
|
|
self.service_name,
|
|
self.container_configs,
|
|
self.template_dir,
|
|
self.configure_charm,
|
|
f"wsgi-{self.service_name}",
|
|
)
|
|
]
|
|
|
|
@property
|
|
def container_configs(self) -> List[sunbeam_core.ContainerConfigFile]:
|
|
"""Container configurations for the operator."""
|
|
_cconfigs = [
|
|
sunbeam_core.ContainerConfigFile(
|
|
self.service_conf,
|
|
"root",
|
|
self.service_group,
|
|
0o640,
|
|
),
|
|
sunbeam_core.ContainerConfigFile(
|
|
"/usr/local/share/ca-certificates/ca-bundle.pem",
|
|
"root",
|
|
self.service_group,
|
|
0o640,
|
|
),
|
|
]
|
|
return _cconfigs
|
|
|
|
@property
|
|
def service_conf(self) -> str:
|
|
"""Service default configuration file."""
|
|
return "/etc/placement/placement.conf"
|
|
|
|
@property
|
|
def service_user(self) -> str:
|
|
"""Service user file and directory ownership."""
|
|
return "placement"
|
|
|
|
@property
|
|
def service_group(self) -> str:
|
|
"""Service group file and directory ownership."""
|
|
return "placement"
|
|
|
|
@property
|
|
def service_endpoints(self):
|
|
"""Service endpoints description."""
|
|
return [
|
|
{
|
|
"service_name": "placement",
|
|
"type": "placement",
|
|
"description": "OpenStack Placement API",
|
|
"internal_url": f"{self.internal_url}",
|
|
"public_url": f"{self.public_url}",
|
|
"admin_url": f"{self.admin_url}",
|
|
}
|
|
]
|
|
|
|
@property
|
|
def default_public_ingress_port(self):
|
|
"""Default ingress port."""
|
|
return 8778
|
|
|
|
|
|
if __name__ == "__main__": # pragma: no cover
|
|
main(PlacementOperatorCharm)
|