Berbican has been historically using own implementation with sqlalchemy
to connect to database but this causes some feature gaps with the other
services using oslo.db to generate database engine.
This replaces the own implementation by oslo.db's one so that barbican
can also leverage the features implemented in the shared library.
With this change the deprecated database options are removed, because
the deprecated options were already removed from oslo.db.
Change-Id: I10fe4ab04996885e8aff7fab8ace78a6fe7eb6e7
Since we removed certificate order, we no longer have to maintain
these logics.
This also removes the release note for deprecation of symantec
certificate plugin, which was added during this cycle, because
the plugin is also being removed by this change.
Change-Id: I8e901024677e889d05ad8653389fb46487bc7745
Currently Barbican is not using the periodic_task framework implemented
in oslo_service but implements its own mechanism based on the lower-
level thread group.
Change-Id: Idc69d61e07826923f3227aad6249252c3f739362
Barbican does not provide wsgi server based on oslo.service library,
thus these options are not used.
Change-Id: I74c67b61796bcc7e5418144b10134e6171b1777f
This ensures the options for oslo.versionedobjects library are
included in the file generated by oslo-config-generator.
Change-Id: I330b0bff32538bf22094257ecff5494af6d8e3d2
The default api-paste.ini file maintained in the Barbican repo provides
a pipeline with the audit middleware. This change adds the option for
the middleware to the barbican.conf file generated by generator, so
that users can find the related options easily.
Depends-on: https://review.opendev.org/804316
Change-Id: I9f3ee9968f7558498c6fdb31d9103750ec248446
The options used by service launchers in the oslo.service library were
missing from barbican.conf. This change ensures that these parameters
are picked up by oslo-config-generator.
Change-Id: Ib90fee2d09eec2d6e2755a7d56ec46c9c0154bcc
This change ensures the options of the healthcheck middleware, which is
enabled in api pipeline since [1] was merged, are included in
barbican.conf generated by the oslo-config-generator command.
[1] 3fc072d986f141b7153e4cd4543028f665f04ad0
Change-Id: I95418a2413591f326148fb1ab0954ada8941bfb1
dogtag configurations have been moved to "plugin/dogtag_config_opts.py",
also remove non-existent entry point when generating barbican.conf
Closes-bug: #1704320
Change-Id: I9dd202d82797cb70051323fe949cc66f8a050022
This patch adds the basic framework for registering and using
default policy rules. Rules should be defined and returned from
a module in barbican/common/policies/, and then added to the
list in barbican/common/policies/__init__.py.
Also adds tox env to generate policy sample file.
Change-Id: If25b17ae7eed3f1a8e8e6f29701552a39d5a603f
Currently etc/barbican/barbican.conf is maintained by hand and can not
be regenerated based on the config settings defined in the code.
A common pattern for OpenStack projects is to use oslo-config-generator
for that task.
Co-Authored-By: Randall Burt <randall.burt@rackspace.com>
Depends-On: I90870dcb49cd96f6bf0fe353fa6e779ffd87a5af
Closes-Bug: #1584789
Change-Id: I5f3dcd2fc982f1178ef7dd662c24d3166f91b266