12 Commits

Author SHA1 Message Date
Takashi Kajinami
2d405a8bfd Use oslo.db to generate db engine
Berbican has been historically using own implementation with sqlalchemy
to connect to database but this causes some feature gaps with the other
services using oslo.db to generate database engine.

This replaces the own implementation by oslo.db's one so that barbican
can also leverage the features implemented in the shared library.

With this change the deprecated database options are removed, because
the deprecated options were already removed from oslo.db.

Change-Id: I10fe4ab04996885e8aff7fab8ace78a6fe7eb6e7
2024-04-12 13:19:40 +09:00
Takashi Kajinami
9833751613 Drop all remaining logics for certificate resources
Since we removed certificate order, we no longer have to maintain
these logics.

This also removes the release note for deprecation of symantec
certificate plugin, which was added during this cycle, because
the plugin is also being removed by this change.

Change-Id: I8e901024677e889d05ad8653389fb46487bc7745
2024-02-27 23:33:47 +09:00
Takashi Kajinami
73de2e8c35 Get rid of unused periodic_task
Currently Barbican is not using the periodic_task framework implemented
in oslo_service but implements its own mechanism based on the lower-
level thread group.

Change-Id: Idc69d61e07826923f3227aad6249252c3f739362
2023-12-16 01:35:44 +09:00
Takashi Kajinami
6acb4f8d24 Remove unused wsgi/ssl options from oslo.service
Barbican does not provide wsgi server based on oslo.service library,
thus these options are not used.

Change-Id: I74c67b61796bcc7e5418144b10134e6171b1777f
2023-12-16 01:34:27 +09:00
Takashi Kajinami
700571f7ec Fix missing oslo.versionedobjects library option
This ensures the options for oslo.versionedobjects library are
included in the file generated by oslo-config-generator.

Change-Id: I330b0bff32538bf22094257ecff5494af6d8e3d2
2023-08-08 06:03:04 +00:00
Takashi Kajinami
ffa7b113f9 Add audit middleware options to barbican.conf
The default api-paste.ini file maintained in the Barbican repo provides
a pipeline with the audit middleware. This change adds the option for
the middleware to the barbican.conf file generated by generator, so
that users can find the related options easily.

Depends-on: https://review.opendev.org/804316
Change-Id: I9f3ee9968f7558498c6fdb31d9103750ec248446
2022-09-26 16:15:27 +00:00
Takashi Kajinami
37edca24d0 Include options for Vault secret store
... in the barbican.conf file generated by `tox -e genconfig`.

Change-Id: I175be34ec79eaf4297e108b25ba98a0f220721e5
2022-05-12 11:46:25 +00:00
Takashi Kajinami
335a55aaf5 Add missing oslo.service options to barbican.conf
The options used by service launchers in the oslo.service library were
missing from barbican.conf. This change ensures that these parameters
are picked up by oslo-config-generator.

Change-Id: Ib90fee2d09eec2d6e2755a7d56ec46c9c0154bcc
2022-03-12 11:31:41 +00:00
Takashi Kajinami
83a805065c Include healthcheck middleware options
This change ensures the options of the healthcheck middleware, which is
enabled in api pipeline since [1] was merged, are included in
barbican.conf generated by the oslo-config-generator command.

[1] 3fc072d986f141b7153e4cd4543028f665f04ad0

Change-Id: I95418a2413591f326148fb1ab0954ada8941bfb1
2022-03-12 11:31:35 +00:00
Jeremy Liu
c91040aad9 Set entry point for dogtag config correctly
dogtag configurations have been moved to "plugin/dogtag_config_opts.py",
also remove non-existent entry point when generating barbican.conf

Closes-bug: #1704320
Change-Id: I9dd202d82797cb70051323fe949cc66f8a050022
2017-07-14 15:33:20 +08:00
Jeremy Liu
5e3662000e Maintain policy in code
This patch adds the basic framework for registering and using
default policy rules. Rules should be defined and returned from
a module in barbican/common/policies/, and then added to the
list in barbican/common/policies/__init__.py.

Also adds tox env to generate policy sample file.

Change-Id: If25b17ae7eed3f1a8e8e6f29701552a39d5a603f
2017-05-17 10:02:03 +00:00
Thomas Bechtold
06b76aa6e8 Use oslo-config-generator to generate barbican.conf.sample
Currently etc/barbican/barbican.conf is maintained by hand and can not
be regenerated based on the config settings defined in the code.
A common pattern for OpenStack projects is to use oslo-config-generator
for that task.

Co-Authored-By: Randall Burt <randall.burt@rackspace.com>
Depends-On: I90870dcb49cd96f6bf0fe353fa6e779ffd87a5af
Closes-Bug: #1584789
Change-Id: I5f3dcd2fc982f1178ef7dd662c24d3166f91b266
2017-04-05 08:02:35 +02:00