fe7da441a6
This change is the first step to support secure RBAC and allows usage of system scope credentials for Keystone API request. This change covers the following two items. - assignment of system scope roles to system user - credential parameters for authtoken middleware Depends-on: https://review.opendev.org/804325 Change-Id: I2a54b0d0c03a98b3fe7a3a4a28051247eea7e70a
Team and repository tags
zaqar
Table of Contents
- Overview - What is the zaqar module?
- Module Description - What does the module do?
- Setup - The basics of getting started with zaqar
- Implementation - An under-the-hood peek at what the module is doing
- Limitations - OS compatibility, etc.
- Development - Guide for contributing to the module
- Contributors - Those with commits
Overview
The zaqar module is a part of OpenStack, an effort by the OpenStack infrastructure team to provide continuous integration testing and code review for OpenStack and OpenStack community projects not part of the core software. The module its self is used to flexibly configure and manage the queue service for OpenStack.
Module Description
The zaqar module is a thorough attempt to make Puppet capable of managing the entirety of zaqar. This includes manifests to provision region specific endpoint and database connections. Types are shipped as part of the zaqar module to assist in manipulation of configuration files.
Setup
What the zaqar module affects
Zaqar, the queue service for OpenStack.
Installing zaqar
puppet module install openstack/zaqar
Beginning with zaqar
Implementation
zaqar
zaqar is a combination of Puppet manifest and ruby code to delivery configuration and extra functionality through types and providers.
Types
zaqar_config
The zaqar_config provider is a children of the ini_setting provider. It allows one to write an entry in the /etc/zaqar/zaqar.conf file.
zaqar_config { 'DEFAULT/debug' :
value => true,
}
This will write debug=true in the [DEFAULT] section.
name
Section/setting name to manage from zaqar.conf
value
The value of the setting to be defined.
secret
Whether to hide the value from Puppet logs. Defaults to false.
ensure_absent_val
If value is equal to ensure_absent_val then the resource will behave as if ensure => absent was specified. Defaults to <SERVICE DEFAULT>
Limitations
- All the zaqar types use the CLI tools and so need to be ran on the zaqar node.
Development
Developer documentation for the entire puppet-openstack project.