| Commit message (Collapse) | Author | Age | Files | Lines |
|\ |
|
| |
| |
| |
| | |
Change-Id: I382250784be7dd9c20245cb90b4a19a9e7e313a5
|
|\ \ |
|
| |/
| |
| |
| | |
Change-Id: I665f9d3a5bb8ceeace0bdedac2b64c9dc6205668
|
|\ \ |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Previously if you tried to create a zone share with a scoped token that
does not have a project ID, you would receive a 500 error. This patch
corrects that to return a proper error describing that a project ID is
required when creating zone shares.
Change-Id: Ibeb7154a4c300f59dfa25737736f59609b938bcc
|
| |/
|/|
| |
| | |
Change-Id: I44a51bef79109600a3f93844ac51a1f5738508b9
|
|/
|
|
|
|
|
| |
Domain no longer exists and this patch replaces domain
with the correct value zone.
Change-Id: I4cd88d30882d8966acc811ccb100aa1a1df89a3e
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| | |
If the record status changes during the removal process,
the current implementation will fail.
Closes-Bug: 2015762
Change-Id: Iebe609e5f365d03e99f2a4580671175b4642763c
|
|\ \ |
|
| |/
| |
| |
| |
| |
| |
| | |
If the record status changes during the removal process,
the current implementation will fail.
Change-Id: I02b5d7499440154160c89ed63a2f70652fe72145
|
|/
|
|
|
|
|
|
|
|
| |
When we create a secondary zone, AXFR transfer loops indefinitely.
Normally, only one xfr should be performed.
Due to AXFR loop the zone changes status from active to pending all the time.
Co-Authored-By: ZhouHeng <zhouhenglc@inspur.com>
Closes-Bug: 1856442
Change-Id: I0e0d138049e6d4c31dea3cc6768cc15e59a5942c
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This patch moves the responsibility of incrementing the
serial on a zone from central to the producer. This also
means that NOTIFY is triggered by the producer after the
serial has been incremented. The advantage of this approach
is that we can now batch requests which means less work
for the DNS servers, and it removes the risk of
race-conditions when updating the serial. Finally, the
producer is sharded and is easy to scale which means that
this approach should scale well with many zones.
The disadvantage is that it may take up to 5 seconds longer
for the DNS record to be updated on the DNS server. This
can be lowered by increasing the frequency of the task
that is responsible for incrementing the serial.
Depends-On: https://review.opendev.org/#/c/871266/
Change-Id: I5e9733abaaa40c874e1d80d7b57e563df0f12cee
|
|\ \
| |/
|/| |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
There was a bug that allowed users to create a zone share with the zone
owner. This would then cause issues deleting the zone share as the zone
owner owns the NS and SOA recordsets in the zone.
This patch raises a BadRequest if the user attempts to create a zone
share for the zone owner.
Closes-Bug: #2011585
Change-Id: I1b56c492436821f650d1ba669614d92595d2f476
|
|\ \ |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The RBAC goal has changed[1] and system scope is no longer going to be
used. This patch updates Designate to align to this change in direction
by removing the system scope from the policies.
It also updates the functional tests to be ready for the switch to using
the new keystone roles by default.
[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#direction-change
Depends-On: https://review.opendev.org/c/openstack/designate-tempest-plugin/+/879111
Change-Id: I1937e215dbd072b0a095df659c75f17a3f48c937
|
|\ \ \
| |_|/
|/| | |
|
| |/
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The python-neutronclient has been deprecated for the CLI since Ocata and
the python bindings "neutronclient" has been deprecated for removal as
of the 2023.1 (Antelope) release[1] in favor of using openstacksdk.
This patch migrates Designate from using the neutronclient to using the
openstacksdk for communicating with neutron.
[1] https://docs.openstack.org/releasenotes/python-neutronclient/2023.1.html
Co-Authored-By: Michael Johnson <johnsomor@gmail.com>
Change-Id: I0198f38afe3d5c32ea06d9e674ab0ff849f360e6
Related-Bug: #1999774
|
|/
|
|
| |
Change-Id: I62fe1cd22e17a67f3d3f95578def14880933c67b
|
|\ |
|
| |
| |
| |
| |
| |
| |
| | |
This patch updates Designate to be compatible with SQLAlchemy 2.x.
Depends-On: https://review.opendev.org/c/openstack/oslo.db/+/874858
Change-Id: I5b9cfb4b86bd7c342fd50d1b50dd12dce0c8e81a
|
|/
|
|
|
|
|
|
|
|
|
|
|
| |
The backend_url option can sometimes contain secrets.
For example when redis coordination backend is used and authentication
is enabled in redis, the plain redis password is put as an URL element.
[coordination]
backend_url=redis://:password@127.0.0.1:6379
Closes-Bug: #2012246
Change-Id: I0ee95fc56130e51bf5c799d252e79a469492b7db
|
|
|
|
|
|
| |
This patch adds a hacking check for line continuation backslashes and fixes the occurences that existed in the code.
Change-Id: I1d1269de231f6e747248a9d816a1d64e3968c69b
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Author: Igor Malinovskiy <u.glide@gmail.com>
Co-Authored-By: Sergey Drozdov <sergey.drozdov.dev@gmail.com, sergey.drozdov93@thehutgroup.com>
Co-Authored-By: Michael Johnson <johnsomor@gmail.com>
Change-Id: Ibd780f3c695a95be00ff97d7736d5a0bebea79b9
Closes-Bug: #1714088
Depends-On: https://review.opendev.org/c/openstack/designate-tempest-plugin/+/872069
|
| |
| |
| |
| |
| |
| |
| | |
- Fix deprecation warning.
- Fix minor code warnings.
Change-Id: I7bab00649ca7c797d0fd6b2c6b518cd9af1e0544
|
|\ \ |
|
| |/
| |
| |
| |
| |
| |
| |
| |
| | |
This patch marks the agent framework and drivers as deprecated in the Antelope release for removal in the "C" release.
Please see the announcement on the OpenStack discuss mailing list for more information about the deprecation:
https://lists.openstack.org/pipermail/openstack-discuss/2023-January/031803.html
Change-Id: I3a90243dc323a2815ce7d973a5e52248ed1c2ad6
|
|/
|
|
|
|
|
|
| |
We are currently failing with module 'dns' has no
attribute 'resolver'.
Closes-Bug: #2006537
Change-Id: I31a1b1892a7112018b1261f956f51ed4eaa7cfb9
|
|\ |
|
| |
| |
| |
| | |
Change-Id: Ic80228697374c67a0c16fd3574fc0cd0f52dc680
|
|/
|
|
|
|
|
|
|
| |
this will allow usage of many oslo.policy scripts, e.g.
to generate current effective policy, or to list redundant polices
defined in policy files.
Change-Id: I1de9b6cc16be2896136c7e99cf150c4b8e4603e9
Closes-Bug: #2004421
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Use the new API that is consistent with
the existing API instead of instantiating the client
class directly.
This was introduced in release 14.1.0 here [1] and
added into oslo.messaging here [2]
[1] https://review.opendev.org/c/openstack/requirements/+/869340
[2] https://review.opendev.org/c/openstack/oslo.messaging/+/862419
Change-Id: Ibc2147fb08beae7a2190b9860e3342150c43dfab
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The dnspython module >= 2.3.0 now validates the opcodes used when building DNS messages. This breaks Designate because designate is using an "unassigned"[1] opcode 14 for command/control messages inside the backend agents framework.
This patch adds a workaround to override the dnspython opcode enum to include
opcode 14. This will give us time to either remove the agent framework via deprecation or to change the agent framework protocol to not rely on unassigned opcode values.
[1] https://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml#dns-parameters-5
Partial-Bug: #2002950
Change-Id: If10443b2e361aa1b467fb64124ad3c82540bcddd
|
|
|
|
| |
Change-Id: I347748b1a31d757eff0376a87db75ab4e23512f3
|
|
|
|
|
|
|
| |
This patch removes the get_migration_manager function from the sqlalchemy
utils module. It doesn't appear to be used anywhere in the code.
Change-Id: I3cc77e6a2607e57ce071078157a7853a03eea021
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
There was a configuration leak in the agent based bind 9 tests, where if
you have a /etc/designate/designate.conf file with settings other than
the default the tests would fail.
This patch adds a configuration fixture setting override for the two
tests to ensure consistent testing.
Change-Id: I44dc0499e03431261d5b596206858d94cc4803f9
|
|\ \
| |/
|/| |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Designate does not delete the zone-files on the back-end when zone is
deleted. This results in thousands leftover zone files on backend e.g.
bind. Add option in designate zone delete API to force clean/delete
zone-files on the back-end. This option is restricted for admin or
owner roles.
Closes-Bug: 1966517
Change-Id: Ic7b8fee4d4702b0632774d32542b23d7d2a8c253
|
| |
| |
| |
| |
| |
| |
| |
| | |
- Cleaned up sql syntax.
- Fixed minor inconsistencies.
- Improved test coverage.
Change-Id: I5986dc9fdd1607119a71872637f836d211186c1e
|
|\ \ |
|
| |/
| |
| |
| | |
Change-Id: Idb04e81ce5954ca8b5e387dc7c0776fdf7d08779
|
|\ \ |
|
| |/
| |
| |
| | |
Change-Id: I0243a1edfeb7ae592cb77356177df85149bd3055
|
|/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
If you delete a zone using the Infoblox backend
the zone will be deleted from Infoblox but the
zone within OpenStack will go into an ERROR state
unless an operator manually logs into Infoblox
and issues a reload of the running configuration.
This commit fixes this bug by issuing a 'restart
if needed' after deleting the zone. This does not
happen when creating zones as 'restart if needed'
can be passed through as a param into that API call.
Co-Authored-By: Jay Faulkner <jay@jvf.cc>
Change-Id: I296c5f085cce27033461be81ca58c85f095df89a
Closes-Bug: #1840253
|
|\ |
|