def certs_changed(relation_id=None, unit=None):
process_certificates('neutron', relation_id, unit)
configure_https()
# If endpoint has switched to https, need to tell
# nova-cc
for r_id in relation_ids('neutron-api'):
neutron_api_relation_joined(rid=r_id)
def test_process_certificates(self, relation_get, mkdir, install_ca_cert,
install_certs, create_ip_cert_links,
local_unit):
local_unit.return_value = 'keystone/2'
certs = {
'admin.openstack.local': {
'cert': 'ADMINCERT',
'key': 'ADMINKEY'
}
}
_relation_info = {
'keystone_2.processed_requests': json.dumps(certs),
'chain': 'MYCHAIN',
'ca': 'ROOTCA',
}
relation_get.return_value = _relation_info
cert_utils.process_certificates('myservice',
'certificates:2',
'vault/0',
custom_hostname_link='funky-name')
install_ca_cert.assert_called_once_with(b'ROOTCA')
install_certs.assert_called_once_with('/etc/apache2/ssl/myservice', {
'admin.openstack.local': {
'key': 'ADMINKEY',
'cert': 'ADMINCERT'
}
},
'MYCHAIN',
user='******',
group='root')
create_ip_cert_links.assert_called_once_with(
'/etc/apache2/ssl/myservice', custom_hostname_link='funky-name')
def certs_changed(relation_id=None, unit=None):
cert_utils.process_certificates('nova', relation_id, unit, group='nova')
configure_https()
for rid in hookenv.relation_ids('cloud-compute'):
compute_joined(rid=rid, remote_restart=False)
for rid in hookenv.relation_ids('quantum-network-service'):
quantum_joined(rid=rid, remote_restart=False)
def certs_changed(relation_id=None, unit=None):
process_certificates('horizon',
relation_id,
unit,
custom_hostname_link='dashboard')
CONFIGS.write_all()
service_reload('apache2')
enable_ssl()
def certs_changed(relation_id=None, unit=None):
if not service_enabled('api'):
# Install CA cert to communicate with Keystone and Glance
data = relation_get(rid=relation_id, unit=unit)
ca = data.get('ca')
if ca:
install_ca_cert(ca.encode())
return
process_certificates('cinder', relation_id, unit)
configure_https()
def test_process_certificates_bindings(self, relation_get, mkdir,
install_ca_cert, install_certs,
create_ip_cert_links, local_unit,
remote_service_name,
_manage_ca_certs):
remote_service_name.return_value = 'vault'
local_unit.return_value = 'devnull/2'
certs = {
'admin.openstack.local': {
'cert': 'ADMINCERT',
'key': 'ADMINKEY'
}
}
_relation_info = {
'keystone_2.processed_requests': json.dumps(certs),
'chain': 'MYCHAIN',
'ca': 'ROOTCA',
}
relation_get.return_value = _relation_info
self.assertFalse(
cert_utils.process_certificates('myservice',
'certificates:2',
'vault/0',
custom_hostname_link='funky-name'))
local_unit.return_value = 'keystone/2'
self.assertTrue(
cert_utils.process_certificates('myservice',
'certificates:2',
'vault/0',
custom_hostname_link='funky-name',
bindings=['mybinding']))
_manage_ca_certs.assert_called_once_with('ROOTCA', 'certificates:2')
install_certs.assert_called_once_with('/etc/apache2/ssl/myservice', {
'admin.openstack.local': {
'key': 'ADMINKEY',
'cert': 'ADMINCERT'
}
},
'MYCHAIN',
user='******',
group='root')
create_ip_cert_links.assert_called_once_with(
'/etc/apache2/ssl/myservice',
custom_hostname_link='funky-name',
bindings=['mybinding', 'internal', 'admin', 'public'])
def certs_changed(relation_id=None, unit=None):
process_certificates('neutron', relation_id, unit)
configure_https()
def certs_changed(relation_id=None, unit=None):
process_certificates('neutron', relation_id, unit)
configure_https()
def certs_changed(relation_id=None, unit=None):
process_certificates('horizon', relation_id, unit)
CONFIGS.write_all()
service_reload('apache2')
enable_ssl()
def certs_changed(relation_id=None, unit=None):
process_certificates('horizon', relation_id, unit)
CONFIGS.write_all()
service_reload('apache2')
enable_ssl()
def write_certs_and_config():
if process_certificates('keystone', relation_id, unit):
configure_https()
return True
return False
def write_certs_and_config():
process_certificates('keystone', relation_id, unit)
configure_https()
def certs_changed(relation_id=None, unit=None):
cert_utils.process_certificates('nova', relation_id, unit, group='nova')
configure_https()
def certs_changed(relation_id=None, unit=None):
process_certificates('glance-simplestreams-sync', relation_id, unit)
configs = get_configs()
configs.write_all()
identity_service_changed()
def _certs_changed():
process_certificates('ceph-radosgw', relation_id, unit)
configure_https()
def certs_changed(relation_id=None, unit=None):
cert_utils.process_certificates('nova', relation_id, unit)
configure_https()
def _certs_changed():
cert_utils.process_certificates('ceilometer-api', relation_id, unit)
configure_https()
def certs_changed():
process_certificates('swift', None, None)
configure_https()
def _certs_changed():
process_certificates('ceph-radosgw', relation_id, unit)
configure_https()
def write_certs_and_config():
if process_certificates('keystone', relation_id, unit):
configure_https()
return True
return False
