This commit updates dcorch to use the newly introduced dbsync service
APIs to synchronize identity resources from central cloud to subclouds.
The following identity resources are synced:
- users (local users only)
- user passwords
- projects
- roles
- project role assignments
- token revocation events
Story: 2002842
Task: 22787
Signed-off-by: Andy Ning <andy.ning@windriver.com>
(cherry picked from commit e9096c7a23)
Depends-On: https://review.opendev.org/#/c/655921
Depends-On: https://review.opendev.org/#/c/655773
Depends-On: https://review.opendev.org/#/c/655776
Depends-On: https://review.opendev.org/#/c/655927
Change-Id: I77c2cc712a1c3dc8a228883c3fea1423e5207dea
Disable nova, cinder and neutron api proxy services
Disable nova, cinder and neutron sync threads
Add cluster IP support to generated subcloud
configuration file
Remove openstack users from subcloud user list
Story: 2004766
Task: 28884
Change-Id: I683ba05ee74b159716924f08814a7473e7053d4d
Signed-off-by: Tao Liu <tao.liu@windriver.com>
This update contains the following changes for Distributed
Cloud Fernet Key Synching & Management:
1.Distribute the fernet keys when the subcloud is managed
2.Setup a periodic task to rotate and re-distribute keys
3.Support fernet repo audit
Story: 2002842
Task: 22786
Depends-On: https://review.openstack.org/#/c/613620/
Change-Id: I203c937e9c2334da3f4766c0a49f32f71f7fd39e
Signed-off-by: Tao Liu <tao.liu@windriver.com>
Don Penney