config/sysinv/sysinv/sysinv
Kyle MacLeod 03443ef16c Filter cert-mon for geo-redundancy in audit and DC_CertWatcher
This commit adds a filter for querying all subclouds from dcmanager, to
account for secondary subclouds that should not be audited by cert-mon
for this system controller. The filter is performed against a list of
invalid deploy states that should be considered when querying
the list of subcloud from dcmanager.

Likewise, the DC_CertWatcher -> DCIntermediateCertRenew flow must ensure
that subclouds which are secondary to this system controller are ignored
by the kubernetes watch in place for the DC intermediate cert renewal
detection. Subclouds are filtered by the watch based on their online
state and their deploy-status. A subcloud with invalid deploy state is
ignored by this system controller.

Test Cases

PASS:
- Trigger audits on service restart. Verify that offline/secondary
  subclouds are excluded.
- Ensure full daily audit is executed. Verify that all subclouds
  belonging to this system controller are audited. Secondary subclouds
  are not audited.
- Verify that DC_CertWatcher -> DCIntermediateCertRenew watch fires are
  ignored for offline and/or invalid deploy state

Closes-Bug: 2060068

Change-Id: Iffe3d7c76db8d2f17aed0bfebc792af0f9d75ca2
Signed-off-by: Kyle MacLeod <kyle.macleod@windriver.com>
2024-04-04 15:36:06 -04:00
..
.eggs StarlingX open source release updates 2018-05-31 07:35:52 -07:00
contrib StarlingX open source release updates 2018-05-31 07:35:52 -07:00
doc/source Change openstack-dev to openstack-discuss 2018-12-04 23:37:31 -05:00
etc/sysinv Fix misleading app status after failed override update 2024-02-16 17:51:14 +00:00
scripts Merge "First check Root CAs on kube-cert-rotation.sh" 2024-03-29 00:06:34 +00:00
sysinv Filter cert-mon for geo-redundancy in audit and DC_CertWatcher 2024-04-04 15:36:06 -04:00
tools Deprecate sysinv.openstack.common.db in favor of oslo_db 2020-02-07 11:55:49 -06:00
.coveragerc StarlingX open source release updates 2018-05-31 07:35:52 -07:00
.gitignore Update sysinv to not invoke ceph during unit testing 2018-10-02 13:19:43 -05:00
.stestr.conf Cleanup sysinv tox py27 warnings 2019-05-31 08:35:50 -05:00
CONTRIBUTING.rst Update CONTRIBUTING.rst and add HACKING.rst 2019-09-27 09:00:29 -05:00
HACKING.rst Update CONTRIBUTING.rst and add HACKING.rst 2019-09-27 09:00:29 -05:00
LICENSE StarlingX open source release updates 2018-05-31 07:35:52 -07:00
MANIFEST.in Deprecate old policy engine and restrict access 2022-08-10 11:18:38 -03:00
README.rst StarlingX open source release updates 2018-05-31 07:35:52 -07:00
babel.cfg StarlingX open source release updates 2018-05-31 07:35:52 -07:00
openstack-common.conf Remove sysinv.openstack.common.loopingcall 2021-08-13 16:30:11 +00:00
pylint.rc Enable sysinv no-value-for-parameter check in pylint 2023-05-31 19:43:19 +00:00
requirements.txt Use FQDN for MGMT network 2023-10-31 20:45:40 -04:00
setup.cfg Initial implementation of IPsec Auth Client 2024-02-01 15:53:41 -03:00
setup.py Add a zuul job for sysinv tox unittest 2018-08-13 16:34:06 +08:00
test-requirements.txt Update sysinv tox for python3.9 2023-02-07 15:18:42 +00:00
tox.ini Update sysinv tox for python3.9 2023-02-07 15:18:42 +00:00
upper-constraints.txt Update tox.ini files to use stein constraints 2019-06-25 14:45:54 -04:00

README.rst

Placeholder to allow setup.py to work. Removing this requires modifying the setup.py manifest.