~shaner/charm-helpers/lp1712203 : changes

~shaner/charm-helpers/lp1712203 » Changes from revision 786

From Revision 786 to 767

Rev	Summary	Authors	Date
786	[shaner,r=] Fixes parsing of currently loaded apache modules [shaner,r=] Fixes parsing of currently loaded apache modules When hardening apache, the returned list of currently enabled modules is always empty. This change splits on linefeeds from the output of 'apachectl -M' instead of spaces which allows the regex to match. Since the returned list of modules could potentitialy be used as input to '_disable_module' the regex was tweaked to truncate the module name, removing the '_module' since this is what a2dismod expects. Closes-Bug: #1712203	shane.peters at cano...	6 years ago
785	[shaner,r=] Fixes parsing of currently loaded apache modules [shaner,r=] Fixes parsing of currently loaded apache modules When hardening apache, the returned list of currently enabled modules is always empty. This change splits on linefeeds from the output of 'apachectl -M' instead of spaces which allows the regex to match. Since the returned list of modules could potentitialy be used as input to '_disable_module' the regex was tweaked to truncate the module name, removing the '_module' since this is what a2dismod expects. Closes-Bug: #1712203	shane.peters at cano...	6 years ago
784	[joeborg, r=tinwood] Adding test coverage for FilePermission... [joeborg, r=tinwood] Adding test coverage for FilePermissionAudit (note tinwood had to patch the test slightly to get it to merge due to recent changes in charm-helpers).	Alex Kavanagh	6 years ago
783	[stub, r=tinwood] A feature of the PostgreSQL charm had stop... [stub, r=tinwood] A feature of the PostgreSQL charm had stopped working, as charm-helpers was attempting to do more validation of GPG key formats and the PG charm happens to add comments to its keys so they don't get mixed up. While fixing this, noticed that insecure usage still seems to be promoted. Clearly flag this cases in the docstring and add WARNING messages to logs when people open themselves up to attack (the key retrieval protocol is unencrypted for historical reasons and the same man-in-the-middle attack that poisons an archive can also make people trust keys retrieved this way).	Alex Kavanagh	6 years ago
782	[tinwood, r=thedac] Update the core.host.write_file(...) fun... [tinwood, r=thedac] Update the core.host.write_file(...) function to do less work The primary motivation for this change is to do less work, touch the filesystem less, and try to clean the logs up a bit. This change is to the rendering of configuration files, which generates noise in the logs (at INFO) level, and often results in writing the exact same content, thus updating the atime of the file even when the contents haven't changed. This change detects if the content will change, and if not, doesn't write the file. It does detect if the uid,gid is changing and takes the appropriate action. The logs are demoted to the lowest level of DEBUG/TRACE, and are only generated IFF the file is actually written or the uid/gid is changed.	David Ames	6 years ago
781	[thedac,r=billy-olsen] Allow IPv4/IPv6 Dual Stack [thedac,r=billy-olsen] Allow IPv4/IPv6 Dual Stack	billy.olsen at canon...	6 years ago
780	[jamespage, r=thedac,tinwood] Refactoring ApacheSSLContext f... [jamespage, r=thedac,tinwood] Refactoring ApacheSSLContext for network-space support	David Ames	6 years ago
779	[coreycb, r=thedac] Add 2.15.0 to swift list of releases for... [coreycb, r=thedac] Add 2.15.0 to swift list of releases for pike	David Ames	6 years ago
778	[gnuoy, r=james-page] Change name of OpenStack extensions [gnuoy, r=james-page] Change name of OpenStack extensions The neutron-api charm already manages the extensions setting within a context inside the charm. In the neutron-api charm it is called 'extension_drivers' rather than 'extensions'. In a bid to keep things consistent this change updates the recently added patch to switch from 'extensions' to 'extension_drivers'	Liam Young	6 years ago
777	[gnuoy,r=james-page] Add support for qos driver in Neutron. [gnuoy,r=james-page] Add support for qos driver in Neutron.	james.page at ubuntu	6 years ago
776	[james-page,r=tinwood] Fix compat between os--hostname and ... [james-page,r=tinwood] Fix compat between os--hostname and SSL	james.page at ubuntu	6 years ago
775	[tasdomas,r=tinwood] Add JUJU_CHARM_DIR as first lookup in c... [tasdomas,r=tinwood] Add JUJU_CHARM_DIR as first lookup in charm_dir()	Alex Kavanagh	6 years ago
774	[mthaddon,r=stub] Test servicenames accept dots and uppercas... [mthaddon,r=stub] Test servicenames accept dots and uppercase	Stuart Bishop	6 years ago
773	Merge/rebase Merge/rebase	james.page at ubuntu	6 years ago
772	[icey,r=james-page,r=petevg] Make rbd-features optional [icey,r=james-page,r=petevg] Make rbd-features optional Update existing test cases to validate this, and add new test case to cover provision of this flag.	james.page at ubuntu	6 years ago
771	[trivial] add new template for oslo notifications openstack [trivial] add new template for oslo notifications openstack configuration	james.page at ubuntu	6 years ago
770	[pjcd,r=stub] Allow '.' in service names monitored by Nagios [pjcd,r=stub] Allow '.' in service names monitored by Nagios	Stuart Bishop	6 years ago
769	[thedac, r=petevg] Charm snap helper updates [thedac, r=petevg] Charm snap helper updates Use track/channel Determine installed version of snap Support snap upgrades	David Ames	6 years ago
768	[stub,r=ajkavanagh] Lower apt retries to alleviate hook retr... [stub,r=ajkavanagh] Lower apt retries to alleviate hook retry backlogs	Stuart Bishop	6 years ago
767	[tinwood, r=stub,thedac] Remove E402 ingore for pep8 to impr... [tinwood, r=stub,thedac] Remove E402 ingore for pep8 to improve code checking	David Ames	6 years ago

Older »