{"push_id":3635023821,"size":1,"distinct_size":1,"ref":"refs/heads/service-tenant-model","head":"7dc450546097fa62654902dad2e2f336d81b371d","before":"a59a51edd01b24c5a1124c82e020b87e6ce2931a","commits":[{"sha":"7dc450546097fa62654902dad2e2f336d81b371d","author":{"name":"Lingxian Kong","email":"0f9f51e42db1d44181a6f21b4c02c8a5d73abe98@gmail.com"},"message":"Enable service tenant deployment model by default in DevStack\n\nThe service tenant deployment model means Trove creates most of the\nresources(vm, volume, security group, etc.) relating to a database\ninstance in the Trove service tenant rather than the end user.\n\nWith this deployment model, most of the related resources behind the\nscenes are invisible to the user, which is a more secure deployment\nmodel for either private or public cloud provider.\n\nDevStack should follow this model as it will be recommended for Trove\ndeployment in production.\n\nChanges included in this patch that are necessary in order to make that\nhappen:\n\n- Add 'admin' role to Trove service user(username: trove, project:\n  service) in DevStack.\n- Create Trove management network resources for Trove service user in\n  DevStack.\n- Enable remote client configuration by default in DevStack.\n- Mainly use alt_demo user in alt_demo project for integration tests,\n  config trove user as the admin role user in integration tests.\n- The guest agent service is running as the root user because it needs\n  privileges to do the network change.\n- Adding a new config option `management_gateway` for guest agent in\n  order to config the source based policy routing.\n- Disable the module related tests(module_groups) for now because of no\n  use cases but need effort to fix all the failed tests in the service\n  tenant model.\n\nStory: #2005445\nTask: #30489\nChange-Id: I2efb69d3d50344914a875b773f62a227dba2ccaf","distinct":true,"url":"https://api.github.com/repos/lingxiankong/trove/commits/7dc450546097fa62654902dad2e2f336d81b371d"}]}
{"actor":{"display_login":"lingxiankong"}}