Delete Default Authz Install Service
This service modifies the redfish authorization configuration
on program startup.
This is no longer needed since we are deprecating config_generator.
Tested:
No issues on install and bootup.
fusion:
https://fusion2.corp.google.com/da866ba8-5a85-33c6-81e1-e00ae1e12c1e
https://fusion2.corp.google.com/eb83619a-fe3c-3230-ad5c-3baf76bebfec
https://fusion2.corp.google.com/51746b7e-a48e-3aa3-999f-a4cef14e77d6
Failures are known failures
Google-Bug-Id: 375659949
Change-Id: I51220bfd5e83ed9357b8b0d1e0ed4e8c97219cd1
Signed-off-by: Edward Lee <edwarddl@google.com>
diff --git a/recipes-google/redfish-authz/redfish-authz.bb b/recipes-google/redfish-authz/redfish-authz.bb
deleted file mode 100644
index d43a0c8..0000000
--- a/recipes-google/redfish-authz/redfish-authz.bb
+++ /dev/null
@@ -1,31 +0,0 @@
-SUMMARY = "Install Redfish PrivilegeRegistries and default authorization configurations"
-PR = "r1"
-LICENSE = "CLOSED"
-
-inherit systemd
-
-S = "${WORKDIR}"
-
-DEPENDS:gbmc:append = " systemd"
-RDEPENDS:${PN}:gbmc:append = " bash"
-RDEPENDS:${PN}:gbmc:append = " grpc-redfish"
-
-# Default authorization policy install
-
-SRC_URI:append:gbmc = " \
- file://default_authz_install.sh \
- file://default_authz_install.service \
-"
-
-SYSTEMD_PACKAGES:gbmc = "${PN}"
-SYSTEMD_SERVICE:${PN}:gbmc = "default_authz_install.service"
-
-FILES:${PN}:append:gbmc = " ${bindir}/default_authz_install.sh"
-
-do_install:append:gbmc() {
- install -d ${D}${bindir}
- install -m 0755 ${S}/default_authz_install.sh ${D}${bindir}/
-
- install -d ${D}${systemd_system_unitdir}
- install -m 0644 ${S}/default_authz_install.service ${D}${systemd_system_unitdir}
-}
diff --git a/recipes-google/redfish-authz/redfish-authz/default_authz_install.service b/recipes-google/redfish-authz/redfish-authz/default_authz_install.service
deleted file mode 100644
index f26ad3d..0000000
--- a/recipes-google/redfish-authz/redfish-authz/default_authz_install.service
+++ /dev/null
@@ -1,15 +0,0 @@
-[Unit]
-Description=Generate default authz configuration
-# ensure the config_generate gets the server certificate
-After=prodid-blob-decrypter.service
-Before=bmcweb.service
-ConditionPathExists=/var/google/googlemachineidentity/live/machine_identity.pb
-ConditionPathExists=/var/volatile/prodid/server.pem
-
-[Service]
-Type=oneshot
-ExecStart=/usr/bin/default_authz_install.sh
-
-[Install]
-WantedBy=multi-user.target
-
diff --git a/recipes-google/redfish-authz/redfish-authz/default_authz_install.sh b/recipes-google/redfish-authz/redfish-authz/default_authz_install.sh
deleted file mode 100644
index bea4d2b..0000000
--- a/recipes-google/redfish-authz/redfish-authz/default_authz_install.sh
+++ /dev/null
@@ -1,28 +0,0 @@
-#!/bin/bash
-
-CONFIG_GENERATOR='/usr/bin/config_generator'
-NEW_AUTHZ_CONFIG_PATH='/var/google/authz_policies/redfish.json'
-AUTHZ_CONFIG_OUTPUT_PATH='/tmp/redfish_new.json'
-AUTHZ_CONFIG_FINAL_PATH='/var/google/authz_policies/redfish.json'
-
-reload_redfish_authz_policy() {
- echo "Start to reload the new authz policy"
-
- echo "reload authz_server"
- # TODO(b/265159416#comment4) make the Authorization server load configuration without restarting
- SYSTEMD_IGNORE_CHROOT=1 systemctl restart authz_server.service || true
-
- return 0
-}
-
-set -e
-rm -f "${AUTHZ_CONFIG_OUTPUT_PATH}"
-
-# Generate the new policy file at a temporary location and then move it to the
-# desired location atomically
-"${CONFIG_GENERATOR}" --authz_configuration_path "${NEW_AUTHZ_CONFIG_PATH}" \
- --output_path "${AUTHZ_CONFIG_OUTPUT_PATH}"
-
-mv "${AUTHZ_CONFIG_OUTPUT_PATH}" "${AUTHZ_CONFIG_FINAL_PATH}"
-
-reload_redfish_authz_policy
