See merge request !1716

See neoppod@f4a5fe3b.

This was sometimes causing false positives, for example if site have
only one hit and this hit takes more than one second, apdex is 0% and
promise failed, it seems useful to at least have a way to disable.

We are discussed on !1716 (comment 225941)
an idea of introducing a "minimal number of hits" parameter to not
detect this false positive on sites that are not accessed enough to
calculate a meaningful apdex.

Needed for password authentication to websocket
A bug was discovered in previous version

See merge request !1717

used in theia or with security vulnerabilities (idna & Werkzeug)

With fixes for two critical CVE

See merge request !1705

See merge request !1705

See merge request !1638

Add `validate-parameters` options to slapconfiguration:jsonschema.
Accepted values are `all|main|shared|none`.
Default value is `all`.

When shared parameters validation is skipped, shared parameters are
left in `slave-instance-list`.

Add `set-default` options to slapconfiguration:jsonschema.
Accepted values are `all|main|shared|none`.
Default value is `none`.

These allow controlling whether default values of parameters that
where not provided by the user are set from the defaults given in
the JSON schema. The default behavior of the recipe is now not to
add any defaults. The new option allows adding all defaults, only
the defaults of the main instance, or only the defaults of shared
instances.

[slapconfiguration]
<= slap-connection
recipe = slapos.cookbook:slapconfiguration.jsonschema
jsonschema = ${buildout:directory}/software.cfg.json

The recipe validates instance parameters against the JSON schema, and
automatically fills in values of parameters left unset from defaults
specified in the schema, both for the main instance and for every
shared instance, if any.

Validation error or conflicting defaults - when the instance validates
multiple combined schemas that each set different defaults - can occur.

In case of error in the main instance parameters, the recipe raises an
exception. Otherwise, the completed instance parameters are available
in `configuration`.

For shared instances, valid and conflict-free instances are
collected in `valid-shared-instance-list` as dicts in the form of:
```
{'reference': "...", 'parameters': {...}}
```
with parameters completed by defaults as appropriate.

Invalid shared instances are collected in `invalid-slave-instance-list`
as dicts in the form of:
```
{'reference': "...", 'parameters': {...}, 'errors': [...]}
```
with parameters left as-is without added defaults.
Co-authored-by: Thomas Gambier <thomas.gambier@nexedi.com>

Introduce alternative names for input parameters to enable

```
[slap-configuration]
<= slap-connection
recipe = slapos.cookbook:slapconfiguration
```

instead of

```
[slap-configuration]
recipe = slapos.cookbook:slapconfiguration
computer = ${slap-connection:computer-id}
partition = ${slap-connection:partition-id}
url = ${slap-connection:server-url}
key = ${slap-connection:key-file}
cert = ${slap-connection:cert-file}
```

This follows the new notation of slapos master.

golang tests fail because of https://github.com/golang/go/issues/71077.
This patch backports https://github.com/golang/go/commit/d1d93129506c78cc8ee25644384286822d93c81a.
go1.22 and go1.23 include this fix already [1].

[1] https://go-review.googlesource.com/c/go/+/640315

/reported-by @romain
/reviewed-by @jerome @kirr @tomo
/reviewed-on !1713

This reduces maintenance work. go1.4 and go1.17 are used for
bootstrapping. go1.15 is used for gitlab.

/reviewed-by @jerome @kirr @tomo
/reviewed-on !1713

Allows defining a domain name pointing at caucase's IP, and a custom port
pointing at whatever port caucase is being made available on to all
services and users. This makes it possible to change caucased's IP address
without having to reissue all certificates when certificate-validating
library given a caucased-issued certificate tries to access the CRL
distriution point.
software/caucase still pusblishes the plain IP & port allocated by slapos.