Remove cinder v1/v2 defaults
This change removes the cinder v1 and v2 endpoint definitions from the default values in the cinder chart. Change-Id: I0ee35ad71c76df157e2c670a7899e4b6c1b91e46
This commit is contained in:
parent
ddf21b077e
commit
6ec2773c95
@ -14,7 +14,7 @@ apiVersion: v1
|
|||||||
appVersion: v1.0.0
|
appVersion: v1.0.0
|
||||||
description: OpenStack-Helm Cinder
|
description: OpenStack-Helm Cinder
|
||||||
name: cinder
|
name: cinder
|
||||||
version: 0.2.11
|
version: 0.2.12
|
||||||
home: https://docs.openstack.org/cinder/latest/
|
home: https://docs.openstack.org/cinder/latest/
|
||||||
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Cinder/OpenStack_Project_Cinder_vertical.png
|
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Cinder/OpenStack_Project_Cinder_vertical.png
|
||||||
sources:
|
sources:
|
||||||
|
@ -94,7 +94,7 @@ limitations under the License.
|
|||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{- if empty .Values.conf.cinder.DEFAULT.osapi_volume_listen_port -}}
|
{{- if empty .Values.conf.cinder.DEFAULT.osapi_volume_listen_port -}}
|
||||||
{{- $_ := tuple "volume" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | set .Values.conf.cinder.DEFAULT "osapi_volume_listen_port" -}}
|
{{- $_ := tuple "volumev3" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | set .Values.conf.cinder.DEFAULT "osapi_volume_listen_port" -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{- if .Values.conf.cinder.service_user.send_service_user_token -}}
|
{{- if .Values.conf.cinder.service_user.send_service_user_token -}}
|
||||||
|
@ -85,13 +85,13 @@ spec:
|
|||||||
- stop
|
- stop
|
||||||
ports:
|
ports:
|
||||||
- name: c-api
|
- name: c-api
|
||||||
containerPort: {{ tuple "volume" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
containerPort: {{ tuple "volumev3" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
||||||
readinessProbe:
|
readinessProbe:
|
||||||
tcpSocket:
|
tcpSocket:
|
||||||
port: {{ tuple "volume" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
port: {{ tuple "volumev3" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
tcpSocket:
|
tcpSocket:
|
||||||
port: {{ tuple "volume" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
port: {{ tuple "volumev3" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
||||||
initialDelaySeconds: 30
|
initialDelaySeconds: 30
|
||||||
failureThreshold: 3
|
failureThreshold: 3
|
||||||
periodSeconds: 10
|
periodSeconds: 10
|
||||||
@ -153,7 +153,7 @@ spec:
|
|||||||
readOnly: true
|
readOnly: true
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.endpoints.oslo_db.auth.admin.secret.tls.internal "path" "/etc/mysql/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.endpoints.oslo_db.auth.admin.secret.tls.internal "path" "/etc/mysql/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal "path" "/etc/cinder/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal "path" "/etc/cinder/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal "path" "/etc/rabbitmq/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal "path" "/etc/rabbitmq/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
{{ if $mounts_cinder_api.volumeMounts }}{{ toYaml $mounts_cinder_api.volumeMounts | indent 12 }}{{ end }}
|
{{ if $mounts_cinder_api.volumeMounts }}{{ toYaml $mounts_cinder_api.volumeMounts | indent 12 }}{{ end }}
|
||||||
volumes:
|
volumes:
|
||||||
@ -176,7 +176,7 @@ spec:
|
|||||||
emptyDir: {}
|
emptyDir: {}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.endpoints.oslo_db.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.endpoints.oslo_db.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{ if $mounts_cinder_api.volumes }}{{ toYaml $mounts_cinder_api.volumes | indent 8 }}{{ end }}
|
{{ if $mounts_cinder_api.volumes }}{{ toYaml $mounts_cinder_api.volumes | indent 8 }}{{ end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -104,7 +104,7 @@ spec:
|
|||||||
- name: cinder-coordination
|
- name: cinder-coordination
|
||||||
mountPath: {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
|
mountPath: {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal "path" "/etc/cinder/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal "path" "/etc/cinder/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal "path" "/etc/mysql/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal "path" "/etc/mysql/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal "path" "/etc/rabbitmq/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal "path" "/etc/rabbitmq/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
{{ if $mounts_cinder_scheduler.volumeMounts }}{{ toYaml $mounts_cinder_scheduler.volumeMounts | indent 12 }}{{ end }}
|
{{ if $mounts_cinder_scheduler.volumeMounts }}{{ toYaml $mounts_cinder_scheduler.volumeMounts | indent 12 }}{{ end }}
|
||||||
@ -125,7 +125,7 @@ spec:
|
|||||||
- name: cinder-coordination
|
- name: cinder-coordination
|
||||||
emptyDir: {}
|
emptyDir: {}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{ if $mounts_cinder_scheduler.volumes }}{{ toYaml $mounts_cinder_scheduler.volumes | indent 8 }}{{ end }}
|
{{ if $mounts_cinder_scheduler.volumes }}{{ toYaml $mounts_cinder_scheduler.volumes | indent 8 }}{{ end }}
|
||||||
|
@ -128,7 +128,7 @@ spec:
|
|||||||
readOnly: true
|
readOnly: true
|
||||||
- name: pod-shared
|
- name: pod-shared
|
||||||
mountPath: /tmp/pod-shared
|
mountPath: /tmp/pod-shared
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
env:
|
env:
|
||||||
{{- with $env := dict "ksUserSecret" .Values.secrets.identity.admin "useCA" .Values.manifests.certificates }}
|
{{- with $env := dict "ksUserSecret" .Values.secrets.identity.admin "useCA" .Values.manifests.certificates }}
|
||||||
{{- include "helm-toolkit.snippets.keystone_openrc_env_vars" $env | indent 12 }}
|
{{- include "helm-toolkit.snippets.keystone_openrc_env_vars" $env | indent 12 }}
|
||||||
@ -266,7 +266,7 @@ spec:
|
|||||||
mountPropagation: HostToContainer
|
mountPropagation: HostToContainer
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal "path" "/etc/cinder/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal "path" "/etc/cinder/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal "path" "/etc/mysql/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal "path" "/etc/mysql/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal "path" "/etc/rabbitmq/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal "path" "/etc/rabbitmq/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
{{ if $mounts_cinder_volume.volumeMounts }}{{ toYaml $mounts_cinder_volume.volumeMounts | indent 12 }}{{ end }}
|
{{ if $mounts_cinder_volume.volumeMounts }}{{ toYaml $mounts_cinder_volume.volumeMounts | indent 12 }}{{ end }}
|
||||||
@ -330,7 +330,7 @@ spec:
|
|||||||
path: /sys
|
path: /sys
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_messaging.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{ if $mounts_cinder_volume.volumes }}{{ toYaml $mounts_cinder_volume.volumes | indent 8 }}{{ end }}
|
{{ if $mounts_cinder_volume.volumes }}{{ toYaml $mounts_cinder_volume.volumes | indent 8 }}{{ end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -14,10 +14,10 @@ limitations under the License.
|
|||||||
|
|
||||||
{{- if and .Values.manifests.ingress_api .Values.network.api.ingress.public }}
|
{{- if and .Values.manifests.ingress_api .Values.network.api.ingress.public }}
|
||||||
{{- $envAll := . -}}
|
{{- $envAll := . -}}
|
||||||
{{- $ingressOpts := dict "envAll" $envAll "backendServiceType" "volume" "backendPort" "c-api" -}}
|
{{- $ingressOpts := dict "envAll" $envAll "backendServiceType" "volumev3" "backendPort" "c-api" -}}
|
||||||
{{- $secretName := $envAll.Values.secrets.tls.volume.api.internal -}}
|
{{- $secretName := $envAll.Values.secrets.tls.volumev3.api.internal -}}
|
||||||
{{- if and .Values.manifests.certificates $secretName -}}
|
{{- if and .Values.manifests.certificates $secretName -}}
|
||||||
{{- $_ := set $ingressOpts "certIssuer" .Values.endpoints.volume.host_fqdn_override.default.tls.issuerRef.name -}}
|
{{- $_ := set $ingressOpts "certIssuer" .Values.endpoints.volumev3.host_fqdn_override.default.tls.issuerRef.name -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{ $ingressOpts | include "helm-toolkit.manifests.ingress" }}
|
{{ $ingressOpts | include "helm-toolkit.manifests.ingress" }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -15,7 +15,7 @@ limitations under the License.
|
|||||||
{{- if and .Values.manifests.job_bootstrap .Values.bootstrap.enabled }}
|
{{- if and .Values.manifests.job_bootstrap .Values.bootstrap.enabled }}
|
||||||
{{- $bootstrapJob := dict "envAll" . "serviceName" "cinder" "keystoneUser" .Values.bootstrap.ks_user "logConfigFile" .Values.conf.cinder.DEFAULT.log_config_append -}}
|
{{- $bootstrapJob := dict "envAll" . "serviceName" "cinder" "keystoneUser" .Values.bootstrap.ks_user "logConfigFile" .Values.conf.cinder.DEFAULT.log_config_append -}}
|
||||||
{{- if .Values.manifests.certificates -}}
|
{{- if .Values.manifests.certificates -}}
|
||||||
{{- $_ := set $bootstrapJob "tlsSecret" .Values.secrets.tls.volume.api.internal -}}
|
{{- $_ := set $bootstrapJob "tlsSecret" .Values.secrets.tls.volumev3.api.internal -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{ $bootstrapJob | include "helm-toolkit.manifests.job_bootstrap" }}
|
{{ $bootstrapJob | include "helm-toolkit.manifests.job_bootstrap" }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -65,7 +65,7 @@ spec:
|
|||||||
mountPath: /tmp/create-internal-tenant.sh
|
mountPath: /tmp/create-internal-tenant.sh
|
||||||
subPath: create-internal-tenant.sh
|
subPath: create-internal-tenant.sh
|
||||||
readOnly: true
|
readOnly: true
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }}
|
||||||
env:
|
env:
|
||||||
{{- with $env := dict "ksUserSecret" $envAll.Values.secrets.identity.admin "useCA" .Values.manifests.certificates }}
|
{{- with $env := dict "ksUserSecret" $envAll.Values.secrets.identity.admin "useCA" .Values.manifests.certificates }}
|
||||||
{{- include "helm-toolkit.snippets.keystone_openrc_env_vars" $env | indent 12 }}
|
{{- include "helm-toolkit.snippets.keystone_openrc_env_vars" $env | indent 12 }}
|
||||||
@ -94,5 +94,5 @@ spec:
|
|||||||
configMap:
|
configMap:
|
||||||
name: {{ $configMapBin | quote }}
|
name: {{ $configMapBin | quote }}
|
||||||
defaultMode: 0555
|
defaultMode: 0555
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
@ -18,9 +18,9 @@ helm.sh/hook-weight: "-2"
|
|||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- if .Values.manifests.job_ks_endpoints }}
|
{{- if .Values.manifests.job_ks_endpoints }}
|
||||||
{{- $ksServiceJob := dict "envAll" . "serviceName" "cinder" "serviceTypes" ( tuple "volume" "volumev2" "volumev3" ) -}}
|
{{- $ksServiceJob := dict "envAll" . "serviceName" "cinder" "serviceTypes" ( tuple "volumev3" ) -}}
|
||||||
{{- if .Values.manifests.certificates -}}
|
{{- if .Values.manifests.certificates -}}
|
||||||
{{- $_ := set $ksServiceJob "tlsSecret" .Values.secrets.tls.volume.api.internal -}}
|
{{- $_ := set $ksServiceJob "tlsSecret" .Values.secrets.tls.volumev3.api.internal -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{- if .Values.helm3_hook }}
|
{{- if .Values.helm3_hook }}
|
||||||
{{- $_ := set $ksServiceJob "jobAnnotations" (include "metadata.annotations.job.ks_endpoints" . | fromYaml) }}
|
{{- $_ := set $ksServiceJob "jobAnnotations" (include "metadata.annotations.job.ks_endpoints" . | fromYaml) }}
|
||||||
|
@ -18,9 +18,9 @@ helm.sh/hook-weight: "-3"
|
|||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- if .Values.manifests.job_ks_service }}
|
{{- if .Values.manifests.job_ks_service }}
|
||||||
{{- $ksServiceJob := dict "envAll" . "serviceName" "cinder" "serviceTypes" ( tuple "volume" "volumev2" "volumev3" ) -}}
|
{{- $ksServiceJob := dict "envAll" . "serviceName" "cinder" "serviceTypes" ( tuple "volumev3" ) -}}
|
||||||
{{- if .Values.manifests.certificates -}}
|
{{- if .Values.manifests.certificates -}}
|
||||||
{{- $_ := set $ksServiceJob "tlsSecret" .Values.secrets.tls.volume.api.internal -}}
|
{{- $_ := set $ksServiceJob "tlsSecret" .Values.secrets.tls.volumev3.api.internal -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{- if .Values.helm3_hook }}
|
{{- if .Values.helm3_hook }}
|
||||||
{{- $_ := set $ksServiceJob "jobAnnotations" (include "metadata.annotations.job.ks_service" . | fromYaml) }}
|
{{- $_ := set $ksServiceJob "jobAnnotations" (include "metadata.annotations.job.ks_service" . | fromYaml) }}
|
||||||
|
@ -20,7 +20,7 @@ helm.sh/hook-weight: "-1"
|
|||||||
{{- if .Values.manifests.job_ks_user }}
|
{{- if .Values.manifests.job_ks_user }}
|
||||||
{{- $ksUserJob := dict "envAll" . "serviceName" "cinder" -}}
|
{{- $ksUserJob := dict "envAll" . "serviceName" "cinder" -}}
|
||||||
{{- if .Values.manifests.certificates -}}
|
{{- if .Values.manifests.certificates -}}
|
||||||
{{- $_ := set $ksUserJob "tlsSecret" .Values.secrets.tls.volume.api.internal -}}
|
{{- $_ := set $ksUserJob "tlsSecret" .Values.secrets.tls.volumev3.api.internal -}}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
{{- if .Values.helm3_hook }}
|
{{- if .Values.helm3_hook }}
|
||||||
{{- $_ := set $ksUserJob "jobAnnotations" (include "metadata.annotations.job.ks_user" . | fromYaml) }}
|
{{- $_ := set $ksUserJob "jobAnnotations" (include "metadata.annotations.job.ks_user" . | fromYaml) }}
|
||||||
|
@ -50,7 +50,7 @@ spec:
|
|||||||
mountPath: /tmp/ks-user.sh
|
mountPath: /tmp/ks-user.sh
|
||||||
subPath: ks-user.sh
|
subPath: ks-user.sh
|
||||||
readOnly: true
|
readOnly: true
|
||||||
{{ dict "enabled" .Values.manifests.certificates "name" $envAll.Values.secrets.tls.volume.api.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 8 }}
|
{{ dict "enabled" .Values.manifests.certificates "name" $envAll.Values.secrets.tls.volumev3.api.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 8 }}
|
||||||
env:
|
env:
|
||||||
{{- with $env := dict "ksUserSecret" .Values.secrets.identity.admin "useCA" .Values.manifests.certificates }}
|
{{- with $env := dict "ksUserSecret" .Values.secrets.identity.admin "useCA" .Values.manifests.certificates }}
|
||||||
{{- include "helm-toolkit.snippets.keystone_openrc_env_vars" $env | indent 8 }}
|
{{- include "helm-toolkit.snippets.keystone_openrc_env_vars" $env | indent 8 }}
|
||||||
@ -90,7 +90,7 @@ spec:
|
|||||||
readOnly: true
|
readOnly: true
|
||||||
- name: rally-db
|
- name: rally-db
|
||||||
mountPath: /var/lib/rally
|
mountPath: /var/lib/rally
|
||||||
{{ dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 8 }}
|
{{ dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 8 }}
|
||||||
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
|
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
|
||||||
volumes:
|
volumes:
|
||||||
- name: pod-tmp
|
- name: pod-tmp
|
||||||
@ -105,6 +105,6 @@ spec:
|
|||||||
defaultMode: 0555
|
defaultMode: 0555
|
||||||
- name: rally-db
|
- name: rally-db
|
||||||
emptyDir: {}
|
emptyDir: {}
|
||||||
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volume.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 4 }}
|
{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.volumev3.api.internal | include "helm-toolkit.snippets.tls_volume" | indent 4 }}
|
||||||
{{ if $mounts_tests.volumes }}{{ toYaml $mounts_tests.volumes | indent 4 }}{{ end }}
|
{{ if $mounts_tests.volumes }}{{ toYaml $mounts_tests.volumes | indent 4 }}{{ end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -13,5 +13,5 @@ limitations under the License.
|
|||||||
*/}}
|
*/}}
|
||||||
|
|
||||||
{{- if .Values.manifests.secret_ingress_tls }}
|
{{- if .Values.manifests.secret_ingress_tls }}
|
||||||
{{- include "helm-toolkit.manifests.secret_ingress_tls" ( dict "envAll" . "backendServiceType" "volume" ) }}
|
{{- include "helm-toolkit.manifests.secret_ingress_tls" ( dict "envAll" . "backendServiceType" "volumev3" ) }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -18,11 +18,11 @@ limitations under the License.
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Service
|
kind: Service
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ tuple "volume" "internal" . | include "helm-toolkit.endpoints.hostname_short_endpoint_lookup" }}
|
name: {{ tuple "volumev3" "internal" . | include "helm-toolkit.endpoints.hostname_short_endpoint_lookup" }}
|
||||||
spec:
|
spec:
|
||||||
ports:
|
ports:
|
||||||
- name: c-api
|
- name: c-api
|
||||||
port: {{ tuple "volume" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
port: {{ tuple "volumev3" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
||||||
{{ if .Values.network.api.node_port.enabled }}
|
{{ if .Values.network.api.node_port.enabled }}
|
||||||
nodePort: {{ .Values.network.api.node_port.port }}
|
nodePort: {{ .Values.network.api.node_port.port }}
|
||||||
{{ end }}
|
{{ end }}
|
||||||
|
@ -13,6 +13,6 @@ limitations under the License.
|
|||||||
*/}}
|
*/}}
|
||||||
|
|
||||||
{{- if and .Values.manifests.service_ingress_api .Values.network.api.ingress.public }}
|
{{- if and .Values.manifests.service_ingress_api .Values.network.api.ingress.public }}
|
||||||
{{- $serviceIngressOpts := dict "envAll" . "backendServiceType" "volume" -}}
|
{{- $serviceIngressOpts := dict "envAll" . "backendServiceType" "volumev3" -}}
|
||||||
{{ $serviceIngressOpts | include "helm-toolkit.manifests.service_ingress" }}
|
{{ $serviceIngressOpts | include "helm-toolkit.manifests.service_ingress" }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -410,19 +410,7 @@ conf:
|
|||||||
composite:osapi_volume:
|
composite:osapi_volume:
|
||||||
use: call:cinder.api:root_app_factory
|
use: call:cinder.api:root_app_factory
|
||||||
/: apiversions
|
/: apiversions
|
||||||
/v1: openstack_volume_api_v1
|
|
||||||
/v2: openstack_volume_api_v2
|
|
||||||
/v3: openstack_volume_api_v3
|
/v3: openstack_volume_api_v3
|
||||||
composite:openstack_volume_api_v1:
|
|
||||||
use: call:cinder.api.middleware.auth:pipeline_factory
|
|
||||||
noauth: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv1
|
|
||||||
keystone: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv1
|
|
||||||
keystone_nolimit: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv1
|
|
||||||
composite:openstack_volume_api_v2:
|
|
||||||
use: call:cinder.api.middleware.auth:pipeline_factory
|
|
||||||
noauth: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv2
|
|
||||||
keystone: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv2
|
|
||||||
keystone_nolimit: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler authtoken audit keystonecontext apiv2
|
|
||||||
composite:openstack_volume_api_v3:
|
composite:openstack_volume_api_v3:
|
||||||
use: call:cinder.api.middleware.auth:pipeline_factory
|
use: call:cinder.api.middleware.auth:pipeline_factory
|
||||||
noauth: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv3
|
noauth: cors http_proxy_to_wsgi request_id faultwrap sizelimit osprofiler noauth apiv3
|
||||||
@ -443,10 +431,6 @@ conf:
|
|||||||
paste.filter_factory: cinder.api.middleware.auth:NoAuthMiddleware.factory
|
paste.filter_factory: cinder.api.middleware.auth:NoAuthMiddleware.factory
|
||||||
filter:sizelimit:
|
filter:sizelimit:
|
||||||
paste.filter_factory: oslo_middleware.sizelimit:RequestBodySizeLimiter.factory
|
paste.filter_factory: oslo_middleware.sizelimit:RequestBodySizeLimiter.factory
|
||||||
app:apiv1:
|
|
||||||
paste.app_factory: cinder.api.v1.router:APIRouter.factory
|
|
||||||
app:apiv2:
|
|
||||||
paste.app_factory: cinder.api.v2.router:APIRouter.factory
|
|
||||||
app:apiv3:
|
app:apiv3:
|
||||||
paste.app_factory: cinder.api.v3.router:APIRouter.factory
|
paste.app_factory: cinder.api.v3.router:APIRouter.factory
|
||||||
pipeline:apiversions:
|
pipeline:apiversions:
|
||||||
@ -594,8 +578,7 @@ conf:
|
|||||||
types: type
|
types: type
|
||||||
volumes: volume
|
volumes: volume
|
||||||
service_endpoints:
|
service_endpoints:
|
||||||
volume: service/storage/block
|
volumev3: service/storage/block
|
||||||
volumev2: service/storage/block
|
|
||||||
cinder_sudoers: |
|
cinder_sudoers: |
|
||||||
# This sudoers file supports rootwrap for both Kolla and LOCI Images.
|
# This sudoers file supports rootwrap for both Kolla and LOCI Images.
|
||||||
Defaults !requiretty
|
Defaults !requiretty
|
||||||
@ -1135,7 +1118,7 @@ dependencies:
|
|||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: identity
|
service: identity
|
||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: volume
|
service: volumev3
|
||||||
backup_storage_init:
|
backup_storage_init:
|
||||||
jobs: null
|
jobs: null
|
||||||
bootstrap:
|
bootstrap:
|
||||||
@ -1143,7 +1126,7 @@ dependencies:
|
|||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: identity
|
service: identity
|
||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: volume
|
service: volumev3
|
||||||
pod:
|
pod:
|
||||||
- requireSameNode: false
|
- requireSameNode: false
|
||||||
labels:
|
labels:
|
||||||
@ -1194,7 +1177,7 @@ dependencies:
|
|||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: identity
|
service: identity
|
||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: volume
|
service: volumev3
|
||||||
storage_init:
|
storage_init:
|
||||||
jobs: null
|
jobs: null
|
||||||
tests:
|
tests:
|
||||||
@ -1202,7 +1185,7 @@ dependencies:
|
|||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: identity
|
service: identity
|
||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: volume
|
service: volumev3
|
||||||
volume:
|
volume:
|
||||||
jobs:
|
jobs:
|
||||||
- cinder-db-sync
|
- cinder-db-sync
|
||||||
@ -1214,7 +1197,7 @@ dependencies:
|
|||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: identity
|
service: identity
|
||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: volume
|
service: volumev3
|
||||||
volume_usage_audit:
|
volume_usage_audit:
|
||||||
jobs:
|
jobs:
|
||||||
- cinder-db-sync
|
- cinder-db-sync
|
||||||
@ -1226,7 +1209,7 @@ dependencies:
|
|||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: identity
|
service: identity
|
||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: volume
|
service: volumev3
|
||||||
image_repo_sync:
|
image_repo_sync:
|
||||||
services:
|
services:
|
||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
@ -1253,7 +1236,7 @@ secrets:
|
|||||||
admin: cinder-rabbitmq-admin
|
admin: cinder-rabbitmq-admin
|
||||||
cinder: cinder-rabbitmq-user
|
cinder: cinder-rabbitmq-user
|
||||||
tls:
|
tls:
|
||||||
volume:
|
volumev3:
|
||||||
api:
|
api:
|
||||||
public: cinder-tls-public
|
public: cinder-tls-public
|
||||||
internal: cinder-tls-api
|
internal: cinder-tls-api
|
||||||
@ -1343,52 +1326,8 @@ endpoints:
|
|||||||
api:
|
api:
|
||||||
default: 9191
|
default: 9191
|
||||||
public: 80
|
public: 80
|
||||||
volume:
|
|
||||||
name: cinder
|
|
||||||
hosts:
|
|
||||||
default: cinder-api
|
|
||||||
public: cinder
|
|
||||||
host_fqdn_override:
|
|
||||||
default: null
|
|
||||||
# NOTE(portdirect): this chart supports TLS for fqdn over-ridden public
|
|
||||||
# endpoints using the following format:
|
|
||||||
# public:
|
|
||||||
# host: null
|
|
||||||
# tls:
|
|
||||||
# crt: null
|
|
||||||
# key: null
|
|
||||||
path:
|
|
||||||
default: '/v1/%(tenant_id)s'
|
|
||||||
scheme:
|
|
||||||
default: 'http'
|
|
||||||
port:
|
|
||||||
api:
|
|
||||||
default: 8776
|
|
||||||
public: 80
|
|
||||||
volumev2:
|
|
||||||
name: cinderv2
|
|
||||||
hosts:
|
|
||||||
default: cinder-api
|
|
||||||
public: cinder
|
|
||||||
host_fqdn_override:
|
|
||||||
default: null
|
|
||||||
# NOTE(portdirect): this chart supports TLS for fqdn over-ridden public
|
|
||||||
# endpoints using the following format:
|
|
||||||
# public:
|
|
||||||
# host: null
|
|
||||||
# tls:
|
|
||||||
# crt: null
|
|
||||||
# key: null
|
|
||||||
path:
|
|
||||||
default: '/v2/%(tenant_id)s'
|
|
||||||
scheme:
|
|
||||||
default: 'http'
|
|
||||||
port:
|
|
||||||
api:
|
|
||||||
default: 8776
|
|
||||||
public: 80
|
|
||||||
volumev3:
|
volumev3:
|
||||||
name: cinderv3
|
name: cinder
|
||||||
hosts:
|
hosts:
|
||||||
default: cinder-api
|
default: cinder-api
|
||||||
public: cinder
|
public: cinder
|
||||||
|
@ -33,7 +33,7 @@ conf:
|
|||||||
ThreadLimit 720
|
ThreadLimit 720
|
||||||
</IfModule>
|
</IfModule>
|
||||||
wsgi_cinder: |
|
wsgi_cinder: |
|
||||||
{{- $portInt := tuple "volume" "internal" "api" $ | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
{{- $portInt := tuple "volumev3" "internal" "api" $ | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
||||||
Listen {{ $portInt }}
|
Listen {{ $portInt }}
|
||||||
<VirtualHost *:{{ $portInt }}>
|
<VirtualHost *:{{ $portInt }}>
|
||||||
ServerName {{ printf "%s.%s.svc.%s" "cinder-api" .Release.Namespace .Values.endpoints.cluster_domain_suffix }}
|
ServerName {{ printf "%s.%s.svc.%s" "cinder-api" .Release.Namespace .Values.endpoints.cluster_domain_suffix }}
|
||||||
@ -95,34 +95,6 @@ endpoints:
|
|||||||
port:
|
port:
|
||||||
api:
|
api:
|
||||||
public: 443
|
public: 443
|
||||||
volume:
|
|
||||||
host_fqdn_override:
|
|
||||||
default:
|
|
||||||
tls:
|
|
||||||
secretName: cinder-tls-api
|
|
||||||
issuerRef:
|
|
||||||
name: ca-issuer
|
|
||||||
kind: ClusterIssuer
|
|
||||||
scheme:
|
|
||||||
default: https
|
|
||||||
internal: https
|
|
||||||
port:
|
|
||||||
api:
|
|
||||||
public: 443
|
|
||||||
volumev2:
|
|
||||||
host_fqdn_override:
|
|
||||||
default:
|
|
||||||
tls:
|
|
||||||
secretName: cinder-tls-api
|
|
||||||
issuerRef:
|
|
||||||
name: ca-issuer
|
|
||||||
kind: ClusterIssuer
|
|
||||||
scheme:
|
|
||||||
default: https
|
|
||||||
internal: https
|
|
||||||
port:
|
|
||||||
api:
|
|
||||||
public: 443
|
|
||||||
volumev3:
|
volumev3:
|
||||||
host_fqdn_override:
|
host_fqdn_override:
|
||||||
default:
|
default:
|
||||||
|
@ -1019,10 +1019,8 @@ Update script overrides as following:
|
|||||||
| ID | Name | Type |
|
| ID | Name | Type |
|
||||||
+----------------------------------+----------+--------------+
|
+----------------------------------+----------+--------------+
|
||||||
| 0eddeb6af4fd43ea8f73f63a1ae01438 | swift | object-store |
|
| 0eddeb6af4fd43ea8f73f63a1ae01438 | swift | object-store |
|
||||||
| 66bd0179eada4ab8899a58356fd4d508 | cinder | volume |
|
|
||||||
| 67cc6b945e934246b25d31a9374a64af | keystone | identity |
|
| 67cc6b945e934246b25d31a9374a64af | keystone | identity |
|
||||||
| 81a61ec8eff74070bb3c2f0118c1bcd5 | glance | image |
|
| 81a61ec8eff74070bb3c2f0118c1bcd5 | glance | image |
|
||||||
| c126046fc5ec4c52acfc8fee0e2f4dda | cinderv2 | volumev2 |
|
|
||||||
| f89b99a31a124b7790e3bb60387380b1 | cinderv3 | volumev3 |
|
| f89b99a31a124b7790e3bb60387380b1 | cinderv3 | volumev3 |
|
||||||
+----------------------------------+----------+--------------+
|
+----------------------------------+----------+--------------+
|
||||||
+ sleep 30
|
+ sleep 30
|
||||||
|
@ -28,4 +28,5 @@ cinder:
|
|||||||
- 0.2.9 Mount rabbitmq TLS secret for audit usage cronjob
|
- 0.2.9 Mount rabbitmq TLS secret for audit usage cronjob
|
||||||
- 0.2.10 Helm 3 - Fix Job Labels
|
- 0.2.10 Helm 3 - Fix Job Labels
|
||||||
- 0.2.11 Update htk requirements repo
|
- 0.2.11 Update htk requirements repo
|
||||||
|
- 0.2.12 Remove cinder v1/v2 defaults
|
||||||
...
|
...
|
||||||
|
@ -281,38 +281,6 @@ $(cat ${GLANCE_API_CRT} | sed 's/^/ /')
|
|||||||
key: |
|
key: |
|
||||||
$(cat ${GLANCE_API_KEY} | sed 's/^/ /')
|
$(cat ${GLANCE_API_KEY} | sed 's/^/ /')
|
||||||
ca: |
|
ca: |
|
||||||
$(cat ${OSH_CA_ROOT}/ca.pem | sed 's/^/ /')
|
|
||||||
volume:
|
|
||||||
scheme:
|
|
||||||
public: https
|
|
||||||
port:
|
|
||||||
api:
|
|
||||||
public: 443
|
|
||||||
host_fqdn_override:
|
|
||||||
public:
|
|
||||||
host: "$(cat "${CINDER_CSR}" | jq -r '.CN')"
|
|
||||||
tls:
|
|
||||||
crt: |
|
|
||||||
$(cat ${CINDER_CRT} | sed 's/^/ /')
|
|
||||||
key: |
|
|
||||||
$(cat ${CINDER_KEY} | sed 's/^/ /')
|
|
||||||
ca: |
|
|
||||||
$(cat ${OSH_CA_ROOT}/ca.pem | sed 's/^/ /')
|
|
||||||
volumev2:
|
|
||||||
scheme:
|
|
||||||
public: https
|
|
||||||
port:
|
|
||||||
api:
|
|
||||||
public: 443
|
|
||||||
host_fqdn_override:
|
|
||||||
public:
|
|
||||||
host: "$(cat "${CINDER_CSR}" | jq -r '.CN')"
|
|
||||||
tls:
|
|
||||||
crt: |
|
|
||||||
$(cat ${CINDER_CRT} | sed 's/^/ /')
|
|
||||||
key: |
|
|
||||||
$(cat ${CINDER_KEY} | sed 's/^/ /')
|
|
||||||
ca: |
|
|
||||||
$(cat ${OSH_CA_ROOT}/ca.pem | sed 's/^/ /')
|
$(cat ${OSH_CA_ROOT}/ca.pem | sed 's/^/ /')
|
||||||
volumev3:
|
volumev3:
|
||||||
scheme:
|
scheme:
|
||||||
|
Loading…
x
Reference in New Issue
Block a user