diff --git a/placement/values_overrides/netpol.yaml b/placement/values_overrides/netpol.yaml new file mode 100644 index 0000000000..889f1217b6 --- /dev/null +++ b/placement/values_overrides/netpol.yaml @@ -0,0 +1,18 @@ +manifests: + network_policy: true +network_policy: + placement: + egress: + - {} + ingress: + - from: + - podSelector: + matchLabels: + application: nova + ports: + - protocol: TCP + port: 8778 + - protocol: TCP + port: 80 + - protocol: TCP + port: 8080 diff --git a/zuul.d/jobs-openstack-helm.yaml b/zuul.d/jobs-openstack-helm.yaml index 0d96646bb0..75eca2a65f 100644 --- a/zuul.d/jobs-openstack-helm.yaml +++ b/zuul.d/jobs-openstack-helm.yaml @@ -287,6 +287,39 @@ - ./tools/deployment/developer/common/170-setup-gateway.sh - ./tools/deployment/developer/common/900-use-it.sh +- job: + name: openstack-helm-netpol-compute-kit-train + parent: openstack-helm-chart-deploy + timeout: 7200 + run: tools/gate/playbooks/osh-gate-runner.yaml + vars: + osh_params: + openstack_release: train + container_distro_name: ubuntu + container_distro_version: bionic + feature_gates: netpol + gate_scripts: + - ./tools/deployment/common/install-packages.sh + - ./tools/deployment/common/deploy-k8s.sh + - ./tools/deployment/common/setup-client.sh + - ./tools/deployment/component/common/ingress.sh + - ./tools/deployment/common/lockdown-netpol.sh + - ./tools/deployment/component/common/mariadb.sh + - ./tools/deployment/component/common/memcached.sh + - ./tools/deployment/component/common/rabbitmq.sh + - ./tools/deployment/component/nfs-provisioner/nfs-provisioner.sh + - ./tools/deployment/component/keystone/keystone.sh + - ./tools/deployment/component/heat/heat.sh + - ./tools/deployment/component/glance/glance.sh + - ./tools/deployment/component/compute-kit/openvswitch.sh + - ./tools/deployment/component/compute-kit/libvirt.sh + - ./tools/deployment/component/compute-kit/compute-kit.sh + - ./tools/deployment/developer/common/170-setup-gateway.sh + - ./tools/deployment/component/horizon/horizon.sh + - ./tools/deployment/common/openstack-exporter.sh + - ./tools/deployment/developer/common/900-use-it.sh + - ./tools/deployment/common/test-networkpolicy.sh + - job: name: openstack-helm-netpol-compute-kit parent: openstack-helm-chart-deploy diff --git a/zuul.d/project.yaml b/zuul.d/project.yaml index c304f12335..c4925e403b 100644 --- a/zuul.d/project.yaml +++ b/zuul.d/project.yaml @@ -47,6 +47,7 @@ - openstack-helm-apparmor: voting: false - openstack-helm-netpol-compute-kit + - openstack-helm-netpol-compute-kit-train - openstack-helm-netpol-cinder gate: jobs: