32 Commits

Author SHA1 Message Date
Pete Birley
0252ca776e Nova: Move Libvirt into its own chart
This PS moves libvirt into its own chart - decoupling it from nova,
both making it easier to deploy and use seperately and permitting
use of other compute backends.

Partially implements: blueprint split-nova-and-neutron-infra

Change-Id: I06237157244c3cdb5503eafa01229d061b1614f0
2017-08-29 23:50:08 -05:00
Pete Birley
54599a8fb6 Security: Container user and rootwrap for nova
This PS adds user control for the service user and rootwrap for
the Nova chart.

Change-Id: I3012e2e83e5a44c7093049b68b3d89d4c2c1ed26
2017-08-28 14:49:43 +00:00
Pete Birley
0251c099ba Nova: Support Cinder Volume Attachement using Ceph Backend
This PS enables cinder volume attachment for nova when used with ceph.

Change-Id: I9772f38fb3a1a9af26bd92ee18a651d3372de64c
2017-08-25 14:07:34 -05:00
Jenkins
ddc3ca4b23 Merge "Nova: Fix libvirtd PID check and error reporting" 2017-08-23 01:44:31 +00:00
Craig Anderson
1080c9e5be Nova: Fix libvirtd PID check and error reporting
Prevent false positive container exit from recycled libvirtd PID.

Clarify error log message and fix exit code typo.

Closes-Bug: #1711480
Change-Id: I47a7fdcb40b5c8153cf428e6863b618301abfd7c
2017-08-22 20:12:58 +00:00
Pete Birley
2114e907bf Nova: Break out NoVNC assets from the proxy process
This PS seperates the NoVNC assets from the container serving the
NoVNC Proxy process - meaning images other than kolla or those
built from disto packages can be used without modification.

Change-Id: I8b363db9d4166ae2d5e85d135e488402ffb14f41
2017-08-21 00:13:44 +00:00
Pete Birley
794d11ce69 Nova: remove hardcoded debug for API service
This PS removes the hardcoded debug flag on the api service.

Change-Id: I8413cb832be57e32af29d02b2aae322a250ecb34
2017-08-14 08:30:56 -05:00
Pete Birley
ff8744a9b9 Licence: Remove licence header from rendered files
This PS removes the licence header from rendered output from tiller,
significantly reducing the configmap size of charts deployed to the
cluster.

Change-Id: I5d1b246f2068f3b83bf59ba79fe8b88bbc9a6161
2017-08-07 17:16:13 -05:00
Pete Birley
8f9945f6fd Nova: Update bootstrap job
This PS updates the nova boostrap job, both bringing it inline with
other services and also adding the default flavours from Mitaka.
By setting the m1.tiny size to match the upstream it is expected
that the majority of gate failures will be solved - as many of the
VMs in nodepool do not have 20GB of free space on the rootfs.

Change-Id: I767795015422a1b326a6f34b5a3f50bf41a0ca4b
2017-07-29 23:51:47 -05:00
Jawon Choo
478dae3943 add novncproxy deployment on nova chart
This PS adds a novncproxy deployment on nova chart and fixes a bug
about keystone memcached configration.

Change-Id: I44a8571e7da2dc4a431631e6e3a96b16e7242fd3
Closes-Bug: #1698033
Implements: blueprint add-novncproxy
2017-07-05 18:03:30 +09:00
Pete Birley
c0cf2337a2 Ingress controller for public endpoints
This PS provides the framework for Ingress controller based access to
public APIs.

Services covered:
 * Barbican
 * Cinder
 * Glance
 * Heat
 * Horizon
 * Keystone
 * Magnum
 * Mistral
 * Neutron
 * Nova
 * Senlin

Change-Id: I82d55f6ca41859ebed3312ec7d95b353df09e772
Implements: blueprint api-ingress
External-Tracking-Id: OSH-58, OSH-62
2017-06-28 17:37:10 -05:00
Pete Birley
8ef5d94674 Refactor Ceph secret generation
This PS refactors the ceph chart and secret generation process.
The updated chart replaces the existing "bootstrap" chart.
Additionally, Ceph manifests and deployment guides were modified
accordingly.

Change-Id: I6f5bb88fc0f40cfee8865d9dab83859d765e7537
Co-Authored-By: Larry Rensing <lr699s@att.com>
2017-06-27 13:42:03 -05:00
Chris Wedgwood
c8c1a818b4 [Nova] Use helm values to set libvirt logging/debugging
Use chart values to set control logging.  Reduce the default logging
to warnings and errors.

Change-Id: I52b3c65513a0f3b9de02eff2b1c76ffcb7c1fba2
2017-06-20 05:30:52 +00:00
Pete Birley
d8e4890772 Nova: remove requirement for NET_ADMIN capability for Nova Metadata
This PS removes the requirement for the Nova Metadata API to run with
NET_ADMIN capabilities, and also enables lightwight images without
iptables present to be used.

This has no effect on operation if Neutron is used for networking.

Change-Id: Ie69c74240ca7fd054e3c897c2bf8ebc8ec5c1377
2017-06-12 04:49:13 +00:00
Dae Seong Kim
3f98813b1e libvirtd pod is not starting when Ceph is enabled
When trying to install nova chart with Ceph enabled, libvirtd pod isn't
starting. It's because container is executing virsh commands before
libvirtd process is up. _libvirt.sh.tpl script needs to be fixed to
start the process first and then execute the commands.

Closes-Bug: #1691384
Change-Id: Icd5f31a5fbeb5985ed19213aeb236a25f600b18c
2017-06-09 19:00:07 +00:00
Pete Birley
0df7427dc4 Refactor start scripts, to support graceful termination
This PS add Barbican support, and moves all potentially container
specific logic into the service start script from the api manifests.

Also fixes a permissions issue with the nova-api, which incorrectly
had the NET_ADMIN capability.

Change-Id: I18fc1ea5d7aa70ea7dabb829361a3da57e905100
2017-06-05 17:37:22 -05:00
Pete Birley
3d7b289719 Nova: Implement MVP config
This PS brings in an MVP config for Nova.

The changes to the Libvirt also permit operation on
RHEL family distros.

Closes-Bug: 1683195

Change-Id: I4ce8c9bd53164f1be719271e095edc31e2f3ae4b
2017-05-02 03:23:05 -05:00
Pete Birley
60d01e54cc Nova: move to startup scripts.
This PS moves the container start commands to scripts, which makes
debugging and overriding of container launch params easier.

Change-Id: Ibf5cda2218111360183b8a5eb993c717be84076c
2017-05-01 11:50:39 -05:00
Pete Birley
93e3297a2f Update Nova DB-Init jobs to match other services
This commit updates the Nova DB init jobs to match those of other
OpenStack Helm Services, it completes the work to move away from
Ansible for DB management.

Change-Id: I2e53846f917a56448392cfebe5d8548f96e3eed2
2017-04-11 15:47:12 -05:00
Alan Meadows
16508c32ee Nova Configuration Override (#319)
* Initial Commit of Nova Configuration Overrides

This commit is an evolution of the initial keystone configuration
overrides work

It expands upon that work by introducing many of the same concepts
into nova.  It differs in that a few concepts were changed.  Namely
the helm-toolkit/_oslo.tpl concept was abandoned, as there are too
many unique oslo paths for configuration elements, so dynamic oslo
setting mechanism was moved locally into configmap-etc.yaml, where
it is generally used.

Secondly, in nova the mount override effort was altered to instead
provide mount "append" capability.  Keeping the manifest mounts
closer to the actual pod, and keeping values.yaml a tad smaller.
This still allows the original flexibility of operators adding
mounts, but they cannot "undo" any of the charts built in mounts.

There were several manual tweaks that needd to be done to _nova.conf.tpl
after the oslo-config-gen process this time.  This is because there is a
bug in the newton version of generating this file. It does not include
the proper service authentication credentials in the [keystone_authtoken]
section.  Future releases have a separate service credentials section
so future config generations will likely not need these added lines.

* Remove unused values.yaml parameters

Fix references to removed helm-toolkit oslo macro

* resolve nova feedback

* bugfix nova-etc/nova-bin swap
2017-04-10 14:41:41 -05:00
Larry Rensing
afcf1c9848 feat: adding flavor bootstrap for nova (#290)
* adding flavor bootstrap for nova

* now using openstack cli, changed bootstrap job logic
2017-04-01 09:38:49 -07:00
Pete Birley
38407e9378 Update Nova Keystone Jobs 2017-03-14 09:54:35 -05:00
Pete Birley
6b552087aa Fix post.sh for Nova with KS Endpoint type lookup function 2017-03-07 01:36:13 +00:00
Pete Birley
5b77f5d4de KS endpoint type lookup for Nova 2017-03-07 00:43:13 +00:00
wilkers-steve
5f0ffce99b Remove lost "Hello World" message (#229)
Someone misplaced their "Hello World" debug message. It's been
removed and returned to its owner
2017-02-23 14:28:06 -05:00
Brandon B. Jozsa
3099ccc649 add license headers to nova 2017-02-17 13:53:51 -05:00
Pete Birley
116931bb51 Rename common chart, and update all references to functions within it. (#167)
* Rename common chart to helm-toolkit

* Update useage of helpers to include reference to chart they come from.

* Update helm-toolkit function naming

Also catches several functions missed in previous PS

* Update remaining requirements.yaml to use helm-toolbox

* Dep Check container fix for common -> helm-toolbox renaming
2017-02-14 16:52:38 -08:00
Alan Meadows
db0db427ee Critical fixes required for 0.1.0 tagging
* Add imagePullPolicy to ceph with default

* Add imagePullPolicy to mariadb with default

* Add missing imagePullPolicies to nova with defaults

* Remove malfunctioning daemonset dependency from nova

* Add missing neutron endpoint definition to nova values

* Force v4 networking in ceph.  Repeated bootstrapping
  is unreliable without this.

* Update cinder dependencies based on testing

* Optonal Horizon NodePort

* Revert iptables stub for nova-api-osapi because
  we lack permississions to overwrite /sbin/iptables. We
  will continue to run in a privileged security context
  until we have a working solution.
2017-01-12 14:51:36 -08:00
Alan Meadows
bab75eff7f Keep consistent with our set -ex approach on all shell scripts 2017-01-09 08:36:08 -08:00
Alan Meadows
943b5a3706 Bugfix missing space to start nove-api 2017-01-09 08:22:25 -08:00
Alan Meadows
88a85ae7d5 Implement requested feedback in PR#91
- Split out osapi and metadata api to remove unnecessary security privileges

- Prune dependencies

- Fix static imagePullPolicies

- Remove extraneous start.sh imported accidently from keystone chart
2017-01-09 07:49:44 -08:00
Alan Meadows
8afa729ffb OpenStack Nova Helm Chart Initial Commit
This is an initial commit of a functional nova chart.  It has been
tested with the neutron chart using a flat network configuration.
2017-01-04 13:19:04 -08:00