1135 Commits

Author SHA1 Message Date
Jenkins
53c5679b17 Merge "Wait for libvirtd socket to be available" 2017-08-31 21:42:01 +00:00
Pete Birley
bede94c835 Endpoint lookup namespace and fqdn support
This PS adds namespace and fqdn support to endpoint lookup functions,
it also permits over-riding of the puplic endpoint for ingress.

Change-Id: Ib61c5c00a214d75fe85fbffe9080c2ae88bd8cb9
2017-08-31 19:06:33 +00:00
Chris Wedgwood
bfd9cb8655 Wait for libvirtd socket to be available
There is a race where the libvirtd.pid file appears but the socket has
not (yet) been created; this adds a timeout-loop waiting specifically
for the socket.

Change-Id: Ib2ede3b8d5c49bc650bf8a64cbffc03444bb2dd0
2017-08-31 17:24:47 +00:00
Jenkins
cb8efbd954 Merge "Prevent kubeadm-aio being run as root." 2017-08-31 03:32:27 +00:00
Craig Anderson
862960dac3 Prevent kubeadm-aio being run as root.
Prevent duplicate docker mounts by disallowing root in kubeadm-aio.

Change-Id: I3e743a0d82e03b9d2ffb3af685c27dd15415ab81
Closes-Bug: #1711744
2017-08-30 10:19:11 -07:00
Pete Birley
37b099e320 Neutron: Move OpenVSwitch into its own chart
This PS moves OpenVSwitch into its own chart - decoupling it from neutron,
both making it easier to deploy and use seperately and permitting
use of other network backends.

Partially implements: blueprint split-nova-and-neutron-infra

Change-Id: Ifd637136b950ddf1ba1c26ce76c9bbdeafc232c3
2017-08-30 16:01:29 +00:00
Pete Birley
0252ca776e Nova: Move Libvirt into its own chart
This PS moves libvirt into its own chart - decoupling it from nova,
both making it easier to deploy and use seperately and permitting
use of other compute backends.

Partially implements: blueprint split-nova-and-neutron-infra

Change-Id: I06237157244c3cdb5503eafa01229d061b1614f0
2017-08-29 23:50:08 -05:00
Jenkins
84eecc457e Merge "Horizon: add policy override and make chart image agnostic" 2017-08-30 01:56:43 +00:00
Pete Birley
3469b22d1c Horizon: add policy override and make chart image agnostic
This PS makes horizon image agnostic and also use PyMySQL for the
database backend, in addition to making the policy fully configurable.

Change-Id: I95f269139539a9397c3cc05327f02dd28ee4917c
2017-08-29 21:59:05 +00:00
Jenkins
0e4fe36849 Merge "Ingress: Disable resource constraints by default" 2017-08-29 15:13:19 +00:00
Jenkins
38cc836bab Merge "Neutron: add linuxbridge daemonset and config script" 2017-08-29 13:43:21 +00:00
Pete Birley
fb8313e0aa Ingress: Disable resource constraints by default
This ps disables the resouce constraints upon the ingress controller
which was accently left on by default.

Change-Id: I573a4c52f727570aafcd4a1eb16c5c13131323a8
2017-08-29 13:35:00 +00:00
Jenkins
774c34176d Merge "Security: Add Pod user to missed services" 2017-08-29 11:25:46 +00:00
Artur Korzeniewski
aaedb4a150 Neutron: add linuxbridge daemonset and config script
Adding daemonset for Linux bridge. Using node selector
"linuxbridge enabled".

network.backend added in neutron/values.yaml to support scenario for
different SDNs using the same networking software, like OVS is used
for reference Neutron L2 agent, ODL, OVN and SONA. The other option for
network.backend can be linuxbridge and calico.
network.backend impacts configuration of DHCP, L3 and metadata agents.
Those agents are dependent on ovsdb_connection flag (officially it is
placed in openvswitch_agent.ini file).

Added daemonset_lb_agent flag in manifests section. Currently
OVS and LinuxBridge L2 agents can be turned on/off to be deployed.
OVS L2 agent and OVS as a network virtualization SW can be deployed
independently.

Removed conf.neutron.default.neutron.interface_driver, since it was not
used anywhere.

Marked places in neutron/values.yaml where changes are needed in order
to use linuxbridge for:
- neutron.conf interface_driver
- ML2 mechanism driver
- dhcp and l3 agents interface_driver

Added example of neutron values overrides in:
tools/overrides/mvp/neutron-linuxbridge.yaml

Change-Id: I7cdcfaa9a73af392a0d45f7df29b7b3ae3cc4c76
Implements: blueprint support-linux-bridge-on-neutron
2017-08-29 11:51:42 +02:00
Pete Birley
ceb30e8cc7 Jobs: Consoloate on heat-engine for admin jobs where possible.
This ps moves to use a container sultaible for use as the heat engine
for all possible admin jobs - it is lighter than the kolla-toolbox image
and makes it easy to swap out to other image sets. This is as the heat
engine container should contain the openstack client (with all required
libs for the cloud) and the oslo_db supporting libs required by the db
management jobs, as well as the oslo_messaging libs required for future
rabbitmq management expansion.

Change-Id: I5451c15c8fb49c85b4f254cc60156420bee2efea
2017-08-29 04:34:26 +00:00
Pete Birley
46f9dea2c8 Security: Add Pod user to missed services
This PS adds the pod user to missed services, which is required
for fully agnosic image operation.

Change-Id: I09c481f90b5e6a478e699ebaae51a2316ceb6a8d
2017-08-28 20:19:22 -05:00
Jenkins
10591db58c Merge "Remove local/* reference from documentation" 2017-08-29 00:05:07 +00:00
Jenkins
68ce1ac550 Merge "Magnum: Fix chart decomposition statements" 2017-08-29 00:05:00 +00:00
Jenkins
50760405ce Merge "Keystone: Fix limits and requests for resources" 2017-08-28 22:20:44 +00:00
Jenkins
3f9506ffef Merge "Nova: Mount machine id into compute daemonsets" 2017-08-28 21:18:57 +00:00
Pete Birley
4458e2c9b9 Keystone: Fix limits and requests for resources
There were some erros in the limit and requests for resources in
some of the keystone pods. This PS resolves the issue.

Change-Id: I5f8eed1a22a42621654198ab9b844914ba0aade8
2017-08-28 10:41:36 -05:00
Pete Birley
0f22d2b0e4 Magnum: Fix chart decomposition statements
There were some errors inthe magnum chart decomposition values
and conditionals. This PS resolves them.

Change-Id: Ie3617c7431cf2a3379b5ede8af0838f833d0554c
2017-08-28 10:35:53 -05:00
Pete Birley
d99ac61a0d Nova: Mount machine id into compute daemonsets
This PS mounts the machine id into the compute daemonsets. It is
required for newer verions of libvirt and nova.

Change-Id: I75d3ebe670fe1372eb4b6a7fc90102bee69465bf
2017-08-28 15:19:17 +00:00
Pete Birley
05ab27bff9 Nova: Make policy fully configurable via helm values
This PS moves the nova policy.yaml to be fully driven by gotpl,
allowing full configuration without editing the template.

Change-Id: I0af8693df8b54486e2ba3dbe9eaca8d718d7d022
2017-08-28 10:18:16 -05:00
Jenkins
ebf571fd45 Merge "Security: Make policy fully configurable via helm values" 2017-08-28 15:10:48 +00:00
Jenkins
05753add36 Merge "Cinder: Make policy fully configurable via helm values" 2017-08-28 15:09:46 +00:00
Jenkins
ce1ce138fc Merge "Security: Container user and rootwrap for cinder" 2017-08-28 15:09:40 +00:00
Jenkins
2a08d8cde6 Merge "Security: Container user for support openstack services" 2017-08-28 15:02:22 +00:00
Pete Birley
54599a8fb6 Security: Container user and rootwrap for nova
This PS adds user control for the service user and rootwrap for
the Nova chart.

Change-Id: I3012e2e83e5a44c7093049b68b3d89d4c2c1ed26
2017-08-28 14:49:43 +00:00
Tin Lam
20c0192036 Remove local/* reference from documentation
This patch set removes the "local/CHART" references in the documentation
and replaces it with a reference to a local path.  This was already
updated in gate script.

Change-Id: I1753cb500cbe448a43ede85168d71596de4e08b8
Closes-Bug: #1711733
2017-08-27 17:11:15 +00:00
Pete Birley
7cfd182929 Security: Make policy fully configurable via helm values
This PS moves the policy.json to be fully driven by gotpl,
allowing full configuration without editing the template.

Nova and Cinder are addressed in the seperate patchsets:
 * https://review.openstack.org/#/c/498215/
 * https://review.openstack.org/#/c/498216/

Change-Id: Ia2be5fb4e460d41034fdadbbefc1e48d0869e023
2017-08-26 17:50:22 -05:00
Pete Birley
9457dc6bf7 Cinder: Make policy fully configurable via helm values
This PS moves the cinder policy.json to be fully driven by gotpl,
allowing full configuration without editing the template.

Change-Id: Ib3e9582492231860870c3907ab0983405d88b8c8
2017-08-26 17:31:31 -05:00
Pete Birley
27864cec04 Security: Container user for support openstack services
This PS adds user control for the service user for support openstack
services.

Change-Id: I132511bfc09d20a2f155bb9498a7fe8eeee8b6f9
2017-08-26 22:03:15 +00:00
Pete Birley
3717040f47 Security: Container user and rootwrap for cinder
This PS adds user control for the service user and rootwrap for
the Cinder chart.

Change-Id: Ic4153f91edf57be54ecea29abaa8c8663b3c3a36
2017-08-26 22:02:22 +00:00
Pete Birley
7463058b73 Reduce load in single node gate tests
This PS seeks to reduce the load exerted on the node in the single
node gate test - as a the single node gate is currently broken
due to resource starvation on the nodes.

Change-Id: I34db5108b4abb48bb452eed73067644cc03270c0
2017-08-26 17:01:19 -05:00
Jaesang Lee
59d9c463bd Fix incorrect description
change mis-spelled description in tools/overrides/mvp/cinder.yaml

Change-Id: Ifb4ae667b40418f12ab29654c6a7ff55fad931e1
2017-08-26 17:23:02 +09:00
Pete Birley
0251c099ba Nova: Support Cinder Volume Attachement using Ceph Backend
This PS enables cinder volume attachment for nova when used with ceph.

Change-Id: I9772f38fb3a1a9af26bd92ee18a651d3372de64c
2017-08-25 14:07:34 -05:00
Jenkins
85b6716c49 Merge "Fix for appending custom volumes" 2017-08-25 15:00:10 +00:00
Jenkins
d76fe73b40 Merge "Ceph: update namespace client key script to hard fail sucessfully" 2017-08-25 13:26:47 +00:00
Jenkins
420e37cb7e Merge "Ingress: fix ingress error page backend service" 2017-08-25 13:21:29 +00:00
Jenkins
d04e69c438 Merge "Enable keystonemiddleware cache encryption" 2017-08-25 01:56:10 +00:00
Pete Birley
8b58159e2d Ingress: fix ingress error page backend service
This Ps fixes the ingress error page service, which was not
attaching to the error page pod.

Change-Id: Ia4ce523d0e17a80a0860cf7bdbdc46875b344617
2017-08-25 01:47:22 +00:00
Mateusz Blaszkowski
fc9677f718 Fix for appending custom volumes
Before this change, there was no ability to append custom volume for
any of the services. The reason was a missing new line character, so
the templates were formatted like this:
- name: pod-shared
  mountPath: /tmp/pod-shared - mountPath: /tmp/test2
  name: test2

Apart from that, for some of the services (mostly job-bootstrap) invalid
indentation for custom volumes (and their mounts) was set.

Closes-Bug: 1712745
Change-Id: Ib57c76a34c0e28ad9e67ea47d1fc250b17711a42
Signed-off-by: Mateusz Blaszkowski <mateusz.blaszkowski@intel.com>
2017-08-24 06:24:47 -04:00
Pete Birley
4740486f63 Security: Container user and rootwrap for neutron
This PS adds user control for the service user and rootwrap for
the Neutron chart.

Change-Id: Ibefa3e76c9e64427e97cdcbb93a11d2b2125e171
2017-08-24 05:26:30 +00:00
Jenkins
87723a700c Merge "Helm-Toolkit: Configmap templater" 2017-08-23 15:14:59 +00:00
Jenkins
98dd7fe1f5 Merge "Neutron: move OvS interaction to native interface" 2017-08-23 14:09:53 +00:00
Pete Birley
1fd7f66783 Helm-Toolkit: Configmap templater
This PS adds a configmap teplater helper to helm-toolkit. It makes it
simpler to write consistent charts that supports over-riding of all
values.

Change-Id: I9a587999859ea02802485eb25a3f0ebec8c712a8
2017-08-23 08:06:38 -05:00
Jenkins
ddc3ca4b23 Merge "Nova: Fix libvirtd PID check and error reporting" 2017-08-23 01:44:31 +00:00
Pete Birley
25683d8cf4 Neutron: move OvS interaction to native interface
This PS changes the MVP deployment of Neutron to use the native
interface rather than shelling uout to the clients. The values
were inserted during the original development of the MVP deployment
and subsequently left.

Change-Id: Ie098dc71a0fc82f000b7c40048e9f35913f05a79
2017-08-22 20:08:01 -05:00
Jenkins
89a0c1f8f7 Merge "Nova: Break out NoVNC assets from the proxy process" 2017-08-22 22:38:42 +00:00