156 Commits

Author SHA1 Message Date
Zuul
5d91148986 Merge "Oslo-messaging: remove unused admin credentials from values.yaml" 2018-01-06 18:49:55 +00:00
portdirect
4b9c2c7922 Oslo-messaging: remove unused admin credentials from values.yaml
This PS remove the admin credentials from the values.yaml, which
have never been leveraged.

Change-Id: Ifb1cdefd1c52b8a2a2fb3a627393d305823e74ec
2018-01-05 10:22:53 -05:00
portdirect
5a2f71ebdf Ingress: Allow annotations to be dyanmicly driven
This PS allows the ingress rules to be dynamicly driven from the
values.yaml, permitting the ingress cotnroller to ba changed and
custom rules to be applied: eg whitelisting of clients.

Change-Id: Ica6b4692ff9b6b77d1efe6bae212a1227e56ca66
2018-01-05 00:29:05 -05:00
portdirect
9944b0d84f RBAC: add rules to all remaing helm test pods
This PS adds RBAC rules for all remaining helm test pods
in OpenStack-Helm.

Change-Id: Ib44d5fdc8c147f2cbecec51cc4767116f3adb6b2
2017-12-29 14:09:43 -05:00
portdirect
fa2620d54b RBAC for OSH
This PS applys RBAC rules to OSH, based off the work
done in https://review.openstack.org/#/c/526464/

Change-Id: I541b0ac1a3972566ef2b66571ae32744dab70c17
2017-12-26 10:24:19 -05:00
Steve Wilkerson
5bc7ded909 Update names of helm test pods for openstack services
This updates the names of the helm test pods to give all services
in OSH-infra/OSH a uniform '{{ .Release.Name }}-test' name, which
allows for easier gathering of test results across all deployed
services

Change-Id: I24df7a18d32b99d1ffaad19647ef724316e2fe20
2017-12-14 14:03:12 +00:00
portdirect
5986506799 Nova: Move placement API to run behind Apache
This PS moves the placement API to run behind Apache, to match
the recommended deployment method.

Change-Id: Id057ef042cf30300c0cd35265dff6a9c16694c70
2017-11-30 13:40:31 -05:00
Chris Wedgwood
b4a571a3ea [nova] start VMs by default on pod/node restart
If a node or pod restarts we would like the VMs running state to be
preserved.

Change-Id: I025b4e806855102c90711b6644a7f32bb20602b9
2017-11-28 21:03:53 +00:00
Dae Seong Kim
110f428a6e Enable cell service
This PS adds nova_cell0 database and init cell service.

Change-Id: I29e33fb1a18f39586a7323dac82ddccbc445853f
Implements: blueprint enable-cell-service
2017-11-15 11:29:26 +09:00
Dae Seong Kim
c1a0533d36 Add the nova placement service
Placement service is optional in Newton, but required in Ocata.
So it needs to add the service for upgrading.

Change-Id: I49637c04ba7739a5108a442af05580f719ec3d54
Implements: blueprint add-nova-placement-service
2017-11-13 11:09:06 +09:00
Hyunsun Moon
0808cf5198 Add option to set external policy to local for openstack services
External traffic policy "local" would be preffered when openstack
service is accessed from external via node port. This option has an
effect only when service node port is enabled.

Change-Id: Ic68cfc59dc39dc842d4790deffa70efe433dd7a6
2017-11-02 15:07:21 +09:00
intlabs
fe6107cf76 Images: Update values to allow simple parse of images being used
This PS updates the values file layout for images to allow simple
parsing of the images in use by charts, allowing them to be queried
and modified much more simply. By moving the image tags to a 'tags'
key, we can extend the options used simply to accomodate extra
options simply (eg prefixing the tag for use with an internal
registry) or pre-pulling the images to reduce chart deploy failure.

Change-Id: I9ec1dbb00d997ab6cb021bf0b698f7aae740e95d
2017-10-23 10:05:20 -05:00
Jenkins
8273259416 Merge "Nova metadata : set clusterIP dynamically" 2017-10-15 18:33:34 +00:00
Jawon Choo
121a52dd93 Nova metadata : set clusterIP dynamically
This PS updates nova to set metadata's clusterIP dynamically and
neutron to set nova_metadata_ip from metadata hosts
If specify a clusterIP, it is hard-coded as before also.

Change-Id: Ib0d6df8272bd8494bb59ffc8e6b2cfa36a901f60
Closes-Bug: #1715553
2017-10-15 17:34:25 +09:00
intlabs
27d336ef7a Nova: Use endpoint lookups for NoVNC proxy
This PS updates nova to use endpoint lookups for the nova VNC proxy.
This enables the proxy to be accessed from outside the openstack
namespace and the cluster via its FQDN and also brings it inline
with other services.

Addtionally some spacing issues are resolved in the nova etc configmap
to make them consistent across all charts.

Change-Id: Ie93420d6a19915bee2750fbe7fd4c21fc0641ee8
2017-10-13 00:26:58 -05:00
Grzegorz Grasza (xek)
1fe3ca34c9 Change entrypoint version
New kubernetes-entrypoint version was released. K8s-entrypoint
authors maintain images at Quay. The image uses CoreOS, which
is more lightweight than the current Ubuntu image, so it
should lessen the burden on the infrastructure.

Change-Id: Id8c2a4d065550ffbd64476377247cccf213b58e1
Partial-Implements: blueprint entrypoint-namespaces
2017-10-10 15:59:08 +02:00
Jenkins
bc6b2f8732 Merge "Telemetry: enable publishing of events for core OpenStack Components" 2017-10-04 19:55:24 +00:00
Pete Birley
16a250509a Telemetry: enable publishing of events for core OpenStack Components
This PS enables publishing of events for core OpenStack Components

Change-Id: I846bfa86ae522c103e741b46e189695d45ca7710
2017-10-04 17:19:45 +00:00
Pete Birley
8776a2c785 Config: Move rally test config into values
This PS moves the rally test config into values.

Partially implements: blueprint remove-pregenerated-config-templates

Change-Id: Ic051e762d792308de1d6038c37ca71c3efc9698c
2017-10-04 01:07:07 -05:00
Zuul
a2cc27ea6a Merge "Adding database drop jobs" 2017-09-29 15:07:41 +00:00
Pete Birley
486274bc94 Nova: Move Neutron credentials to endpoints in values.yaml
This PS moves the neutron credentials from the config section
of the values.yaml to the endpoints section, seperating them from
the service configuration.

Change-Id: I548148449f56e4eea92669ad8e98e3eff1ca7b27
2017-09-29 02:51:00 +00:00
Sean Larimore
d1e775547c Adding database drop jobs
Implemented Kubernetes jobs to drop a database for an OpenStack service
on deletion of Helm chart. This job is configurable to be enabled or
disabled in the values.yaml file for each chart.

Change-Id: Ia1a0834cb43c7e883aaf507a7c7683fa1cf4e838
2017-09-27 09:44:28 -06:00
Steve Wilkerson
ca0cb858a7 Add support for nova vm migration
Adds ability to perform vm migrations

Change-Id: Iba10582346379f624e6a409f4f3018eead3aa7f6
2017-09-22 15:36:42 -05:00
Pete Birley
e3a6a4166d Nova: remove oslo-genconfig
This PS removes the modified oslo-genconfig from nova.

Partially implements: blueprint remove-pregenerated-config-templates

Change-Id: I65575ba5d78429b9c1a3984c76aa26757d5fd6e2
2017-09-21 14:52:04 -05:00
Jenkins
d872de16a4 Merge "Spelling fixes" 2017-09-06 23:54:12 +00:00
Jenkins
ff94785f81 Merge "Remove some unused declarations" 2017-09-06 21:28:41 +00:00
Chris Wedgwood
6706735611 Spelling fixes
Change-Id: Iba49ab54f7df0fd73f78141f139a479c882c2216
2017-09-06 19:20:35 +00:00
Chris Wedgwood
0754f6f19a Remove some unused declarations
Change-Id: I10239c43c7dde2fe30a0ddbb290229c84b23e7a6
2017-09-06 16:55:18 +00:00
Pete Birley
b120667031 Endpoint lookups: fix typo in overrides
This PS fixes a typo in the endpoint lookup function and input.

Change-Id: I6ff6d68bf82e1e1f70438a7017f4e1a6df7f59a7
2017-09-06 11:15:54 -05:00
Artur Korzeniewski
ca05f7ac3c Neutron and OVS: add full name to ovs and lb daemonsets
Add neutron prefix to lb-agent and ovs-agent.
Rename ovs-db and ovs-vswitchd to openvswitch-db and openvswitch-vswitchd.

Change-Id: Iad69b0c00d17e59a9f0eb66003e4512ccaeab128
2017-09-04 13:58:59 +02:00
Pete Birley
bede94c835 Endpoint lookup namespace and fqdn support
This PS adds namespace and fqdn support to endpoint lookup functions,
it also permits over-riding of the puplic endpoint for ingress.

Change-Id: Ib61c5c00a214d75fe85fbffe9080c2ae88bd8cb9
2017-08-31 19:06:33 +00:00
Pete Birley
0252ca776e Nova: Move Libvirt into its own chart
This PS moves libvirt into its own chart - decoupling it from nova,
both making it easier to deploy and use seperately and permitting
use of other compute backends.

Partially implements: blueprint split-nova-and-neutron-infra

Change-Id: I06237157244c3cdb5503eafa01229d061b1614f0
2017-08-29 23:50:08 -05:00
Jenkins
38cc836bab Merge "Neutron: add linuxbridge daemonset and config script" 2017-08-29 13:43:21 +00:00
Artur Korzeniewski
aaedb4a150 Neutron: add linuxbridge daemonset and config script
Adding daemonset for Linux bridge. Using node selector
"linuxbridge enabled".

network.backend added in neutron/values.yaml to support scenario for
different SDNs using the same networking software, like OVS is used
for reference Neutron L2 agent, ODL, OVN and SONA. The other option for
network.backend can be linuxbridge and calico.
network.backend impacts configuration of DHCP, L3 and metadata agents.
Those agents are dependent on ovsdb_connection flag (officially it is
placed in openvswitch_agent.ini file).

Added daemonset_lb_agent flag in manifests section. Currently
OVS and LinuxBridge L2 agents can be turned on/off to be deployed.
OVS L2 agent and OVS as a network virtualization SW can be deployed
independently.

Removed conf.neutron.default.neutron.interface_driver, since it was not
used anywhere.

Marked places in neutron/values.yaml where changes are needed in order
to use linuxbridge for:
- neutron.conf interface_driver
- ML2 mechanism driver
- dhcp and l3 agents interface_driver

Added example of neutron values overrides in:
tools/overrides/mvp/neutron-linuxbridge.yaml

Change-Id: I7cdcfaa9a73af392a0d45f7df29b7b3ae3cc4c76
Implements: blueprint support-linux-bridge-on-neutron
2017-08-29 11:51:42 +02:00
Pete Birley
ceb30e8cc7 Jobs: Consoloate on heat-engine for admin jobs where possible.
This ps moves to use a container sultaible for use as the heat engine
for all possible admin jobs - it is lighter than the kolla-toolbox image
and makes it easy to swap out to other image sets. This is as the heat
engine container should contain the openstack client (with all required
libs for the cloud) and the oslo_db supporting libs required by the db
management jobs, as well as the oslo_messaging libs required for future
rabbitmq management expansion.

Change-Id: I5451c15c8fb49c85b4f254cc60156420bee2efea
2017-08-29 04:34:26 +00:00
Jenkins
3f9506ffef Merge "Nova: Mount machine id into compute daemonsets" 2017-08-28 21:18:57 +00:00
Pete Birley
d99ac61a0d Nova: Mount machine id into compute daemonsets
This PS mounts the machine id into the compute daemonsets. It is
required for newer verions of libvirt and nova.

Change-Id: I75d3ebe670fe1372eb4b6a7fc90102bee69465bf
2017-08-28 15:19:17 +00:00
Pete Birley
05ab27bff9 Nova: Make policy fully configurable via helm values
This PS moves the nova policy.yaml to be fully driven by gotpl,
allowing full configuration without editing the template.

Change-Id: I0af8693df8b54486e2ba3dbe9eaca8d718d7d022
2017-08-28 10:18:16 -05:00
Pete Birley
54599a8fb6 Security: Container user and rootwrap for nova
This PS adds user control for the service user and rootwrap for
the Nova chart.

Change-Id: I3012e2e83e5a44c7093049b68b3d89d4c2c1ed26
2017-08-28 14:49:43 +00:00
Pete Birley
0251c099ba Nova: Support Cinder Volume Attachement using Ceph Backend
This PS enables cinder volume attachment for nova when used with ceph.

Change-Id: I9772f38fb3a1a9af26bd92ee18a651d3372de64c
2017-08-25 14:07:34 -05:00
Jenkins
85b6716c49 Merge "Fix for appending custom volumes" 2017-08-25 15:00:10 +00:00
Jenkins
d04e69c438 Merge "Enable keystonemiddleware cache encryption" 2017-08-25 01:56:10 +00:00
Mateusz Blaszkowski
fc9677f718 Fix for appending custom volumes
Before this change, there was no ability to append custom volume for
any of the services. The reason was a missing new line character, so
the templates were formatted like this:
- name: pod-shared
  mountPath: /tmp/pod-shared - mountPath: /tmp/test2
  name: test2

Apart from that, for some of the services (mostly job-bootstrap) invalid
indentation for custom volumes (and their mounts) was set.

Closes-Bug: 1712745
Change-Id: Ib57c76a34c0e28ad9e67ea47d1fc250b17711a42
Signed-off-by: Mateusz Blaszkowski <mateusz.blaszkowski@intel.com>
2017-08-24 06:24:47 -04:00
Pete Birley
1fd7f66783 Helm-Toolkit: Configmap templater
This PS adds a configmap teplater helper to helm-toolkit. It makes it
simpler to write consistent charts that supports over-riding of all
values.

Change-Id: I9a587999859ea02802485eb25a3f0ebec8c712a8
2017-08-23 08:06:38 -05:00
Jenkins
ddc3ca4b23 Merge "Nova: Fix libvirtd PID check and error reporting" 2017-08-23 01:44:31 +00:00
Jenkins
89a0c1f8f7 Merge "Nova: Break out NoVNC assets from the proxy process" 2017-08-22 22:38:42 +00:00
Craig Anderson
1080c9e5be Nova: Fix libvirtd PID check and error reporting
Prevent false positive container exit from recycled libvirtd PID.

Clarify error log message and fix exit code typo.

Closes-Bug: #1711480
Change-Id: I47a7fdcb40b5c8153cf428e6863b618301abfd7c
2017-08-22 20:12:58 +00:00
Pete Birley
2114e907bf Nova: Break out NoVNC assets from the proxy process
This PS seperates the NoVNC assets from the container serving the
NoVNC Proxy process - meaning images other than kolla or those
built from disto packages can be used without modification.

Change-Id: I8b363db9d4166ae2d5e85d135e488402ffb14f41
2017-08-21 00:13:44 +00:00
Dae Seong Kim
aacd11e361 Add Tempest script in helm test framework
Now, openstack-helm support "helm test" function, and It execute rally
container.
Rally also can test Tempest itself, so this fix will be add tempest
test in rally container.

Change-Id: I2c2f684f6583f2a3d9c7279a3d85cb242934e90e
Implements: blueprint add-tempest-in-helm-test
2017-08-16 16:56:10 +09:00
Tin Lam
c35f08c4fa Enable keystonemiddleware cache encryption
This patch set enables keystonemiddleware memcache encryption by providing a
random string key into the service configuration file, and setting the
memcache_security_strategy as ENCRYPT.

Change-Id: Ia030f5414308a29096c644bae70047a323eaffde
2017-08-15 22:47:55 -05:00