openstack/openstack-helm
Code Issues Proposed changes
3,955 Commits 2 Branches 2 Tags
5d33d80371
Commit Graph

10 Commits

Author SHA1 Message Date
Gage Hugo
7034968d96 Move check jobs to use helm3 
This change migrates the check jobs in OSH to use the
new helm v3 script when deploying kubernetes via
minikube.

This is one step in the move to helm v3. Future changes
will migrate the other jobs.

Change-Id: If741db5997a27ed06584b9af2d50485d8de34a2b
 2021-10-29 19:41:25 +00:00
Nafiz Haider
ca47e3c974 Re-enable "feat(tls): Change Issuer to ClusterIssuer"" 
This reverts commit 2ec17153c6cb918dd357f71824ec59dd0d74dfba.

Reason for revert: resolved bug with cluster issuer versioning

Depends-on: https://review.opendev.org/c/openstack/openstack-helm-infra/+/772814

Co-authored-by: Sangeet Gupta <sg774j@att.com>

Change-Id: If7ebef1cebbe5b1d97ac530dd7136e3fc9232b21
 2021-02-26 02:43:09 +00:00
Tin Lam
2ec17153c6 Revert "feat(tls): Change Issuer to ClusterIssuer" 
This reverts commit 43e75eaa83cc6958fa0a6af55783cbe2645cfde7.

Reason for revert: Doing this as part of the revert here - https://review.opendev.org/c/openstack/openstack-helm-infra/+/772733

Change-Id: I9c04a35c179d23ec1b7612b4f87d9d16352985cc
 2021-01-27 17:09:42 -06:00
sgupta
43e75eaa83 feat(tls): Change Issuer to ClusterIssuer 
ClusterIssuer does not belong to a single namespace (unlike Issuer)
and can be referenced by Certificate resources from multiple different
namespaces. When internal TLS is added to multiple namespaces, same
ClusterIssuer can be used instead of one Issuer per namespace.

Depends-on: https://review.opendev.org/c/openstack/openstack-helm-infra/+/766359

Change-Id: I6585d5a8c2ccb507a5c99784c0190502b55a5bcf
 2021-01-19 13:47:09 +00:00
Andrii Ostapenko
b334b221db
Add retry for curling cfssl.org 
We observe SSL related errors rarely in jobs.

Change-Id: Ia5569f411abd2828c6ab289e3942e3a7dabf2d46
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
 2020-08-12 12:23:59 -05:00
Tin Lam
918a307427 feat(tls): add tls support to openstack services 
This patch set enables TLS for the following OpenStack services: keystone,
horizon, glance, cinder, heat, nova, placement and neutron for s- (stein)
and t- (train) release. This serves as a consolidation and clean up patch
for the following patches:

[0] https://review.opendev.org/#/c/733291
[1] https://review.opendev.org/#/c/735202
[2] https://review.opendev.org/#/c/733962
[3] https://review.opendev.org/#/c/733404
[4] https://review.opendev.org/#/c/734896

This also addresses comments mentioned in previous patches.

Co-authored-by: Gage Hugo <gagehugo@gmail.com>
Co-authored-by: sgupta <sg774j@att.com>

Depends-on: https://review.opendev.org/#/c/737194/

Change-Id: Id34ace54298660b4b151522916e929a29f5731be
Signed-off-by: Tin Lam <tin@irrational.io>
 2020-07-10 09:36:31 -05:00
Zuul
ae9632177f Merge "feat(tls): add additional parameters to chart deployment" 2020-06-02 19:08:16 +00:00
Tin Lam
19f79aba19 feat(tls): add additional parameters to chart deployment 
This patch set adds in two additional parameters to:

a. establish ownership between certificate and secret so secrets can be
   cleaned up when the certificate is deleted as part of a helm release
b. add the ability to always issue new tls.key as part of the key
   rotation when the secret gets regenerated for any reason.

This also adds linebreaks for readability.

Change-Id: Id40d504251bbd98c32a7d9baa3dbe9858ad495cb
Signed-off-by: Tin Lam <tin@irrational.io>
 2020-06-02 10:15:47 -05:00
Tin Lam
3da6d34ff2 feat(tls): update cert-manager version 
This patch set updates the cert-manager.io version from v1alpha2 to
v1alpha3.

Change-Id: Ib9904f9f2c1f3fa426c852b012307cf7aed266e7
Signed-off-by: Tin Lam <tin@irrational.io>
 2020-05-23 05:10:50 -05:00
Tin Lam
26c795aa0d feat(tls): adding cert manager to gate 
Change-Id: I913c9de3bd405ecd4482c6d455c9c7399e64f95a
Signed-off-by: Tin Lam <tin@irrational.io>
 2020-05-20 19:59:58 +00:00