2676 Commits

Author SHA1 Message Date
Angie Wang
6186995745 Add Panko Chart
This commit adds a helm chart to deploy panko.
The default deployment for panko is ocata.

Change-Id: I01f447fe0170be64e318885e307b013e30fd4762
Story: 2005021
Task: 29500
Signed-off-by: Angie Wang <angie.wang@windriver.com>
2019-03-29 10:02:07 -04:00
Zuul
cf21988ad0 Merge "Move adding extra dashboard to the proper place" 2019-03-29 10:03:15 +00:00
Zuul
bdc08bc260 Merge "Fix nova probes under python3" 2019-03-27 23:38:35 +00:00
Zuul
6b82435cfe Merge "Fix neutron probes under python3" 2019-03-27 23:38:34 +00:00
Zuul
d86be4f9c4 Merge "Modify cirros image property" 2019-03-27 19:33:06 +00:00
David Sullivan
0107af60bf Purge deleted items from heat database
Long running operations (for example autoscale stacks) can lead to heat
database growth over time. This will remove entries that have been soft
deleted from the heat database.

This adds a cron job that will call heat-manage purge_deleted every 24h.

Change-Id: I3b7c174cc7ed147a8f5700135d3da2e63696008d
Story: 2005020
Task: 29499
2019-03-25 13:47:15 -04:00
hagun.kim
0e2283b77a Modify cirros image property
In case of not using qemu, the cirros image can not be deployed

because of filtering hypervisor_type.

Change-Id: Ia3e6c9eb5011875aaa9b5334fb34c2c7b8ea9565
Signed-off-by: hagun.kim <hagun.kim@samsung.com>
2019-03-25 08:48:03 +09:00
Itxaka
23697867d7 Move adding extra dashboard to the proper place
Adding any dashboards shouldbe done before compiling and compressing
as they can enable additional files that need to be compiled and
compressed, so firs we should enabled them if needed and then
compile+compress

Change-Id: Ib2fb44f5829269aa974d467ea57d9add2b9e0141
2019-03-23 21:48:13 +00:00
OpenStack Proposal Bot
4e7f11f917 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Ied61e4760a8290220965332a15f0a03bab0de84c
2019-03-23 08:36:51 +00:00
Zuul
a179bf3cd0 Merge "Implement Security Context for Horizon" 2019-03-23 00:11:22 +00:00
Zuul
5486bfedf3 Merge "Implement Security Context for Glance" 2019-03-22 23:00:25 +00:00
Zuul
eda7088c83 Merge "Implement Security Context for Heat" 2019-03-22 22:58:33 +00:00
pd2839
b5063695b0 Implement Security Context for Horizon
Implement container security context for the following Horizon resources:
 - Horizon server deployment

Change-Id: I8202cd011f4c4f73d778c5f0ad2648440e259e5d
2019-03-22 21:33:08 +00:00
pd2839
1d0e21e370 Implement Security Context for Glance
Implement container security context for the following Glance resources:
 - Glance server deployment

Change-Id: I32b63226f5f2bcfff09f0b6760f5475ef7d1b5b5
2019-03-22 21:32:57 +00:00
Zuul
d40d2d084d Merge "Implement Security Context for Keystone" 2019-03-22 21:32:30 +00:00
pd2839
e7b06a4076 Implement Security Context for Heat
Implement container security context for the following Heat resources:
 - Heat server deployment

Change-Id: I4c1efb0807c56f750cc8d74155b96f06735e5051
2019-03-22 21:30:57 +00:00
Zuul
ee477d4562 Merge "Implement Security Context for Cinder" 2019-03-22 21:18:29 +00:00
Zuul
46ff6c3037 Merge "Gate: Permit ceph deployment from outside the cluster" 2019-03-22 01:32:10 +00:00
Zuul
7373425d2a Merge "Rabbit: Add netpolicy to allow clustering and rabbit clients to connect" 2019-03-21 16:39:45 +00:00
Zuul
11bbac4794 Merge "OSH: Add/Update Armada timeouts, update config overrides" 2019-03-21 14:52:26 +00:00
Pete Birley
e500334130 Gate: Permit ceph deployment from outside the cluster
This PS extends the gate scripts to allow ceph to be deployed from
a workstation external to the k8s cluster.

Change-Id: I4940de18a53fb79c905fd307a04a1d19833e79b7
Signed-off-by: Pete Birley <pete@port.direct>
2019-03-21 09:30:21 -05:00
Pete Birley
a2a5d15dca Rabbit: Add netpolicy to allow clustering and rabbit clients to connect
This PS allows rabbit compoents, eg other rabbit servers, tests, and jobs
to connect to rabbit.

Change-Id: I61cca52072940e31c093e4895a1c6406b15456bf
Signed-off-by: Pete Birley <pete@port.direct>
2019-03-20 22:32:01 +00:00
Steve Wilkerson
31f403bbcc OSH: Add/Update Armada timeouts, update config overrides
This adds the test timeout field to all charts with helm tests
defined in the OSH Armada manifest, and also updates the release
timeouts for releases known to take longer than usual

This also updates chart overrides to achieve parity between the
standard multinode job and the Armada periodic jobs to reduce the
potential for issues arising from configuration deltas

Change-Id: Id9ba223fbd35ee213db346bbc230a844632e15d2
2019-03-20 10:59:06 -05:00
Itxaka
514d54a5c0
Fix neutron probes under python3
Under python3 an Exception no longer has the message attribute,
instead you can just str the exception to get the error message

Change-Id: I38225a76e01118b88353038ed7ef132d019dd976
2019-03-20 13:56:10 +01:00
Itxaka
d4e882b04a
Fix nova probes under python3
Under python3 an Exception no longer has the message attribute,
instead you can just str the exception to get the error message

Change-Id: Ibf88ae6b73f3bafcc2b99bb01e31bf8c25021e47
2019-03-20 13:18:33 +01:00
pd2839
3cd1b78b68 Implement Security Context for Keystone
Implement container security context for the following Keystone resources:
 - Keystone server deployment

Change-Id: Ia68b5ebe4d76e0405d67224d976fee013cc02d0b
2019-03-19 20:51:59 +00:00
Chris Wedgwood
3baeefdd37 Revert "Add Docker default AppArmor profile to neutron"
This reverts commit 584c63c2e9120536005bcb677bac88dca9ee1335.

Change-Id: I3565f684154432609da2b6b5b4639ee9072b4b76
2019-03-19 20:09:15 +00:00
Zuul
b9bc466535 Merge "Armada: Fix openstack-helm update password job" 2019-03-18 07:36:52 +00:00
pd2839
ba593e1a6b Implement Security Context for Cinder
Implement container security context for the following Cinder resources:
 - Cinder server deployment

Change-Id: Ic319fc8ccfea4c8d640ceecd0bbc93912173d172
2019-03-15 21:46:54 +00:00
Zuul
87d3a2f63f Merge "Added volume related keys to pod mounts to ease the overriding" 2019-03-15 17:53:54 +00:00
Zuul
b1ecd6ab6b Merge "Add default-docker (enforce) AppArmor profile to nova" 2019-03-15 17:12:32 +00:00
Zuul
ad7b32e4de Merge "Add Docker default AppArmor profile to neutron" 2019-03-15 17:06:44 +00:00
Zuul
9e21287dd3 Merge "[nova] Do not throw out stdout of nova-manage --version" 2019-03-15 16:40:51 +00:00
Jiří Suchomel
a2a5dda47c Added volume related keys to pod mounts to ease the overriding
If user wants to add an extra volumeMounts/volume to a pod,
amd uses override values e.g. like this

pod:
  mounts:
    nova_placement:
      init_container: null
      nova_placement:
        volumeMounts:
          - name: nova-etc
          ...

helm template parser complains with

Warning: The destination item 'nova_placement' is a table and ignoring the source 'nova_placement' as it has a non-table value of: <nil>

So when we create empty values for such keys in values.yaml, the source
will be present and warning does not need to be shown.

Change-Id: Ib8dc53c3a54e12014025de8fafe16fbe9721c0da
2019-03-15 16:29:19 +00:00
Steve Wilkerson
2277902726 Armada: Fix openstack-helm update password job
The armada update password job was attempting to invoke a script
that didn't exist for sourcing the passwords. This updates the
path appropriately

Change-Id: Ieb0b85c18ed4f2a589ee3a3ba251317350dc4b81
2019-03-15 10:55:47 -05:00
Zuul
72bd0d597d Merge "Barbican: Fix value of node_port to match default" 2019-03-15 14:49:27 +00:00
Angie Wang
75f3083d24 Spec: Support OCI image registry with authentication turned on
This specification proposes support for deploying openstack services
using OSH with OCI image registry which has authentication turned on.

Change-Id: I26e34a5a39c06e9d481af58c15fb930d3fe9b1ef
Implements: blueprint support-oci-image-registry-with-authentication-turned-on
Signed-off-by: Angie Wang <angie.wang@windriver.com>
2019-03-15 13:19:47 +00:00
chnyda
3a6bf0d627 Barbican: Fix value of node_port to match default
node_port value is by default between 30000 and 32767

Change-Id: I902e7de9d9d37458b71f146ae549a0196fb8c466
2019-03-15 13:19:29 +00:00
Zuul
f191c62d13 Merge "Fix py3 issue on fernet-manage and update-endpoint" 2019-03-15 11:09:08 +00:00
Zuul
9d2bf55e4a Merge "Zuul: Add osh nodeset to bandit checks" 2019-03-15 07:01:46 +00:00
Zuul
1a5ecce63a Merge "Fix placement of privilege escalation in Glance." 2019-03-15 06:29:32 +00:00
Zuul
ca9dfffafd Merge "[neutron] 'up' interfaces added via ovs auto_bridge_add" 2019-03-15 06:29:31 +00:00
Zuul
92a2e3abe4 Merge "Fix letters mistake in tempest chart" 2019-03-15 05:40:22 +00:00
Pete Birley
91466b6911 Zuul: Add osh nodeset to bandit checks
This ps adds the osh nodeset to bandit checks

Change-Id: I83017db7e47bbfae4e09be08c92a62475750d3d7
Signed-off-by: Pete Birley <pete@port.direct>
2019-03-15 00:29:08 -05:00
Cliff Parsons
d0a93d3370 Fix placement of privilege escalation in Glance.
In a previous patch set (https://review.openstack.org/#/c/629300/),
the "allowPrivilegeEscalation" flag was set to false for one of the
init containers, but it was intended to be used for the glance-api
container.

Change-Id: If2d83d82a720d7a1a39729bbf3bddc226af3ba20
2019-03-15 04:52:50 +00:00
Itxaka
e136b0d822 Fix py3 issue on fernet-manage and update-endpoint
fernet-manage:
 - filter used to return a list on python2 but on python3 it returns
 an iterator which has no len method
 - Coherce the keys var into a list so we can run len on it on both
 versions

update-endpoint:
 - ConfigParser is called configparser on python3
 - try/catch and import the proper configparser

Change-Id: I8296074f4d20e47afe0c7aea41bf21999685aecd
2019-03-14 21:24:47 +00:00
Jiří Suchomel
f33c07b8fb [nova] Do not throw out stdout of nova-manage --version
"nova-manage --version" used to print to stderr, but
at least since Rocky it prints to stdout

Change-Id: I48e46612e17556babc35263355c6749c70fd8711
2019-03-14 12:05:24 +01:00
Hyunsun Moon
4fa1f8e800 [nova] Mount ceph-keyring volume when needed
Change-Id: I7370db4c9177976f90176c027f4d65a3fe5b5649
2019-03-13 07:55:31 +00:00
Chris Wedgwood
dcd7ebf37b [neutron] 'up' interfaces added via ovs auto_bridge_add
Previously, when adding interfaces to an ovs bridge we would set the
link state to up.  Some environments assume this is the case so
restore that behavior.

This fixes the problem where external (public) IPs for routers and VMs
no longer respond.

Change-Id: I59e21bd5cde7e239320125e9a7e0a33adae578a8
2019-03-12 08:03:48 +00:00
Zuul
00fff1d274 Merge "Health probe for Nova components" 2019-03-11 15:39:55 +00:00