3373 Commits

Author SHA1 Message Date
Zuul
639f15a069 Merge "[CEPH] Update ceph scripts to create loopback devices" 2020-07-29 20:07:24 +00:00
Zuul
af5fbe9530 Merge "feat(tls): keystone domain manage script to pass cert" 2020-07-29 15:56:21 +00:00
Zuul
a1a9874f24 Merge "Use default stein OPENSTACK_RELEASE for client setup" 2020-07-29 15:24:56 +00:00
Chinasubbareddy Mallavarapu
59dac81fd4 [CEPH] Update ceph scripts to create loopback devices
This is to update ceph scripts to create loopback devices
in single script and also to update gate scripts.

Change-Id: I937ae79512ffc998d8dbd0b277a611347550044b
2020-07-29 09:51:31 -05:00
Gupta, Sangeet (sg774j)
c12ada7224 feat(tls): keystone domain manage script to pass cert
This patch add capability to pass certificate in request method.

Change-Id: I2e431bf3a34f40f58254e4f2b61554453471e0de
2020-07-29 13:21:48 +00:00
Gupta, Sangeet (sg774j)
74dfea1ce9 keystone: Fix indentation
Change-Id: If25cabc5e70897337dfef7e5401936a79878443b
2020-07-28 23:39:00 +00:00
OpenStack Proposal Bot
0b027a36c4 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I299726464f13ef947aa76d8ac1bc8a64beadd1fa
2020-07-28 08:09:32 +00:00
Andrii Ostapenko
3aa712e818
Use default stein OPENSTACK_RELEASE for client setup
Change-Id: I07dfb5bb55a86b34ff0c1af3b5c183efdc0c892a
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-27 15:12:52 -05:00
Zuul
2036a98b6d Merge "feat(tls): add tls support to openstack services" 2020-07-27 18:00:51 +00:00
Zuul
03a2bd27a5 Merge "feat(tls): Make openstack services compatible with mariadb with TLS" 2020-07-27 15:47:42 +00:00
Gupta, Sangeet (sg774j)
b94340008e feat(tls): add tls support to openstack services
Mount tls certs to keystone-domain-manage job containers.

Change-Id: I44eed213cc9235266faf4a0119ed8700206cdad2
2020-07-27 14:52:52 +00:00
OpenStack Proposal Bot
5199ef9f68 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I36308d6d23b9b08db1fa44a199cdd233a0f1d676
2020-07-25 07:53:08 +00:00
Gupta, Sangeet (sg774j)
7b720184e3 feat(tls): Make openstack services compatible with mariadb with TLS
Change database scerets.

Change-Id: I068dfcb23d596d4b9bcde1944fb4def010490452
2020-07-24 23:02:09 +00:00
Zuul
d277386769 Merge "Add missing security context to Glance pods/containers" 2020-07-24 20:40:41 +00:00
Zuul
cb8d1b2faa Merge "Add missing security context to Cinder pods/containers" 2020-07-24 20:26:37 +00:00
Zuul
85939ac59a Merge "Adding clean-up guide for 900-use-it script" 2020-07-24 19:03:04 +00:00
PrateekDodda
b850fa0d0c Add missing security context to Glance pods/containers
This updates the Glance chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I0a164ed48dd11780b4fdbb8be6b492fb45efe0aa
2020-07-24 16:09:55 +00:00
PrateekDodda
711631d664 Add missing security context to Cinder pods/containers
This updates the cinder chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: Ia6e3c56087bae6f8c86db688404c6ce3a1d5d99d
2020-07-24 16:09:49 +00:00
Zuul
e56deaf464 Merge "Remove stacks created by tempest script before recreating" 2020-07-24 05:54:32 +00:00
Zuul
41824e8df3 Merge "Add missing security context to Keystone pods/containers" 2020-07-22 22:39:34 +00:00
Chinasubbareddy Mallavarapu
385c0775b9 [CEPH] Update dev scripts for ceph to handle loopback devices
This is to update loopback devices creation script to take device names
from developers in case if default devices are busy.

Change-Id: Ie368ebdfdc64ea00ccf62cf61010beddcc2cf4ce
2020-07-21 21:46:18 +00:00
DODDA, PRATEEK REDDY (pd2839)
46afde4c6d Add missing security context to Keystone pods/containers
This updates the Keystone chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I655ef19a3c187e3462ff8ec1a54bc9691ca64d41
2020-07-21 17:33:15 +00:00
Michael Fix
1fcd52a484 Adding clean-up guide for 900-use-it script
This change modifies the exerise-the-cloud.rst file to include user
steps for cleaning up the client environment to allow for subsequent
runs of the 900-use-it.sh script.

Change-Id: I6bd3c95d837f9b3273868d51c1f5121d96e53e73
2020-07-20 23:41:00 +00:00
Andrii Ostapenko
dac7c4f8bd Specify OPENSTACK_RELEASE for setup-client.sh constraints
Also include ensure-pip role to functional jobs.

Depends-On: https://review.opendev.org/741485
Change-Id: I68fd85ada78cd41108c2f292a8cb9a237cd79e8d
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-19 00:09:33 +00:00
Zuul
eafe48a136 Merge "Add missing security context to Heat pods/containers" 2020-07-17 16:18:05 +00:00
Zuul
a78d929932 Merge "Add missing security context for Keystone rally tests" 2020-07-17 06:50:18 +00:00
DODDA, PRATEEK REDDY (PD2839)
2e752d180a Add missing security context to Heat pods/containers
This updates the heat chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I7ba17382059dfc23ab125a49b2b302166915c350
2020-07-17 06:01:39 +00:00
Zuul
1fd839139d Merge "Add missing security context to Horizon test pods/containers" 2020-07-16 18:53:46 +00:00
DODDA, PRATEEK REDDY (pd2839)
2eaa98ecf1 Add missing security context for Keystone rally tests
Change-Id: I29a432f28a4d8dd57341152d60b34c5a391e872f
2020-07-16 13:11:49 -05:00
Zuul
8c9b9a63bf Merge "Refactor to support jobs invocations from other projects" 2020-07-16 15:31:11 +00:00
DODDA, PRATEEK REDDY (pd2839)
e61f88465a Add missing security context to Horizon test pods/containers
This updates the horizon chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I2ccd920fa26aca2955afef8b71d56e55d1ae26e8
2020-07-15 22:26:41 +00:00
Zuul
794ee5e90d Merge "Fix security context for glance rally tests" 2020-07-15 21:19:57 +00:00
Andrii Ostapenko
f305793243 Fix security context for glance rally tests
Also enable glance helm tests for gates.
Temporary replaces cirros url to mirror due to [0]

[0] https://bugs.launchpad.net/rally/+bug/1887705

Change-Id: I21ceba857c375c1de054e69cf84449e02881b0ce
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-15 18:36:48 +00:00
sgupta
702c17eb78 feat(tls): Make openstack services compatible with mariadb with TLS
Depends-on: https://review.opendev.org/#/c/741037/
Change-Id: I21f4ede3bd18c0af8da1eba60cd0b7b932a31410
2020-07-14 23:32:03 +00:00
Zuul
61a61d9de1 Merge "Add missing security context to Barbican test pods/containers" 2020-07-13 19:00:48 +00:00
Zuul
d6022bc22e Merge "Add missing security context to Glance pods/containers" 2020-07-13 18:59:07 +00:00
Zuul
f9862e221e Merge "Add missing security context to Keystone pods/containers" 2020-07-13 18:57:52 +00:00
Zuul
c35a74c729 Merge "Add missing security context to Cinder pods/containers" 2020-07-13 18:57:50 +00:00
Zuul
009bde9d31 Merge "Add missing security context to Neutron pods/containers" 2020-07-13 18:46:33 +00:00
Zuul
861da9e355 Merge "Add missing security context to Nova pods/containers" 2020-07-13 18:33:57 +00:00
Zuul
8a5b087c13 Merge "Add horizon internationalization for extra panels" 2020-07-13 15:30:25 +00:00
Jiří Suchomel
71a6af325c Remove stacks created by tempest script before recreating
In case user wants to re-run a script that failed (e.g because of a
timeout), next run should not fail just because the stacks were
already created.

Change-Id: I5b3650225794704de5433a24f678decc69212997
2020-07-13 15:44:53 +02:00
Andrii Ostapenko
67acec14cd Refactor to support jobs invocations from other projects
Switch osh fuctional jobs to osh-infra-job-runner playbook inheriting
from openstack-helm-infra-functional.
Specify gate_scripts_relative_path var for each job to support the
case when corresponding jobs defined in osh are invoked from another
project to allow playbook know where to look for gate scripts.

Depends-On: https://review.opendev.org/740557
Change-Id: I315f04ef7bdf5bf97d09843de8f878e2d15377dc
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-12 03:19:39 +00:00
Andrii Ostapenko
44d263b2bf Enable templates linting
- braces
- brackets
- colons
- commas
- comments
- hyphens
- indentation
- key-duplicates

with corresponding code changes.

Also disable enforcement for document-(start|end) rules and
disables warnings to increase readability.

* Unrestrict octal values rule since benefits of file modes readability
  exceed possible issues with yaml 1.2 adoption in future k8s versions.
  These issues will be addressed when/if they occur.

Change-Id: Ic5e327cf40c4b09c90738baff56419a6cef132da
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-11 00:52:51 +00:00
Andrii Ostapenko
0807ecb354 Add security context from snippet for tungstenfabric container
Change-Id: I4db982e8f600288ec954d4c019f096bd8dcd7e52
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-11 00:52:46 +00:00
Zuul
afd68753c7 Merge "feat(tls): add tls support to openstack services" 2020-07-10 22:17:08 +00:00
Tin Lam
918a307427 feat(tls): add tls support to openstack services
This patch set enables TLS for the following OpenStack services: keystone,
horizon, glance, cinder, heat, nova, placement and neutron for s- (stein)
and t- (train) release. This serves as a consolidation and clean up patch
for the following patches:

[0] https://review.opendev.org/#/c/733291
[1] https://review.opendev.org/#/c/735202
[2] https://review.opendev.org/#/c/733962
[3] https://review.opendev.org/#/c/733404
[4] https://review.opendev.org/#/c/734896

This also addresses comments mentioned in previous patches.

Co-authored-by: Gage Hugo <gagehugo@gmail.com>
Co-authored-by: sgupta <sg774j@att.com>

Depends-on: https://review.opendev.org/#/c/737194/

Change-Id: Id34ace54298660b4b151522916e929a29f5731be
Signed-off-by: Tin Lam <tin@irrational.io>
2020-07-10 09:36:31 -05:00
OpenStack Proposal Bot
b2321587f9 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Id3ae2113ffd7b9cd53a8c147387b3417227fd3c0
2020-07-10 07:59:41 +00:00
DODDA, PRATEEK REDDY
cba3deb94e Add missing security context to Keystone pods/containers
This updates the Keystone chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true.

Change-Id: I2ac3a4efa6798e263de19f0db444f37c5236d121
2020-07-09 18:20:23 -05:00
Gage Hugo
6027ac0c0c Cleanup zuul checks
This change moves the tungsten fabric check down to the periodic
checks with the other feature overrides, removes several duplicate
checks that are currently non-functional, and moves the rest to
experimental.

Also moves the compute-kit jobs back to using the default
single-node nodeset due to cloudedge going down and not
enough available 32gb nodes as a result

Change-Id: Ib4f314d5246af8756611346ed4919492d98510a5
2020-07-09 18:38:56 +00:00