39 Commits

Author SHA1 Message Date
Pete Birley
44841fbffc Storage: increase robustness of storage clean jobs
This PS increases the robustness of storage cleaning jobs by
precreating the service accounts and roles for the pod to consume,
and removes the potential for race conditions by removing the delete
hook.

Change-Id: I1f3c35fe2bd2a4325430e8025951349526f683af
2018-04-04 21:51:31 -05:00
portdirect
2462dffb83 Gnocchi: move to use templater for apache config
This PS moves gnocchi to use the templater function for its apache
config.

Change-Id: I9b179db066867f00b8cd8cdbf92d37ea2dc8836d
2018-03-30 00:48:30 -04:00
Zuul
32a468178b Merge "Ingress controller service: consolidate to helm-toolkit" 2018-03-14 02:14:22 +00:00
Pete Birley
507600e898 Ingress controller service: consolidate to helm-toolkit
This PS consolidates the Ingress controller service, that is used
to resolve internal requests to public endpoints correctly, to
helm-toolkit.

Change-Id: If7c7deca1b8289a32709f7dc7c936883469aadfe
2018-03-12 13:48:39 +00:00
Pete Birley
6e4bcebcf5 DB-Drop-Jobs: consolidate to helm-toolkit
This PS consolidates the DB-Drop Job to helm-toolkit.

Change-Id: Ia2b035d730bf612086a9fd9b5d14aba494f56dc7
2018-03-09 14:25:15 +00:00
Zuul
4884dd228c Merge "Keystone Authtoken Cache: allow universal secret key to be set" 2018-03-05 19:26:37 +00:00
portdirect
1c85fdc390 Keystone Authtoken Cache: allow universal secret key to be set
This PS allows a cache secret key for all instances of keystone
middleware to be defined in a single location.

Change-Id: I3d5c78732d8a8bb9110117130f0d886fea609526
Partial-Bug: 1753251
2018-03-05 08:49:24 -05:00
portdirect
e1a731dc67 Gnocchi: use endpoints section and lookups to set port
This PS moves gnocchi to use the endpoints section and lookups to
set the port it serves on.

Change-Id: I509d2324d9d063bc382baa4c7676ef415de99907
2018-03-04 12:28:23 +00:00
Pete Birley
f57972b5b6 dependencies: move static dependencies under a 'static' key
This PS moves static dependencies under a 'static' key to allow
expansion to cover dynamic dependencies.

Change-Id: I38990b93aa79fa1f70af6f2c78e5e5c61c63f32c
2018-02-23 12:31:15 -08:00
Pete Birley
9f28f49da7 Bootstrap Jobs: fix missing scripts
This ps fixes the scripts missing from the bootstrap job for
several charts.

Change-Id: I97041f26ecf67e538421d78564009ab7da1e7d9e
2018-02-22 18:15:36 -08:00
Pete Birley
49aacc2030 Ingress rules: consolidate to helm-toolkit
This PS consolidates ingress rules to helm-toolkit.

Change-Id: I38a4de939e1ec65fed1630a53787d363f2ec78f6
2018-02-21 10:21:16 -08:00
Chris Wedgwood
6b844382ad yaml cleanup: trim multiline strings
Change-Id: Ice615c1d252651793dfa09b8e85a5b4228d68737
2018-02-20 16:39:52 +00:00
Zuul
9bbd48362f Merge "Helm-Tests: Target pods by node-labels" 2018-02-20 15:28:43 +00:00
Zuul
e4313c86c7 Merge "remove unnecessary calls to quote" 2018-02-20 14:53:21 +00:00
portdirect
c7e2eb9e25 Bootstrap jobs: move template to helm toolkit
This PS moves the templates for bootstrap jobs to helm-toolkit.

Change-Id: I0fc0f7722cfc87b00e26510dee7ba79d2139a171
2018-02-19 22:53:34 -05:00
Zuul
826fddca01 Merge "Node Labels: update nodelabels to allow targeting of pods to nodes" 2018-02-20 00:41:51 +00:00
Chris Wedgwood
4f6a9983f5 remove unnecessary calls to quote
Change-Id: I1099c3f56b1d81b97033a8653d6bf1b9ea4d04e7
2018-02-19 18:55:46 +00:00
portdirect
f19f0873f0 Helm-Tests: Target pods by node-labels
Change-Id: Ie71ef58fb7eb530fd49512e10d7666ec08d99609
2018-02-19 12:25:45 -05:00
Pete Birley
b311f86193 Node Labels: update nodelabels to allow targeting of pods to nodes
This PS updates the node labels to allow pods to be targeted to nodes
on a per type basis.

Change-Id: I45d5383d04fcd1d98740a18d86c1cfc2cb8ec409
2018-02-19 11:51:09 -05:00
Marcus
57b3aece1f Fixes gnocchi with postgresql deployment if running on different hosts
a) The db-init method ignores the configured admin password.

This seems to work if db-init was scheduled to the same host as
postgresql is running on but fails on a remote connection. This change
sets the PGPASSWORD variable to the provided admin password.

b) Fixed liveness and readiness probe for postgresql

While this seems to work it continously outputs the message
"psql: FATAL: role "root" does not exist"

This change adds the admin username as argument to pg_isready
to stop this message.

Update: Making the linter happy ;-)

Change-Id: I59b47a8724065d08203c29172c15350aaa785203
Closes-Bug: #1749177
2018-02-19 11:18:52 -05:00
portdirect
897edb3202 DB-Init-Jobs: consolidate to helm-toolkit
This PS consolidates the DB-Init Job to helm-toolkit.

Change-Id: Ib92743d678de09a6fb4457e5415a098013952410
2018-02-17 22:47:58 +00:00
Seungkyu Ahn
d361c8f303 Change the check method for the ceph ods version
Previously, the ceph version was checked with "ceph -v".
However, this way is only check for the ceph client version.
So I change the way to check the ceph osd version.

Change-Id: I11f44186f671594e6e9e848f3fddb1d23b994b36
2018-02-13 14:52:20 +00:00
portdirect
8d30e6698e Helm-Toolkit: move keystone endpoint jobs to helm-toolkit
This PS moves the keystone endpoint jobs to be driven by
a helm-toolkit function providing greater consistency
to the charts in OSH, and reduced tech debt.

Change-Id: I06555171ce93a2b0a8798bc891a2990ea9626276
2018-02-07 19:51:41 -05:00
portdirect
914ffdbfe4 Helm-Toolkit: move keystone service jobs to helm-toolkit
This PS moves the keystone service jobs to be driven by
a helm-toolkit function providing greater consistency
to the charts in OSH, and reduced tech debt.

Change-Id: I36e012854473fcb942d62391d182ee6a8406bb72
2018-02-08 00:31:52 +00:00
portdirect
72792a49d4 Keystone: update user jobs to use defaults in dict keys
This PS updates the Keystone user job template to use default
values when not specified via the input dict.

Change-Id: I937e720ab3ab4ba70c33ea981d7693ebfd01c894
2018-02-07 11:03:17 -05:00
portdirect
319fd2cbec Jobs: Apply uniform node selector label to all jobs in OSH
This PS applies a uniform node selector label to all jobs in OSH.

Change-Id: I2efedcea2085b8189bd0bd12dd0ee66e63db0d97
2018-02-07 10:16:06 -05:00
portdirect
f296acf647 Helm-Toolkit: move keystone user jobs to helm-toolkit
This PS moves the keystone user jobs to be driven by
a helm-toolkit function providing greater consistency
to the charts in OSH, and reduced tech debt.

Change-Id: Ic5eb172b0443f61b8ecab8b3a607c764fb145c75
2018-02-07 09:49:04 -05:00
Dae Seong Kim
717d72485b fix jobs to create a secret can work on upgrade
This PS fixes the jobs falling into a crash loop state
when upgrading charts.

'kubectl create' command cannot overwrite if a secret already
exists. But 'kubectl apply' command can do it.

Change-Id: Idd6eea06892a30e36e51a9b1130fd7cd84ff65cf
2018-01-29 00:12:28 -08:00
Jaesang Lee
96610abac1 Ceph: fix logic for check ceph version
The logic for check ceph version in some charts has a code that doesn't
work. This patch check ceph version properly.

Change-Id: Ie97a3ec5ac5078f556f59a09db820ee574c60f50
2018-01-17 06:23:52 +00:00
portdirect
b180d28618 Auth: Update credential keys to reference service specifically
This PS moves all credentials for OpenStack services from 'user' to
the service name. This allows a single yaml snippet to articulate
the credentials for a deployment.

Change-Id: Ic720109f2ba854561b23767cb480bcae91f74b6b
2018-01-15 18:54:13 +00:00
Jaesang Lee
aaa997114b Ceph: fix ensure pool function for older than luminous
The storage_init script in some charts has a code that doesn't work
with older than ceph luminous. This PS allows execution in both ceph
luminous and older versions like kraken jewel.

Change-Id: I5d21fb027328e7d3490625894bd14905988ba320
Closes-bug: 1742021
2018-01-12 10:21:22 +09:00
portdirect
5a2f71ebdf Ingress: Allow annotations to be dyanmicly driven
This PS allows the ingress rules to be dynamicly driven from the
values.yaml, permitting the ingress cotnroller to ba changed and
custom rules to be applied: eg whitelisting of clients.

Change-Id: Ica6b4692ff9b6b77d1efe6bae212a1227e56ca66
2018-01-05 00:29:05 -05:00
portdirect
e75f443f05 Gnocchi: many chart fixes
This PS fixes ceph pool creation and secret management, RBAC and
Image naming conventions for the Gnocchi chart.

Change-Id: I8ad569f9420e3575d6c26c5933f23048096161f5
2017-12-28 20:43:37 -05:00
portdirect
fa2620d54b RBAC for OSH
This PS applys RBAC rules to OSH, based off the work
done in https://review.openstack.org/#/c/526464/

Change-Id: I541b0ac1a3972566ef2b66571ae32744dab70c17
2017-12-26 10:24:19 -05:00
Steve Wilkerson
5bc7ded909 Update names of helm test pods for openstack services
This updates the names of the helm test pods to give all services
in OSH-infra/OSH a uniform '{{ .Release.Name }}-test' name, which
allows for easier gathering of test results across all deployed
services

Change-Id: I24df7a18d32b99d1ffaad19647ef724316e2fe20
2017-12-14 14:03:12 +00:00
Pete Birley
f03e618d27 Gnocchi: Keystone secret for k8s 1.8
This PS updates the keystone secret in Gnocci to be compatible with
Kubernetes 1.8 which has stricter requirements for secret
definitions.

Change-Id: Ie5799bdb531fab02ba0c817bdd9d692f3cedd0a9
2017-11-15 03:06:04 +00:00
Hyunsun Moon
0808cf5198 Add option to set external policy to local for openstack services
External traffic policy "local" would be preffered when openstack
service is accessed from external via node port. This option has an
effect only when service node port is enabled.

Change-Id: Ic68cfc59dc39dc842d4790deffa70efe433dd7a6
2017-11-02 15:07:21 +09:00
intlabs
fe6107cf76 Images: Update values to allow simple parse of images being used
This PS updates the values file layout for images to allow simple
parsing of the images in use by charts, allowing them to be queried
and modified much more simply. By moving the image tags to a 'tags'
key, we can extend the options used simply to accomodate extra
options simply (eg prefixing the tag for use with an internal
registry) or pre-pulling the images to reduce chart deploy failure.

Change-Id: I9ec1dbb00d997ab6cb021bf0b698f7aae740e95d
2017-10-23 10:05:20 -05:00
Pete Birley
637383495b Telemetry: add gnocchi chart
This PS adds a gnocchi chart.

Change-Id: I51634a3876a36dde1eb28cc62cef3189e345cd2c
Co-Authored-By: Steve Wilkerson <sw5822@att.com>
Co-Authored-By: Larry Rensing <lr699s@att.com>
2017-10-03 21:56:26 +00:00