48 Commits

Author SHA1 Message Date
Pete Birley
b696c25d5d Glance: use endpoints section and lookups to set port
This PS moves glance to use the endpoints section and lookups to
set the port it serves on.

Change-Id: Ic22e5d59b0821b8482bcbfab1a72180f0b7375a8
2018-03-06 11:31:50 +00:00
Pete Birley
f57972b5b6 dependencies: move static dependencies under a 'static' key
This PS moves static dependencies under a 'static' key to allow
expansion to cover dynamic dependencies.

Change-Id: I38990b93aa79fa1f70af6f2c78e5e5c61c63f32c
2018-02-23 12:31:15 -08:00
Pete Birley
b311f86193 Node Labels: update nodelabels to allow targeting of pods to nodes
This PS updates the node labels to allow pods to be targeted to nodes
on a per type basis.

Change-Id: I45d5383d04fcd1d98740a18d86c1cfc2cb8ec409
2018-02-19 11:51:09 -05:00
portdirect
fa2620d54b RBAC for OSH
This PS applys RBAC rules to OSH, based off the work
done in https://review.openstack.org/#/c/526464/

Change-Id: I541b0ac1a3972566ef2b66571ae32744dab70c17
2017-12-26 10:24:19 -05:00
portdirect
8a92b6f1a5 Images: Glance service specific explicit image names
This PS makes the service-specific images for Glance have
explicit names, allowing simple over-riding of images for an
entire site.

Change-Id: Ib6a5e626dd85bb04ee8599ac9b53b3d5fbaf496b
2017-11-29 04:05:42 +00:00
intlabs
fe6107cf76 Images: Update values to allow simple parse of images being used
This PS updates the values file layout for images to allow simple
parsing of the images in use by charts, allowing them to be queried
and modified much more simply. By moving the image tags to a 'tags'
key, we can extend the options used simply to accomodate extra
options simply (eg prefixing the tag for use with an internal
registry) or pre-pulling the images to reduce chart deploy failure.

Change-Id: I9ec1dbb00d997ab6cb021bf0b698f7aae740e95d
2017-10-23 10:05:20 -05:00
Pete Birley
a27e42b762 Glance: remove oslo-genconfig
This PS removes the modified oslo-genconfig from glance.

Partially implements: blueprint remove-pregenerated-config-templates

Change-Id: Ie4d5dd9e4b03ba360c62f508e98e206f6f894b63
2017-09-21 13:50:23 +00:00
Pete Birley
b3f8b812ca Glance: Backend support and auth improvements
This PS enables the following backends for glance:
 * PVC
 * RBD
 * RadosGW (direct)
 * Swift

It also moves the creation of the RBD pool when required to a storage
init job. This job also creates credentials as required for glance to
use when accessing the required backend, rather than using the admin
keyring.

Change-Id: I90fead961ff73a9263826acc794128fa73ead2e1
2017-09-09 02:13:01 +00:00
Pete Birley
27864cec04 Security: Container user for support openstack services
This PS adds user control for the service user for support openstack
services.

Change-Id: I132511bfc09d20a2f155bb9498a7fe8eeee8b6f9
2017-08-26 22:03:15 +00:00
Mateusz Blaszkowski
fc9677f718 Fix for appending custom volumes
Before this change, there was no ability to append custom volume for
any of the services. The reason was a missing new line character, so
the templates were formatted like this:
- name: pod-shared
  mountPath: /tmp/pod-shared - mountPath: /tmp/test2
  name: test2

Apart from that, for some of the services (mostly job-bootstrap) invalid
indentation for custom volumes (and their mounts) was set.

Closes-Bug: 1712745
Change-Id: Ib57c76a34c0e28ad9e67ea47d1fc250b17711a42
Signed-off-by: Mateusz Blaszkowski <mateusz.blaszkowski@intel.com>
2017-08-24 06:24:47 -04:00
Pete Birley
ff8744a9b9 Licence: Remove licence header from rendered files
This PS removes the licence header from rendered output from tiller,
significantly reducing the configmap size of charts deployed to the
cluster.

Change-Id: I5d1b246f2068f3b83bf59ba79fe8b88bbc9a6161
2017-08-07 17:16:13 -05:00
Pete Birley
35601e2bd3 Charts: make manifests optional for all OpenStack elements
This PS allows the rendering of manifests to be controlled. It enables
both increased control over deployment when required but also makes
development of a feature easier to target.

Change-Id: I1716e8ee23fe5c53f935bd739ea283bc4a2a9963
2017-08-07 14:59:48 -05:00
Pete Birley
cbae720d1d Values: Move mounts to pod key
This PS moves the mounts key to be under the pod key in the values.
It brings further consolation of related configuration params to be
nested under common keys across all charts.

Change-Id: If9963e4f8b438847e2fcad3bdd8c0d71ca9ecdd8
2017-07-14 10:44:35 -05:00
Pete Birley
4d066332a7 Values: Move replicas to pod key
This PS move s the replicas key to be under the pod key in the values.
It brings further consolation of related configuration params to be
nested under common keys across all charts.

Change-Id: I420b06debd0a62ba5d83497be43ff6c49c49d339
2017-07-13 23:08:08 -05:00
Pete Birley
20527cb57c Move k8s pod params under common key
This PS moves K8s pod params under a common key.

Change-Id: Ib4e72e82a4f1540fa800c39d0dcc91b286d96c93
2017-07-11 23:28:47 +00:00
Tin Lam
670a78bcbe Fix file permission and readOnly flag
This patchset enforces stricter file permission on *-etc configmap and
sets readOnly flag to true in a number of charts.

Change-Id: I233689a5d56dd1352e0d81997a94b4cdd6bed5d2
Signed-off-by: Tin Lam <tin@irrational.io>
2017-07-08 13:24:14 -05:00
Pete Birley
ac06f49849 Unify and normalise K8s Resources and Upgrade Strategy
This PS unifies and normalises Kubernetes resource allocation and
update strategy across all OpenStack-Helm elements.

Change-Id: Ia41fc453cb5191fa447ca6e1aa0f5b431c939dc8
2017-07-06 17:48:16 +00:00
Pete Birley
c5bbc97ab7 Soft pod anti-affinity for all pods
This PS adds soft anti-affinity to all pods in OS-H. By doing so
resiliancy is improved by attempting to ensure that pods are created
on seperate nodes.

Change-Id: I0c1092498f7a1e44218ef785ca3f73fa9f49819c
2017-07-03 14:15:40 -05:00
Pete Birley
8ef5d94674 Refactor Ceph secret generation
This PS refactors the ceph chart and secret generation process.
The updated chart replaces the existing "bootstrap" chart.
Additionally, Ceph manifests and deployment guides were modified
accordingly.

Change-Id: I6f5bb88fc0f40cfee8865d9dab83859d765e7537
Co-Authored-By: Larry Rensing <lr699s@att.com>
2017-06-27 13:42:03 -05:00
Pete Birley
81aef1ecea Configmaps: set default mode of files in *-bin configmaps to +x
This PS sets the default modetype of mounts from *-bin configmaps
to 0555, and removes the then unnecessary commands from the manifests.

Change-Id: I93ce0facb06affdf362a58f8520e69ba94ea3034
2017-06-12 00:22:30 -05:00
Steve Wilkerson
161170bf96 Move init containers from annotation to official object
With 1.6, init containers are officially part of the kubernetes
API.  This changes the format of the helm template for the
entrypoint container from json to yaml, and updates the
charts accordingly.

Co-Authored-By: Pete Birley <pete@port.direct>

Change-Id: I569566ce4b031d107af2d38483040a26210bec45
2017-06-09 16:31:53 -05:00
Pete Birley
0df7427dc4 Refactor start scripts, to support graceful termination
This PS add Barbican support, and moves all potentially container
specific logic into the service start script from the api manifests.

Also fixes a permissions issue with the nova-api, which incorrectly
had the NET_ADMIN capability.

Change-Id: I18fc1ea5d7aa70ea7dabb829361a3da57e905100
2017-06-05 17:37:22 -05:00
Darla Ahlert
c394d22112 Add Graceful Termination to all existing charts
This commit adds graceful termination to all existing charts.
It also adds a setting in the values.yaml file for clarity and
the ability to override if wished.

Change-Id: I42025e4be86d248be467c1d2f0980f864c4d440e
2017-06-05 12:38:26 -05:00
Jenkins
592692fdf8 Merge "Update deployment for kubernetes 1.6" 2017-06-02 15:35:15 +00:00
Darla Ahlert
78dd37efc2 Update deployment for kubernetes 1.6
In Kubernetes 1.6, the deployment API version was changed
from extensions/v1beta1 to apps/v1beta1

Change-Id: I14ee465de381d25866224b9eae3512f0b42588d3
2017-06-02 08:45:08 -05:00
Pete Birley
c0651f3e22 Consistency: Move Glance container start commands to scripts
This PS moves the container start commands to scripts. This brings
the service into alignment with others in OpenStack-Helm, and enables
easier debugging and modifcation of the launch commands for services.

Change-Id: I433b5d94d3cfc8c9167a4f4ee75fb460a9c6bd9a
2017-06-01 10:34:42 -05:00
Pete Birley
8c29949c0d Helm-Toolkit: Update naming to be explict and remove old functions.
This PS updates the way helm-toolkit functions are named to
reference the full path they are loacted at. This should make
development and debugging easier. Addtionally unused functions
have been pruned as well.

Change-Id: I03c553f1d01bccc70c86768b416b147c90d9b2f0
2017-05-31 19:52:02 +00:00
Chris Wedgwood
b7150eb0b4 Allow glance to use file method
Allow glance to use the "pvc" method, this was previously called file
but has been renamed for clarity.

We now require Kubernetes 1.6 or later; remove the storage annotation
in favor of storageClassName.

Change-Id: I315eaf68937f91b56c1a26954072bda53767c606
2017-05-25 17:22:14 +00:00
Jenkins
3bb2c91bdb Merge "Cleanup - Adding volume overrides" 2017-05-22 16:23:32 +00:00
Dae Seong Kim
9672d2b184 hotfix to change cephclientglancekeyring key
cephclientglancekeyring key is removed. so it needs to be changed
to glance-etc.

Closes-Bug: #1692459
Related-Bug: #1691011
Change-Id: Ie4b45648a68069c910dbe47c53c4f091dc424da7
2017-05-22 20:46:31 +09:00
Larry Rensing
b02c4d215e Cleanup - Adding volume overrides
Added volume overrides for the remaining kubernetes manifests

Change-Id: I582609b38ac511ef920f849fdfd45fd03ad32677
2017-05-18 14:58:27 +00:00
Dae Seong Kim
b58c5d2515 move ceph info under conf property
Now ceph.enabled property in values.yaml file is not used anywhere
and almost all configuration about ceph is moved under conf property.
In addition, default values.yaml file has no ceph.glance_user property
and still the property is used in templetes.

It looks it's time to move remained ceph properties under conf tree
and remove ceph tree.

Closes-Bug: #1691011
Change-Id: I98f7a85eef517ab806432a7342aa3601e8183e0b
2017-05-18 11:44:20 +09:00
Larry Rensing
fea453ba72 Consolidate volumes across charts
This PS standardizes configmap mounts across all charts to be named
<project>-etc or <project>-bin.  This reduces the amount of volumes
listed in each file.

Change-Id: Idbaf495fa243bb9ea0f6ad755ca4f899d5fc0d6f
2017-05-16 15:49:51 +00:00
Pete Birley
489b641d33 Glance Config Overrides
This commit moves Glance to use the configuration methods from Heat,
Nova, Neutron and Keystone.

It includes a _values-mvp.yaml that applies values suitable for using
a file backend, including the auto creation of a PVC.

Change-Id: I55a96982a7d0adbc118492aff4b56adf127b2cd1
2017-04-25 15:59:09 -05:00
Darla Ahlert
bdf1c242ed Add NodePort to remainder of services 2017-03-31 10:34:21 -05:00
Alan Meadows
3886ba09e9 update other entrypoint macrros correctly this time 2017-03-22 12:31:37 -07:00
Alan Meadows
0537f138ac update other entrypoint macrros with empty mounts parameter until they are refactored 2017-03-22 12:30:21 -07:00
Brandon B. Jozsa
a0c80ac038 add license headers to glance 2017-02-17 09:59:51 -05:00
Pete Birley
116931bb51 Rename common chart, and update all references to functions within it. (#167)
* Rename common chart to helm-toolkit

* Update useage of helpers to include reference to chart they come from.

* Update helm-toolkit function naming

Also catches several functions missed in previous PS

* Update remaining requirements.yaml to use helm-toolbox

* Dep Check container fix for common -> helm-toolbox renaming
2017-02-14 16:52:38 -08:00
Marcellin Tchassem
fc21a2e924 Add resources limits and requests for some charts (#163)
* Add resources limits and requests for each chart

* Refactor the resources limits and requests to follow a patern

* Fix some coding issues

* fix issues resulting from feedback on the resources PR

* Reset some variables to a static value in the neutron chart.

* Substituting variable entrypoint by dependency_check in the concerned files

* Few adjustments

* Update deploy-region.yaml

* Update deployment.yaml

* Add resources limits and requests for each chart

Squah all commits in one.

* Add resources limits and requests for some charts

* cleaning

* Fix indendation issue

* Update deployment.yaml

* Update daemonset-ovs-vswitchd.yaml
2017-02-01 19:47:59 -08:00
Pete Birley
1a13f9ba83 Add support for daemonsets to the Kubernetes-Entrypoint init-container.
It also makes two other changes:

 * Moves the entrypoint container manifest snippet to its own file to reduce loading on the _funcs.tpl file
 * Changes dep-check-init-cont to dep_check_init_cont to match the formatting of other defines used in OpenStack Helm
2017-01-22 05:35:31 +00:00
Alan Meadows
2edf1bcc99 Bugfixes for functional release tagging
* Allow glance to support using default secrets
  if none are provided

* Resolve configmap mounting issue with glance
  ceph secrets

* Ensure keystone wsgi workers/threads are set to
  reasonable numbers for a container implementation
2017-01-20 09:30:08 -06:00
Pete Birley
b1ce9b093b Add glance registry config 2017-01-20 01:19:37 +00:00
Pete Birley
b31a365aea Fix glance containers entrypoints
Also improves glance containers volume specification yaml.
2017-01-20 01:05:07 +00:00
Pete Birley
f498fcb6dd fix typos in init-container merge 2017-01-19 23:49:22 +00:00
Steve Wilkerson
182a27ea7f Add glance config-dir
Added --config-dir flag to the glance-api command
2017-01-19 17:32:58 -06:00
Alan Meadows
ce47732a6b Merge branch 'upstream_master' into glance_changes 2017-01-19 17:09:55 -06:00
Steve Wilkerson
393ed4cf47 Culmination of glance changes
Due to some messy rebases and a botched git history, implemented
all changes into one PR
2017-01-13 15:40:38 -06:00