28 Commits

Author SHA1 Message Date
Pete Birley
108d9606d7 OVS: update container privs
This PS updates the privs granted to the OvS containers.

Change-Id: Ie50ae5692dbf67c19f55521a5cb46308480f737a
Signed-off-by: Pete Birley <pete@port.direct>
2018-07-31 20:50:32 +00:00
caoyuan
d25b3221c3 Fix the default values for some projects
Change-Id: I4e812e5e4c61cde6d793300470e0777b65c337d7
2018-06-26 12:59:04 +08:00
Pete Birley
5cfa1501a2 Daemonsets/Deployments: Use current kubernetes api version
This PS moves to use the current ga version for kubernetes daemonsets,
additionally any remaining deployments that were using the
`extensions/v1beta1` have been updated to `apps/v1`.

Story: 2002205
Task: 21735
Depends-On: If9703162dc472af1e6096bf2b9062802fd5ce8ab

Change-Id: Iba4e3d2798c54639e077b80999e669c79b616c6f
Signed-off-by: Pete Birley <pete@port.direct>
2018-06-15 14:35:31 -05:00
Pete Birley
460675bf7f Add image management function to manifests
When removing helm-toolkit from OSH and swithcing to use the
toolkit from OSH-Infra, the image declaration function was missed.

Depends-On: I2f2012590d81ffcb159d49d8a76eedd4441744cd
Change-Id: I0f1118bb748f3fe1b6bb73acfc00e77c5cca9c7d
Signed-off-by: Pete Birley <pete@port.direct>
2018-05-20 10:10:16 -05:00
Hyunsun Moon
896fc6b8d2 ovs,neutron: use auto_bridge_add for external bridge and interface
Also changed ovs-agent-init to take care of configuring default external
bridge and interface for cosistency with lb-agent.

Change-Id: I1d893b73a784f55594c30f17ef022348d68f0f1b
2018-05-15 14:20:22 +00:00
Steve Wilkerson
354b311ec5 Add local-registry image managment to OSH from OSH-Infra
This PS adds the local registry image managment to OSH from OSH-Infra.
With this the delta between helm-toolkits in the Repo's is removed,
allowing the toolkit from OSH-Infra to be used and the one from OSH
to be depreciated.

Change-Id: If5e218cf7df17261fe5ef249d281f9d9637e2f6a
Co-Authored-By: Pete Birley <pete@port.direct>
2018-05-12 14:35:48 +00:00
Sean Eagan
97ac197a6e Move to v0.3.1 of kubernetes-entrypoint
Move to v0.3.1 of kubernetes-entrypoint which has 2
breaking changes to pod dependencies, and also adds support for
depending on jobs via labels.

Change-Id: I49d2cea11fbe5c5919ae22a020b877ebbb285992
2018-04-25 12:45:50 -05:00
Hyunsun Moon
6c9b4df6fe openvswitch: allow setting ovsdb connection using vsctl
Also changed neutron agents to use default, ptcp:6640:127.0.0.1.

Change-Id: Id43c376851f0c408da4684c219dc79ef4a1c157b
Closes-Bug: 1761117
2018-04-24 11:01:31 +09:00
Hyunsun Moon
18d85dbf7f openvswitch: use pidfile option
Make appctl to search pidfile for exit command as pid 1 is not
always the target process in some cases. For example, pid 1 is
"pause" when pid namespace sharing is enabled in your k8s cluster.

Change-Id: I90e202245a9522fe53bea7e1f047061a0a280834
2018-04-12 04:58:59 +00:00
Sean Eagan
85587f2f56 Use v0.3.0 of kubernetes-entrypoint
This version is already being used by some charts, so this brings the
rest of the charts in line and allows them to use a new feature,
pod dependencies, that this version provides.

Change-Id: Ie8289eb09b31cd8f98c2c5b4dd5bbe469078e6d8
2018-03-19 10:35:36 -05:00
Pete Birley
f57972b5b6 dependencies: move static dependencies under a 'static' key
This PS moves static dependencies under a 'static' key to allow
expansion to cover dynamic dependencies.

Change-Id: I38990b93aa79fa1f70af6f2c78e5e5c61c63f32c
2018-02-23 12:31:15 -08:00
Chris Wedgwood
6b844382ad yaml cleanup: trim multiline strings
Change-Id: Ice615c1d252651793dfa09b8e85a5b4228d68737
2018-02-20 16:39:52 +00:00
Pete Birley
b311f86193 Node Labels: update nodelabels to allow targeting of pods to nodes
This PS updates the node labels to allow pods to be targeted to nodes
on a per type basis.

Change-Id: I45d5383d04fcd1d98740a18d86c1cfc2cb8ec409
2018-02-19 11:51:09 -05:00
portdirect
482d9db0c3 OpenvSwitch: Move to lightweight OvS 2.8.1 image
This PS moves to use a lightweight build of OvS 2.8.1 using the
offical k8s network base image.

Change-Id: Ieea624b6253754bfc875eca5af402944ab97c7f3
2018-02-17 22:49:19 +00:00
portdirect
fa2620d54b RBAC for OSH
This PS applys RBAC rules to OSH, based off the work
done in https://review.openstack.org/#/c/526464/

Change-Id: I541b0ac1a3972566ef2b66571ae32744dab70c17
2017-12-26 10:24:19 -05:00
portdirect
cc81c5f558 OvS: Implement cleaner shutdown and start logic
This PS adds cleaner shutdown and start logic to the OvS components.

Change-Id: I5c7fb212163a19d7584b37c20e7c6c757b498856
Co-Authored-By: SamYaple <sam@yaple.net>
2017-11-28 21:42:24 -05:00
Zuul
d6f1aead74 Merge "Revert "openvswitch: Move IP address from physical device to bridge"" 2017-11-17 02:50:36 +00:00
Pete Birley
d6a30ff6a4 Revert "openvswitch: Move IP address from physical device to bridge"
This prevents the pod restarting correctly on a node reboot - we need
to find another way to do this.

This reverts commit 27aadd67e05632afb86e97a39f775c0a1cc5f81f.

Change-Id: Id7d4ae94ade99d38729b30d6d2ba7d5385d50a4b
2017-11-15 17:43:11 +00:00
Zuul
f8377b1258 Merge "Kernel Modules: Load via chroot into host" 2017-11-13 20:08:00 +00:00
intlabs
35267bffe4 Kernel Modules: Load via chroot into host
This PS moves the loading of kernel modules required by services to
being perfromed via a chroot on the host, this ensures that the correct
module is found and provides compatibility across distros.

Change-Id: I889fdd047a24bf4b123dadf9f6d6e6e8079d69d1
2017-10-31 23:51:53 +00:00
Hyunsun Moon
27aadd67e0 openvswitch: Move IP address from physical device to bridge
A physical ethernet device that is part of an Open vSwitch bridge
should not have an IP address. This patch restores the IP address
by moving it to the bridge itself.

Change-Id: I9100a65ecfbb0433a55449178d06879509d01987
2017-10-25 11:56:37 +09:00
intlabs
fe6107cf76 Images: Update values to allow simple parse of images being used
This PS updates the values file layout for images to allow simple
parsing of the images in use by charts, allowing them to be queried
and modified much more simply. By moving the image tags to a 'tags'
key, we can extend the options used simply to accomodate extra
options simply (eg prefixing the tag for use with an internal
registry) or pre-pulling the images to reduce chart deploy failure.

Change-Id: I9ec1dbb00d997ab6cb021bf0b698f7aae740e95d
2017-10-23 10:05:20 -05:00
Pete Birley
592cd2a939 Bash: remove tabs in openvswitch script
This PS removes the tabs in the openvswitch vswitchd start script.

Change-Id: I80f3251ea8fef536694862f91c750277cc912eb3
2017-10-14 11:58:46 -05:00
Chris Wedgwood
2715620d17 openvswitch: wait for ovs socket readiness
Add a check (with a timeout) to wait for the openvswitch socket to
prevent erronious crashes on inital startup.

Change-Id: I000425a439f320974904129b65b7840702693ab4
2017-10-13 22:52:34 +00:00
Chris Wedgwood
cb28c05da5 Clarify type of auto_bridge_add
With auto_bridge_add defined as:

  auto_bridge_add:
  # nothing here

helm doesn't treat is as am empty table so issues warnings such as:

    2017/10/03 19:24:37 warning: destination for auto_bridge_add is a table. Ignoring non-table value <nil>

This happens most of the time as we use `helm --values=...` to augment
values.yaml in the chart.

This change clarifies it is indeed a table and the warnings no long
appear.

Change-Id: Ib733ed72df49e134a9199e4024b2893629b990dc
2017-10-03 23:54:05 +00:00
Artur Korzeniewski
4eb5e8b5fb OpenVSwitch: remove not used value network.interface.tunnel
Removing the network.interface.tunnel value from openvswitch chart not
to confuse the users.

After splitting out openvswitch from neutron chart, the value in config
network.interface.tunnel is not used in openvswitch chart.
Tunnel interface is specific to neutron's L2 agent only, not openvswitch
itself.

Change-Id: I40a645398bac8ca56c9e4e96bdbfafcbcc95e9b8
2017-09-08 15:27:00 +02:00
Artur Korzeniewski
ca05f7ac3c Neutron and OVS: add full name to ovs and lb daemonsets
Add neutron prefix to lb-agent and ovs-agent.
Rename ovs-db and ovs-vswitchd to openvswitch-db and openvswitch-vswitchd.

Change-Id: Iad69b0c00d17e59a9f0eb66003e4512ccaeab128
2017-09-04 13:58:59 +02:00
Pete Birley
37b099e320 Neutron: Move OpenVSwitch into its own chart
This PS moves OpenVSwitch into its own chart - decoupling it from neutron,
both making it easier to deploy and use seperately and permitting
use of other network backends.

Partially implements: blueprint split-nova-and-neutron-infra

Change-Id: Ifd637136b950ddf1ba1c26ce76c9bbdeafc232c3
2017-08-30 16:01:29 +00:00