37 Commits

Author SHA1 Message Date
Ritchie, Frank (fr801x)
8cab115304 Add readiness probe timeout
This PS is to add a timeout to the readiness probe. This timeout
is needed in certain environments where the default value of 1
is insufficient.

Change-Id: I0acb6438be9de150b4c36da537379e6032d9646f
2023-02-27 18:45:26 -05:00
okozachenko
cbf0a78c7e Update mysql client version in django.wsgi of horizon
Change-Id: I63706fc6eab309943198e78563732b07ea487318
2023-02-20 20:00:15 +00:00
okozachenko
46f4fdb5f3 Update mysql client version to 1.4.0
From yoga, django 3.x is used and it requires mysqlclient
1.4.0 or newer.

Change-Id: If2090b204122c623bdf3211ae98a9b855fc5b259
2023-02-02 01:59:11 +11:00
okozachenko
500f0a8565 Fix container_infra api version in horizon
The latest one is 1.10.

Change-Id: I8af9727d55b8ceee650dcc18563f6adc615483cf
2023-01-14 03:53:01 +11:00
Gage Hugo
5ffefb60c1 Remove train and ussuri overrides
We dropped train support a long time ago now, and our latest efforts
are to drop ussuri/bionic images. This change removes any leftover
train overrides as well as any ussuri overrides. This also changes
any image defaults to use wallaby.

Change-Id: I818a3a79faa631ec1b7de625f2113c6f19610760
2022-10-24 16:00:59 -05:00
josebb
51b6cf4664 Support SSL identity endpoint in horizon
Change-Id: I14c99d6966f3610425c5430d40f28d7bce7d2750
2022-08-13 12:06:22 +03:00
Brian Haley
ced30abead Support image registries with authentication
Based on spec
support-OCI-image-registry-with-authentication-turned-on.rst

Each Helm chart can configure an OCI image registry and
credentials to use. A Kubernetes secret is then created with this
info. Service Accounts then specify an imagePullSecret specifying
the Secret with creds for the registry. Then any pod using one
of these ServiceAccounts may pull images from an authenticated
container registry.

Related OSH-infra change:
https://review.opendev.org/c/openstack/openstack-helm-infra/+/848142

Change-Id: I54540f14fed29622bc5af8d18939afd06d65e2d8
2022-08-11 00:18:37 +00:00
okozachenko
a8f0ca2dd1 Remove blank line in logo configmap
Change-Id: Id878b58bee6ec14aff9da9829864c18143b055bf
2022-07-06 19:27:35 +10:00
Gage Hugo
89addfd4e1 Add Xena and Yoga values overrides
This change adds the overrides needed to run both the Xena and
Yoga releases in the OSH zuul jobs.

Change-Id: I65e016a4cb3fd52707ab29c37f025818fcb6c405
2022-06-08 17:21:57 +00:00
Schubert Anselme
8d5ddc9035
Migrate CronJob resources to batch/v1 and PodDisruptionBudget resources to policy/v1
This change updates the following charts to migrate CronJob resources to the batch/v1 API version, available since v1.21. [0]
and to migrate PodDisruptionBudget to the policy/v1 API version, also available since v1.21. [1]

- aodh (CronJob & PodDisruptionBudget)
- barbican (PodDisruptionBudget)
- ceilometer (PodDisruptionBudget)
- cinder (CronJob & PodDisruptionBudget)
- cyborg (PodDisruptionBudget)
- designate (PodDisruptionBudget)
- glance (PodDisruptionBudget)
- heat (CronJob & PodDisruptionBudget)
- horizon (PodDisruptionBudget)
- Ironic (PodDisruptionBudget)
- Keystone (CronJob & PodDisruptionBudget)
- magnum (PodDisruptionBudget)
- masakari (PodDisruptionBudget)
- mistral (PodDisruptionBudget)
- neutron (PodDisruptionBudget)
- nova (CronJob & PodDisruptionBudget)
- octavia (PodDisruptionBudget)
- placement (PodDisruptionBudget)
- rally (PodDisruptionBudget)
- senlin (CronJob & PodDisruptionBudget)

0: https://kubernetes.io/docs/reference/using-api/deprecation-guide/#cronjob-v125
1: https://kubernetes.io/docs/reference/using-api/deprecation-guide/#poddisruptionbudget-v125

Change-Id: I2fc0692e1c8e2c4fa4d4ca1da96b5c6a832343fa
2022-05-19 10:08:18 -04:00
josebb
1ac8b99f7e Add helm hook annotations in horizon db-init and db-sync jobs
Change-Id: I5e4b86cdf16e11d30142819e496f0d46ebdfae0d
2022-04-22 19:57:50 +03:00
okozachenko
ff119481e8 Add SHOW_OPENRC_FILE value in horizon
Change-Id: I633c89346f3b717b1f984491ff1c3abc34e0b997
2022-04-18 17:33:24 +10:00
Gage Hugo
cb177f0400 Remove unsupported values overrides - horizon
The horizon chart contains several values overrides for openstack
releases that are no longer supported by openstack-helm. This
change removes those files from the chart.

Change-Id: Id8f90f8765b7d58011890d47a6cbaab8ded18d6f
2022-04-07 15:23:34 -05:00
Thiago Brito
6af83764f0 Enable taint toleration for horizon
This changes use the helm-toolkit template for toleration
in openstack services

Signed-off-by: Lucas Cavalcante <lucasmedeiros.cavalcante@windriver.com>
Story: 2009276
Task: 43531
Depends-On: I168837f962465d1c89acc511b7bf4064ac4b546c
Change-Id: Ic4bcea7fdbfe600343a42d801b3257aab593bd26
2022-03-23 17:42:46 -03:00
okozachenko
cff52b9ff6 Add custom logo
Change-Id: Iaa1a023f19e40c96b35757f7e13c2cfbaebc6f22
2022-01-24 23:36:50 +11:00
xuxant02@gmail.com
4f8208e371 Fix OPENSTACK_API_VERSION
Fix container_infra api version value to container-infra.

Change-Id: I6c0bb2efc0ec9a4c227e48ed14f0d5bad526e76f
2022-01-17 16:18:29 +05:45
root
85f2ced17f Add local_settings.d
Change-Id: Ibf64d80a10e1bbe46bdeb931340e3f7e2c3003db
2022-01-10 19:48:04 +11:00
okozachenko
3f89267bb3 Add OPENSTACK_ENDPOINT_TYPE value in horizon
Change-Id: Ic0c6996e4af31dc5e293f83b1089c48810ccab34
2021-12-07 14:54:11 +01:00
xuxant02@gmail.com
39781a7d3d Added container_infra api version in values file to render in template
Horizon complains about not defined the container_infra version in OPENSTACK_API_VERSIONS when using the magnum dashboard in horizon. Additional of the api version of the container_infra solves the issue.

Change-Id: I99faeffc82d9d0e50e01f17f3fbf2ca0d19c161b
2021-11-29 20:07:41 +05:45
okozachenko
3d344e43a2 Support both json and yaml RBAC Policy Format
Oslo policy supports both JSON as well as YAML formatted file yet.
Because some projects yet use json file such as monasca-ui.

So horizon chart has to support both of them. Once all projects
convert their format to YAML we can remove json manifests.

Change-Id: I50ade6764750ac556cf552a003eb825d6b4b83d5
2021-11-01 10:36:08 +01:00
Gage Hugo
c20c1e4400 Update htk requirements repo
As part of the move to helm v3, all the charts in the OSH repos
will no longer lint/build properly due to a lack of helm serve
in helm v3.

This change modifies the helm-toolkit repo location to the
osh-infra repo in order to account for the removal oh helm serve.

This work is part of the migration to helm v3 and will be utilized
in future changes.

Change-Id: I90d25943d69ad6c76455f7778a4894f00c525c46
2021-10-10 18:45:28 -05:00
Gage Hugo
1e651dc3c3 Helm 3 - Fix Job Labels
If labels are not specified on a Job, kubernetes defaults them
to include the labels of their underlying Pod template. Helm 3
injects metadata into all resources [0] including a
`app.kubernetes.io/managed-by: Helm` label. Thus when kubernetes
sees a Job's labels they are no longer empty and thus do not get
defaulted to the underlying Pod template's labels. This is a
problem since Job labels are depended on by
- Armada pre-upgrade delete hooks
- Armada wait logic configurations
- kubernetes-entrypoint dependencies

Thus for each Job template this adds labels matching the
underlying Pod template to retain the same labels that were
present with Helm 2.

[0]: https://github.com/helm/helm/pull/7649

Change-Id: Ib5a7eb494fb776d74e1edc767b9522b02453b19d
2021-10-06 13:54:58 -05:00
xuxant02@gmail.com
fac3c74fdb Removed default policy from horizon chart
The policy document and policy documents in the code are conflicting and creating strange issue. As the policy for nova, neutron, keystone, glance and cinder are available in horizon code, they have been removed from the chart values file.

Change-Id: I78b487c11d3d018b18ce823ffd9d8b8940dfa575
2021-09-27 17:36:43 +05:45
root
2787c16197 Add default polices
Change-Id: Ia9c054a246b258eff5b196e582aa2a743c95bbd2
2021-09-07 15:59:17 +02:00
root
764affd1eb Fix enable password retrieve config value
Now OPENSTACK_ENABLE_PASSWORD_RETRIEVE value is string so always
get true regardless of the config value.

Change-Id: I0fb1203f22ddd6e707eeb80f72a3685c3b9c350f
2021-08-19 16:17:42 +02:00
Andrii Ostapenko
3ac3caa013 Add support for Victoria and Wallaby
Defines compute kit and cinder jobs for new releases with
corresponding values overrides.

Disables compute agent list test for Wallaby since related API
is removed [0].

Since Wallaby with switch of osc to sdk '--id auto' is no longer
treated specially in 'openstack flavor create'. The same behavior
can be achieved w/o specifying --id flag for flavor creation [1].

Starting Wallaby 'nova-manage api_db version' returns init version
for empty database greater than 0 [2]. _db-sync.sh.tpl logic prior to
this commit does not work due to this. We need to either remove
(done in current commit) or justify and alter previous logic.

[0] https://review.opendev.org/749309
[1] https://review.opendev.org/750151
[2] https://opendev.org/openstack/nova/src/branch/stable/wallaby/nova/db/sqlalchemy/migration.py#L32

Change-Id: I361431d9aa8c1a06c5d59f479fb161ecd87e2ee2
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2021-08-02 15:46:07 +00:00
Kabanov, Dmitrii
b1abce9a75 Add Ussuri release support
The PS adds the set of overrides for Ussuri release.

Change-Id: I6b3055e376aa14d0c2ecbea638e6e9ba3b03bde5
2021-06-30 16:47:22 -07:00
Mohammed Naser
947aac114f Fix multidomain support selector
At the moment, the multidomain support selector is broken because
it always puts the value of a boolean inside a string which always
evaluates to true, which means setting it to false does nothing.

This patch drops the quotes around the templated configuration,
that way, it is taken for the literal boolean value.

Change-Id: I02c0a0ece680ecb55e83f3da5a992398c3ab6390
2021-06-25 13:16:31 -04:00
okozachenko
6cd9a2339d Add openstack_enable_password_retrieve variable
in horizon value

Change-Id: Icc33228e06ecc71717aad39309f37986be3b46f2
2021-06-07 18:25:43 +03:00
Thiago Brito
8ab6013409 Changing all policies to yaml format
In the Victoria cycle oslo.policy decided to change all default policies
to yaml format. Today on openstack-helm we have a mix of json and yaml
on projects and, after having a bad time debugging policies that should
have beeing mounted somewhere but was being mounted elsewhere, I'm
proposing this change so we can unify the delivery method for all
policies across components on yaml (that is supported for quite some
time). This will also avoid having problems in the future as the
services move from json to yaml.

[1] https://specs.openstack.org/openstack/oslo-specs/specs/victoria/policy-json-to-yaml.html

Signed-off-by: Thiago Brito <thiago.brito@windriver.com>
Change-Id: Id170bf184e44fd77cd53929d474582022a5b6d4f
2021-05-26 18:15:41 -03:00
Tin
dd55414d05 fix(pep8): makes python script pep8 compliant
Fixes horizon python script so it is pep8 compliant.

Change-Id: I704d3e83b0ee62173207559379e22d04aa96fcbf
Signed-off-by: Tin <tin@irrational.io>
2021-05-24 07:33:11 +00:00
Gage Hugo
5233582991 Remove support for openstack releases older than T
This change bumps each openstack chart version up to the next
greatest minor version of 0.2.0, signifying that openstack-helm
will no longer support older, EOL releases for each chart.

Change-Id: I7ce80c7bdc779c1de4472079f18102f506bfbb90
2021-04-29 12:04:34 -05:00
Gayathri Devi Kathiri
64cf176bef Implement "CSRF_COOKIE_HTTPONLY" option support in horizon
The HTTP only flag protects the session cookies from
cross-site scripting.

Change-Id: Iec07b3b447051726ce218e5f31c8bf583731a90c
2021-04-09 15:51:51 +00:00
guilhermesteinmuller
8f38a1c45f Update glance default policy values
Currently, when users try to navigate through horizon
panels or use the command-line interface that contains
calls to /api/glance/metadefs it will pop up insufficient
permission errors due to the fact we are disabling [1]
the metadef APIs in glance addressing OSSN-0088 [2].

As a side effect on how we address the OSSN, all API calls
to metadefs will be forbidden for any user, which is not recommended
in production environments. However, we have the current
recommendation of the OSSN which allows CRUD of metadef to
admin only and provide read access to all users.

[1] aab5ee7711
[2] https://wiki.openstack.org/wiki/OSSN/OSSN-0088

Story: 2008761
Task: 42128
Change-Id: Ib1415cadbbfab874a8d44ac6b5c6fba3c7502242
2021-03-25 19:32:08 -03:00
jinyuanliu
e3cb8aa4d1 Update horizon chart releasenotes to latest
This change updates the releasenotes for the horizon chart to the latest version of the chart as of this patchset.

Change-Id: I7b2df90340f33a5b3edac5a53d8031325f96244d
2021-02-27 03:30:58 +00:00
Nafiz Haider
ca47e3c974 Re-enable "feat(tls): Change Issuer to ClusterIssuer""
This reverts commit 2ec17153c6cb918dd357f71824ec59dd0d74dfba.

Reason for revert: resolved bug with cluster issuer versioning

Depends-on: https://review.opendev.org/c/openstack/openstack-helm-infra/+/772814

Co-authored-by: Sangeet Gupta <sg774j@att.com>

Change-Id: If7ebef1cebbe5b1d97ac530dd7136e3fc9232b21
2021-02-26 02:43:09 +00:00
Gage Hugo
6ea15a7f9d Add reno job to Openstack-Helm
With OSH now publishing charts regularly with each change, there
needs to be a way to track these changes in order to track the
changes between chart versions.

This proposed change adds in a reno check job to publish notes
based from the changes to each chart by version as a way to
track and document all the changes that get made to OSH
and published to tarballs.o.o.

Change-Id: Iff8681c697957e4711754fc20b07fa6b728eb584
2021-01-20 21:47:35 +00:00