51 Commits

Author SHA1 Message Date
Gage Hugo
aab5ee7711 Update glance default policy values
There was an issue with the metadef APIs in glance, detailed in
the latest OSSN[0] that they have the potential to leak resources.

This change updates the default policy for the metadef APIs to
be disabled by default.

[0] https://wiki.openstack.org/wiki/OSSN/OSSN-0088

Change-Id: I7377b3a2f3784fe7da78bdd7aba146328cc0f406
2021-03-09 15:55:09 -06:00
Zuul
12b0f920b3 Merge "Remove congress residue" 2021-03-05 22:45:35 +00:00
jinyuanliu
86fd8dd134 Remove congress residue
About congress chart,It's been removed,Remove congress residue now.

Related-Bug: #1917762
Change-Id: Ib52e77330cadf45bd3353bfaedc251485620d9f8
2021-03-04 21:48:39 +08:00
Lucas Cavalcante
379f95bc44 Add nfs cinder backup override
Story: 2008613
Task: 41818
Change-Id: I291d973946387a9c7742a2ff84be7b16de3e18da
Signed-off-by: Lucas Cavalcante <lucasmedeiros.cavalcante@windriver.com>
2021-03-04 08:39:51 -03:00
Zuul
0eb93933ff Merge "Update volume type creation bootstrap logic" 2021-03-03 21:41:53 +00:00
Huang, Sophie (sh879n)
f6e153fd3d Update volume type creation bootstrap logic
Verification is added to Cinder volume type creation logic
under Values.bootstrap to make sure the volume_backend_name is
configured in Values.conf.backends.

Change-Id: I1b9b1eaac8df861d28d4121477de148dba6a2dbf
2021-03-03 14:59:41 +00:00
OpenStack Proposal Bot
8a090d5f91 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Id4f670ef43587d75079f47da1989fa5be0115e99
2021-03-03 07:41:45 +00:00
Zuul
b73ee9a5b6 Merge "Update rbac api version for keystone" 2021-03-03 02:24:22 +00:00
Zuul
9851895de9 Merge "Mount /dev/pts in nova-compute container" 2021-03-02 16:53:45 +00:00
jinyuanliu
da9f28cefa Update rbac api version for keystone
When using a helm3 to deploy , it fails. Helm3 no more support rbac.authorization.k8s.io/v1beta1 , but v1 can support helm2 and helm3.

Change-Id: If37ec26443feb5328d49e6b3c419305832bdae9e
2021-03-02 23:57:51 +08:00
okozachenko
04d600c5b0 Mount /dev/pts in nova-compute container
Nova will check if pty device exist or not under /dev/pts
when get console log.
If it does not exist, cannot get console log.
ref: https://review.opendev.org/c/starlingx/config/+/660268

Change-Id: I2793d1f51c18e81a4271b8b0c50bfe1a2dab8a09
2021-03-01 17:43:42 +02:00
okozachenko
909f967920 Add helm.sh/hook related annotations in keystone chart
Same motivation with openstack/openstack-helm-infra/776466

Depends-On: https://review.opendev.org/openstack/openstack-helm-infra/777980
Change-Id: I4388eda429f3093fed214633e5cebf3105bcebd3
2021-03-01 15:06:01 +02:00
Zuul
287abeecb0 Merge "Update rbac api version for cinder" 2021-02-28 08:35:44 +00:00
Zuul
a94ea5a430 Merge "Update horizon chart releasenotes to latest" 2021-02-27 11:03:27 +00:00
jinyuanliu
566e1cb669 Update rbac api version for cinder
When using a helm3 to deploy , it fails. Helm3 no more support rbac.authorization.k8s.io/v1beta1 , but v1 can support helm2 and helm3.

Change-Id: Ie4e1c79c2b2513318d1b7d6a13712921a6c2a6cb
2021-02-27 11:44:20 +08:00
jinyuanliu
e3cb8aa4d1 Update horizon chart releasenotes to latest
This change updates the releasenotes for the horizon chart to the latest version of the chart as of this patchset.

Change-Id: I7b2df90340f33a5b3edac5a53d8031325f96244d
2021-02-27 03:30:58 +00:00
jinyuanliu
aa5e622b47 BUG for deploying multiple compute nodes
When Deployment of compute nodes is not on all nodes (e.g.Total 5 nodes,but 3 compute nodes),The original method counts all nodes instead of compute nodes,This can result in less than 100%  and the process will get stuck,this is a bug!

Change-Id: I39c5d2014146925afe7fd896123a705c19005ff9
2021-02-27 09:32:27 +08:00
Nafiz Haider
ca47e3c974 Re-enable "feat(tls): Change Issuer to ClusterIssuer""
This reverts commit 2ec17153c6cb918dd357f71824ec59dd0d74dfba.

Reason for revert: resolved bug with cluster issuer versioning

Depends-on: https://review.opendev.org/c/openstack/openstack-helm-infra/+/772814

Co-authored-by: Sangeet Gupta <sg774j@att.com>

Change-Id: If7ebef1cebbe5b1d97ac530dd7136e3fc9232b21
2021-02-26 02:43:09 +00:00
Zuul
352b43acca Merge "Move rabbit-init to dynamic dependency" 2021-02-26 01:28:56 +00:00
Zuul
eb141766c9 Merge "Update rbac api version for nova" 2021-02-26 00:57:18 +00:00
Zuul
bf0408f60c Merge "Update rbac api version for glance" 2021-02-25 22:12:19 +00:00
Gage Hugo
de912628ca Move rabbit-init to dynamic dependency
With a previous change[0] that moved rabbit-init jobs to dynamic
in helm-toolkit, this change continues that work by moving the
keystone rabbit-init job to dynamic as well.

[0] https://review.opendev.org/c/openstack/openstack-helm-infra/+/671727

Change-Id: Iec2ea3fdf36e19ac4f2e203389dbe19737d14c3a
2021-02-25 19:15:49 +00:00
OpenStack Proposal Bot
2de324462a Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I329500297512b1d9c516f1d074bd88ed0088504c
2021-02-25 15:40:33 +00:00
jinyuan
3a05f5c3f9 Update rbac api version for nova
When using a helm3 to deploy , it fails
Helm3 no more support rbac.authorization.k8s.io/v1beta1 , but v1 can
support helm2 and helm3.

This change optimized deployment.

Change-Id: Id3dbbe721f4ded3c54d82852d9c155253d226867
2021-02-19 09:01:25 +08:00
jinyuan
30bd8643e4 Update rbac api version for glance
When using a helm3 to deploy , it fails
Helm3 no more support rbac.authorization.k8s.io/v1beta1 , but v1 can
support helm2 and helm3.

This change optimized deployment.

Change-Id: I107d6e965ca00a6d8b766e91573be2c9aeb4f782
2021-02-18 07:40:20 +00:00
okozachenko
20a1208b20 Use unix socket to connect libvirt in nova
The motivation is to remove 127.0.0.1 in connection_uri and so
can allow live migration in libvirtd.
Plus, realize tls on libvirt to secure.
Now /run is already mounted so it should work

Depends-On: https://review.opendev.org/752263
Change-Id: I911abb8b1ee1e300d02a373e083a404574cc3fea
2021-02-18 04:48:41 +02:00
Roy Tang
e491b838fa Update ovs agent to support host/label overrides
In the ovs agent code, some of the secret ref are hardcoded, and
it breaks the host/label overrides mechanism.  This patchset
fixes it.

Change-Id: Icf3ffc86fde77b1948e86cfd62e83fbdfe16ad8e
2021-02-16 15:49:05 -06:00
Zuul
b4585d5760 Merge "Update Neutron chart release notes to latest" 2021-02-14 07:06:22 +00:00
Zuul
a3bd92be5e Merge "Update aodh, barbican, designate, ironic, magnum, mistral, octavia, panko, rally, senlin and tempest release notes to current" 2021-02-13 18:59:52 +00:00
Zuul
7144ce0c57 Merge "Update glance release notes to current" 2021-02-12 23:08:28 +00:00
Zuul
fbf45f651d Merge "Update barbican release notes to current" 2021-02-12 20:45:32 +00:00
Zuul
9554cf2452 Merge "Update aodh release notes to current" 2021-02-12 20:44:48 +00:00
Reddy, Hemachandra (hr858f)
480c49f15f Update Neutron chart release notes to latest
This commit updates the release notes to latest for Neutron.

Change-Id: I9e645c609e940d9b2f5a6eba5836f7721be6a09f
2021-02-11 14:33:15 -06:00
Reddy, Hemachandra (hr858f)
2ca2142e7e Update Nova chart release notes to latest
This commit updates the release notes to latest for Nova.

Change-Id: I3a54cb777fdef6086532a8068addc79ef50e1b9f
2021-02-11 11:02:06 -06:00
Zuul
8cfad77c68 Merge "Update heat release notes to current" 2021-02-11 05:01:18 +00:00
Reddy, Hemachandra (hr858f)
8d2edaa6ac Update aodh, barbican, designate, ironic, magnum, mistral, octavia,
panko, rally, senlin and tempest release notes to current

Change-Id: Id2d0911969b571d86512a6a803050ee56bd57134
2021-02-10 08:55:55 -06:00
Zuul
04ab75b4ae Merge "Update placement release notes to current" 2021-02-08 19:56:44 +00:00
Zuul
ec83de5e5a Merge "Update cinder release notes to current" 2021-02-05 20:56:18 +00:00
Gupta, Sangeet (sg774j)
d3256726a1 Update ceilometer release notes to current
Change-Id: I75c888a3401cf2cdf4b889d70d5feb5fc54898a3
2021-02-04 16:54:56 +00:00
Gupta, Sangeet (sg774j)
45cde69b17 Update cinder release notes to current
Change-Id: I19f4e24ad6e55d917c7e656f78edfa9364bf721b
2021-02-04 16:53:47 +00:00
Gupta, Sangeet (sg774j)
a98dd106ab Update aodh release notes to current
Change-Id: Iddb3bd0e3502f25839fd4d985ea4b5471930a4ae
2021-02-04 15:48:57 +00:00
Gupta, Sangeet (sg774j)
eab84e55bc Update placement release notes to current
Change-Id: I413f1ea33e1a52919d68a1bdb6208eedca655497
2021-02-03 20:39:17 +00:00
Gupta, Sangeet (sg774j)
9e713eddf4 Update heat release notes to current
Change-Id: Iff4e316d0a70c3fff12f90b80ea2bd5462b81ab2
2021-02-03 20:23:38 +00:00
Gage Hugo
458ef132b0 Update barbican release notes to current
This change updates the releasenotes for barbican to all current
changes as of the date of this commit.

Change-Id: Ibaf2f19aa51b751fab32f978910b33c509599e17
2021-02-03 14:02:15 -06:00
Gage Hugo
d9b031c3d7 Update glance release notes to current
This change updates the releasenotes for glance to all current
changes as of the date of this commit.

Change-Id: I4c81140348246165509644a5633e37e282e7e497
2021-02-01 17:47:16 -06:00
Gage Hugo
fc680cf8c4 Update typo in subPath for volume mount
When using a chart with the flux operator and helm3, it fails
when encountering a volumeMount "subpath" instead of "subPath".

This change corrects the typo to the right camelcase entry.

Change-Id: Id2d9ea25445d84f89b299c7f0b24da1cc5aaf264
2021-01-28 22:51:59 +00:00
Gage Hugo
6ea15a7f9d Add reno job to Openstack-Helm
With OSH now publishing charts regularly with each change, there
needs to be a way to track these changes in order to track the
changes between chart versions.

This proposed change adds in a reno check job to publish notes
based from the changes to each chart by version as a way to
track and document all the changes that get made to OSH
and published to tarballs.o.o.

Change-Id: Iff8681c697957e4711754fc20b07fa6b728eb584
2021-01-20 21:47:35 +00:00
Andrii Ostapenko
44d263b2bf Enable templates linting
- braces
- brackets
- colons
- commas
- comments
- hyphens
- indentation
- key-duplicates

with corresponding code changes.

Also disable enforcement for document-(start|end) rules and
disables warnings to increase readability.

* Unrestrict octal values rule since benefits of file modes readability
  exceed possible issues with yaml 1.2 adoption in future k8s versions.
  These issues will be addressed when/if they occur.

Change-Id: Ic5e327cf40c4b09c90738baff56419a6cef132da
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-11 00:52:51 +00:00
Daniel Badea
11d7e1d49a Cinder support multiple Ceph volume backends
Wrap code making the assumption there is only one Ceph backend
(using is_ceph_volume_configured) in a "range" and use
ceph_backend_list helper to iterate all available Ceph backends.

Move Ceph pool application name in values.yaml from
conf.software.rbd.rbd_pool_app_name* to conf.ceph.pools.*.app_name

Change-Id: If1126e51fe9ebb85185e375dc282e83db63d934c
Depends-On: Iaa67061b05a9d355228ad7d3f5ee0f4f04dbdc66
Signed-off-by: Daniel Badea <daniel.badea@windriver.com>
2019-07-23 16:57:08 +03:00
Itxaka
6c71637222 change the nova cache to dogpile.cache.memcached
Currently there are issues with using the memcache_pool backend as
the memcache driver for nova under python3[0][1] which doesnt seem
like they have a quick fix or something that is backportable to
rocky

This moves the default cache from oslo_cache.memcache_pool to
dogpile.cache.memcached so we can move forward with python3
enabled images.

[0] https://bugs.launchpad.net/cloud-archive/+bug/1812672
[1] https://bugs.launchpad.net/oslo.cache/+bug/1812935

Change-Id: I65a4770c374357a8e1c80d904bcd4af36217448f
2019-04-04 12:06:33 +00:00