60 Commits

Author SHA1 Message Date
Pete Birley
bede94c835 Endpoint lookup namespace and fqdn support
This PS adds namespace and fqdn support to endpoint lookup functions,
it also permits over-riding of the puplic endpoint for ingress.

Change-Id: Ib61c5c00a214d75fe85fbffe9080c2ae88bd8cb9
2017-08-31 19:06:33 +00:00
Pete Birley
ceb30e8cc7 Jobs: Consoloate on heat-engine for admin jobs where possible.
This ps moves to use a container sultaible for use as the heat engine
for all possible admin jobs - it is lighter than the kolla-toolbox image
and makes it easy to swap out to other image sets. This is as the heat
engine container should contain the openstack client (with all required
libs for the cloud) and the oslo_db supporting libs required by the db
management jobs, as well as the oslo_messaging libs required for future
rabbitmq management expansion.

Change-Id: I5451c15c8fb49c85b4f254cc60156420bee2efea
2017-08-29 04:34:26 +00:00
Pete Birley
7cfd182929 Security: Make policy fully configurable via helm values
This PS moves the policy.json to be fully driven by gotpl,
allowing full configuration without editing the template.

Nova and Cinder are addressed in the seperate patchsets:
 * https://review.openstack.org/#/c/498215/
 * https://review.openstack.org/#/c/498216/

Change-Id: Ia2be5fb4e460d41034fdadbbefc1e48d0869e023
2017-08-26 17:50:22 -05:00
Pete Birley
27864cec04 Security: Container user for support openstack services
This PS adds user control for the service user for support openstack
services.

Change-Id: I132511bfc09d20a2f155bb9498a7fe8eeee8b6f9
2017-08-26 22:03:15 +00:00
Jenkins
d04e69c438 Merge "Enable keystonemiddleware cache encryption" 2017-08-25 01:56:10 +00:00
Dae Seong Kim
aacd11e361 Add Tempest script in helm test framework
Now, openstack-helm support "helm test" function, and It execute rally
container.
Rally also can test Tempest itself, so this fix will be add tempest
test in rally container.

Change-Id: I2c2f684f6583f2a3d9c7279a3d85cb242934e90e
Implements: blueprint add-tempest-in-helm-test
2017-08-16 16:56:10 +09:00
Tin Lam
c35f08c4fa Enable keystonemiddleware cache encryption
This patch set enables keystonemiddleware memcache encryption by providing a
random string key into the service configuration file, and setting the
memcache_security_strategy as ENCRYPT.

Change-Id: Ia030f5414308a29096c644bae70047a323eaffde
2017-08-15 22:47:55 -05:00
Pete Birley
35601e2bd3 Charts: make manifests optional for all OpenStack elements
This PS allows the rendering of manifests to be controlled. It enables
both increased control over deployment when required but also makes
development of a feature easier to target.

Change-Id: I1716e8ee23fe5c53f935bd739ea283bc4a2a9963
2017-08-07 14:59:48 -05:00
Robert Choi
f84716f43e Glance: Add paste_deploy values
Glance bootstrap job fails due to missing 'paste_deploy' values.
This PS solves the issue by adding the values to glance chart.

Change-Id: I850863fe29c25aab9cf57eee62098e2b5d23a7f8
Closes-Bug: 1705421
2017-08-02 14:23:01 +09:00
Pete Birley
f30cbcf108 Update pod affinity to allow customisation
This PS updates the pod affinity function to allow customisation by
operators at the point of deployment.

Change-Id: I8b7b2f584e990e068051d9a6d5cc7b1e1adb5aa5
2017-07-28 15:02:47 +00:00
Pete Birley
cbae720d1d Values: Move mounts to pod key
This PS moves the mounts key to be under the pod key in the values.
It brings further consolation of related configuration params to be
nested under common keys across all charts.

Change-Id: If9963e4f8b438847e2fcad3bdd8c0d71ca9ecdd8
2017-07-14 10:44:35 -05:00
Pete Birley
4d066332a7 Values: Move replicas to pod key
This PS move s the replicas key to be under the pod key in the values.
It brings further consolation of related configuration params to be
nested under common keys across all charts.

Change-Id: I420b06debd0a62ba5d83497be43ff6c49c49d339
2017-07-13 23:08:08 -05:00
Pete Birley
20527cb57c Move k8s pod params under common key
This PS moves K8s pod params under a common key.

Change-Id: Ib4e72e82a4f1540fa800c39d0dcc91b286d96c93
2017-07-11 23:28:47 +00:00
Pete Birley
ac06f49849 Unify and normalise K8s Resources and Upgrade Strategy
This PS unifies and normalises Kubernetes resource allocation and
update strategy across all OpenStack-Helm elements.

Change-Id: Ia41fc453cb5191fa447ca6e1aa0f5b431c939dc8
2017-07-06 17:48:16 +00:00
Pete Birley
c221fa5248 Secret and endpoint standardisation.
This PS moves keystone credentials to the endpoints section within
the values.yaml, and also adds a 'secrets' key, allowing standardiation
of secrets and credential management across OpenStack-Helm.

Change-Id: I86a21e625afd822379ac11351603b2c606a3769f
2017-07-05 12:22:04 -05:00
Pete Birley
22da29c2be Logging: Disable debug logging by default
This PS disables debug logging for all services that had it on, and
removes the key from the default values.yaml. It does however ensure
that the mvp values has the appropriate key to make turning debugging
on simple.

Change-Id: I8ed84d531971cbd7984f029abbebb373af4c7311
2017-06-29 07:10:20 -05:00
Jenkins
e1874a7b1a Merge "Ingress controller for public endpoints" 2017-06-29 05:03:19 +00:00
Pete Birley
c0cf2337a2 Ingress controller for public endpoints
This PS provides the framework for Ingress controller based access to
public APIs.

Services covered:
 * Barbican
 * Cinder
 * Glance
 * Heat
 * Horizon
 * Keystone
 * Magnum
 * Mistral
 * Neutron
 * Nova
 * Senlin

Change-Id: I82d55f6ca41859ebed3312ec7d95b353df09e772
Implements: blueprint api-ingress
External-Tracking-Id: OSH-58, OSH-62
2017-06-28 17:37:10 -05:00
Jenkins
9201234dc6 Merge "Add image id to glance bootstrap for tempest test" 2017-06-28 12:06:58 +00:00
Siri Kim
239a0bbc8e Add image id to glance bootstrap for tempest test
This PS add glance image id to bootstrap, so we can make image
with predefined id for tempest test.

Change-Id: I061af4daa9574f87d82d68fcf3b7a3674436d3cf
Implements: blueprint specify-glance-image-id
2017-06-26 17:38:39 +09:00
Pete Birley
be7ed2b5ab Remove some orphaned values in glance and neutron.
Some unused values were present in glance and neutron that were left
over from the early development of OSH this PS removes them.

Change-Id: I5dbbb1d6e1262e4c06dd6c083724fd213838e5b7
2017-06-23 04:38:13 +00:00
Pete Birley
a7503a7d3f Kubernetes Entrypoint: Lookup service names for dependency checks
The existing entrypoint logic used static names to reolve dependencies.
This prevented the service names, and thus the hostnames of services
being altered. This PS resolves that issue by looking up the service name
from the endpoints specified in the values for a chart.

Partial-Implements: blueprint enhance-entrypoint-dependency-checking
External-Tracking-Id: OSH-21
Change-Id: Ib49490f332f8cd88e98c50d9335dfd314a170936
2017-06-20 08:51:36 -05:00
Tin Lam
8c4e1c0e2d Fix cpu and memory limits for glance
Currently, the memory and cpu limits are identical to the requests.
This patch set ups the limits to be similar to other services
such as nova and neutron.

Change-Id: I597889dd9e19ae672926b772d7ae38947ede26bc
2017-06-18 01:21:39 -05:00
Pete Birley
e4954a861b Glance: Fix bootstrap image reference
The glance boostrap job used the db_init image. This PS rectifies
that.

Change-Id: I4007de943a7fb97f3ca5ecd23e5533d2e10d97c1
2017-06-11 17:31:54 -05:00
Pete Birley
77e02f143c Helm Test: Glance
This PS introduces 'helm test' functionaility to Glance.

Change-Id: I7a25a89f8413aa5e88f28c30f8a040e8d5909bc9
Partial-Implements: blueprint implement-helm-test-for-charts
2017-06-06 18:40:59 -05:00
Darla Ahlert
c394d22112 Add Graceful Termination to all existing charts
This commit adds graceful termination to all existing charts.
It also adds a setting in the values.yaml file for clarity and
the ability to override if wished.

Change-Id: I42025e4be86d248be467c1d2f0980f864c4d440e
2017-06-05 12:38:26 -05:00
Pete Birley
5e193580ed Pod Disruption Budget: Set default to 0
With pod disruption budget set it is not possible to drain nodes
and perform other expected operations. This PS changes the default
value to 0, restoring the typically expected operation of pods.

Change-Id: I43ef35638c98caee2cf567487173399157000ada
2017-05-31 06:11:58 -05:00
Chris Wedgwood
3e0a00f39a Glance; use /var/lib/glance/images for consistency.
Change-Id: I023c7fa473aab21f81bc7271d389d89824869083
2017-05-27 05:20:52 +00:00
Jenkins
78abb8218c Merge "Use the standard Dockerhub MariaDB image" 2017-05-25 21:02:50 +00:00
Chris Wedgwood
b7150eb0b4 Allow glance to use file method
Allow glance to use the "pvc" method, this was previously called file
but has been renamed for clarity.

We now require Kubernetes 1.6 or later; remove the storage annotation
in favor of storageClassName.

Change-Id: I315eaf68937f91b56c1a26954072bda53767c606
2017-05-25 17:22:14 +00:00
Mark Burnett
de20cbb15d Use the standard Dockerhub MariaDB image
Addresses consistency issues that appear with autoincrement fields in
the existing chart, as demonstrated in [1].  It should allow automatic
recovery of 2 out of the 3 (default) cluster members.

It does not address automatic recovery of a complete shutdown of all
cluster nodes.

[1] https://review.openstack.org/#/c/465977/

Change-Id: I84c86e1862f03a6d381bf219b821ea3636049f0b
2017-05-25 08:56:35 -05:00
Jenkins
3bb2c91bdb Merge "Cleanup - Adding volume overrides" 2017-05-22 16:23:32 +00:00
Jenkins
d2de9550f0 Merge "Adding pod disruption budget for glance" 2017-05-19 20:46:26 +00:00
Larry Rensing
3067a60468 Adding pod disruption budget for glance
This PS adds a default pod disruption budget for glance-api and
glance-registry to ensure at least one replica of each is running.

Change-Id: I06364bc2bb816fd4877353857b1adfb13a35a0a7
2017-05-18 16:20:22 +00:00
Larry Rensing
b02c4d215e Cleanup - Adding volume overrides
Added volume overrides for the remaining kubernetes manifests

Change-Id: I582609b38ac511ef920f849fdfd45fd03ad32677
2017-05-18 14:58:27 +00:00
Dae Seong Kim
b58c5d2515 move ceph info under conf property
Now ceph.enabled property in values.yaml file is not used anywhere
and almost all configuration about ceph is moved under conf property.
In addition, default values.yaml file has no ceph.glance_user property
and still the property is used in templetes.

It looks it's time to move remained ceph properties under conf tree
and remove ceph tree.

Closes-Bug: #1691011
Change-Id: I98f7a85eef517ab806432a7342aa3601e8183e0b
2017-05-18 11:44:20 +09:00
Pete Birley
caf549386b Glance: make PV flexible
This PS makes the PV used for the file backend flexible, allowing
operators to specify the annotation and size used/allocated.

Change-Id: I6d153143f9cc268c4c543e392ddf115e5db67a57
2017-05-02 22:31:26 -05:00
Pete Birley
983c6c0c74 Glance: Change default bootstrap image to Cirros
The default bootstrap image for glance was Ubuntu 16.04, which was a
>200Mb download, and is not sutiable for testing in low memory
environments. This moves to the Cirros image which is suited to
this sort of usage.

Change-Id: I3c22f961c43ee68c24e23eb6b483c165540337bd
2017-04-26 16:10:39 -05:00
Pete Birley
489b641d33 Glance Config Overrides
This commit moves Glance to use the configuration methods from Heat,
Nova, Neutron and Keystone.

It includes a _values-mvp.yaml that applies values suitable for using
a file backend, including the auto creation of a PVC.

Change-Id: I55a96982a7d0adbc118492aff4b56adf127b2cd1
2017-04-25 15:59:09 -05:00
Brandon B. Jozsa
a27261415c Update Glance image values
These changes pick a standard image for use with OSH.

Change-Id: I7588955220a343b1b781ead004d22cd373732dfd
2017-04-14 10:38:55 -04:00
wilkers-steve
7fc4a735af Merge pull request #294 from larryrensing/feat/bootstrap-services-glance
feat: image bootstrap for glance
2017-04-06 16:17:07 -05:00
wilkers-steve
d0a9bd2202 Merge pull request #289 from portdirect/0.3.0/db-management-job-scripts
feat: replace ansible with PyMySQL for DB Creation
2017-04-06 08:39:05 -05:00
Brandon B. Jozsa
c681fdc54e Merge pull request #314 from alraddarla/feat/finish-nodeports
Add NodePort to remainder of services
2017-04-04 14:02:14 -04:00
Pete Birley
64bbf6700c Update Glance DB Jobs 2017-04-04 11:33:42 -05:00
Brandon B. Jozsa
b83ce91f1e WIP: ToC Preparation for Openstack (#296)
* complete docs refactor

* replaces /data references in favor of /var/lib/localkube - fixes #95

* additional layout changes

* additional operations layout

* readme updates and versioning updates to multinode doc

* remove dragons

* project goal clarity

* remove 'magic'

* clean up container image concerns

* slight verbiage change

* charts not hard coded

* small change requested

* reconfiguration

* updates to minikube docs
2017-04-01 09:19:32 -07:00
Darla Ahlert
bdf1c242ed Add NodePort to remainder of services 2017-03-31 10:34:21 -05:00
Larry Rensing
c687ea779d added ability to bootstrap glance image 2017-03-21 13:39:07 -05:00
Pete Birley
43df15137d update kubernetes-entrypoint version 2017-03-19 21:48:29 -05:00
Pete Birley
a5e1d7c608 Update Glance Keystone Jobs to match common architecture 2017-03-15 12:09:10 -05:00
Pete Birley
acc243a768 Move Glance to endpoint type lookups 2017-03-03 01:08:59 +00:00