This PS removes the requirement for the Nova Metadata API to run with
NET_ADMIN capabilities, and also enables lightwight images without
iptables present to be used.
This has no effect on operation if Neutron is used for networking.
Change-Id: Ie69c74240ca7fd054e3c897c2bf8ebc8ec5c1377
When trying to install nova chart with Ceph enabled, libvirtd pod isn't
starting. It's because container is executing virsh commands before
libvirtd process is up. _libvirt.sh.tpl script needs to be fixed to
start the process first and then execute the commands.
Closes-Bug: #1691384
Change-Id: Icd5f31a5fbeb5985ed19213aeb236a25f600b18c
This PS add Barbican support, and moves all potentially container
specific logic into the service start script from the api manifests.
Also fixes a permissions issue with the nova-api, which incorrectly
had the NET_ADMIN capability.
Change-Id: I18fc1ea5d7aa70ea7dabb829361a3da57e905100
This PS brings in an MVP config for Nova.
The changes to the Libvirt also permit operation on
RHEL family distros.
Closes-Bug: 1683195
Change-Id: I4ce8c9bd53164f1be719271e095edc31e2f3ae4b
This PS moves the container start commands to scripts, which makes
debugging and overriding of container launch params easier.
Change-Id: Ibf5cda2218111360183b8a5eb993c717be84076c
This commit updates the Nova DB init jobs to match those of other
OpenStack Helm Services, it completes the work to move away from
Ansible for DB management.
Change-Id: I2e53846f917a56448392cfebe5d8548f96e3eed2
* Initial Commit of Nova Configuration Overrides
This commit is an evolution of the initial keystone configuration
overrides work
It expands upon that work by introducing many of the same concepts
into nova. It differs in that a few concepts were changed. Namely
the helm-toolkit/_oslo.tpl concept was abandoned, as there are too
many unique oslo paths for configuration elements, so dynamic oslo
setting mechanism was moved locally into configmap-etc.yaml, where
it is generally used.
Secondly, in nova the mount override effort was altered to instead
provide mount "append" capability. Keeping the manifest mounts
closer to the actual pod, and keeping values.yaml a tad smaller.
This still allows the original flexibility of operators adding
mounts, but they cannot "undo" any of the charts built in mounts.
There were several manual tweaks that needd to be done to _nova.conf.tpl
after the oslo-config-gen process this time. This is because there is a
bug in the newton version of generating this file. It does not include
the proper service authentication credentials in the [keystone_authtoken]
section. Future releases have a separate service credentials section
so future config generations will likely not need these added lines.
* Remove unused values.yaml parameters
Fix references to removed helm-toolkit oslo macro
* resolve nova feedback
* bugfix nova-etc/nova-bin swap
* Rename common chart to helm-toolkit
* Update useage of helpers to include reference to chart they come from.
* Update helm-toolkit function naming
Also catches several functions missed in previous PS
* Update remaining requirements.yaml to use helm-toolbox
* Dep Check container fix for common -> helm-toolbox renaming
* Add imagePullPolicy to ceph with default
* Add imagePullPolicy to mariadb with default
* Add missing imagePullPolicies to nova with defaults
* Remove malfunctioning daemonset dependency from nova
* Add missing neutron endpoint definition to nova values
* Force v4 networking in ceph. Repeated bootstrapping
is unreliable without this.
* Update cinder dependencies based on testing
* Optonal Horizon NodePort
* Revert iptables stub for nova-api-osapi because
we lack permississions to overwrite /sbin/iptables. We
will continue to run in a privileged security context
until we have a working solution.