Commit Graph

351 Commits

Author SHA1 Message Date
jayonlau
6d5c4265f8 Remove helm status from deployment scripts for tenant-ceph
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I649512e17fc62049fef5b9d5e05c69c0e99635f9
2021-10-13 13:03:18 -04:00
jayonlau
746a98ebed Remove helm status from deployment scripts for podsecuritypolicy
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I7ed4a88fca679b1d27c74f0e260e690093fdf591
2021-10-13 13:00:37 -04:00
jayonlau
24fd882cd6 Remove helm status from deployment scripts for osh-infra-monitoring
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I7d17d2ff4a44fc8d16cc653b33253cce536bfce1
2021-10-13 12:58:17 -04:00
jayonlau
42195465f7 Remove helm status from deployment scripts for osh-infra-monitoring-tls
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I7a14e510fb1cfadcf2e124314b52c7cac4ac0af1
2021-10-13 12:55:42 -04:00
jayonlau
311fe70d3b Remove helm status from deployment scripts for osh-infra-logging
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: If27f87fceb79162458f22c07a35fe813b6026830
2021-10-13 12:52:20 -04:00
jayonlau
0e94f35e9c Remove helm status from deployment scripts for osh-infra-logging-tls
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: Icc845f0ee15740802e97a4749e7181d6f372e4b2
2021-10-13 12:49:21 -04:00
jayonlau
962686763b Remove helm status from deployment scripts for osh-infra-local-storage
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I507f6e786b5e35741030c500368638d586c99c12
2021-10-13 12:46:22 -04:00
jayonlau
391813463d Remove helm status from deployment scripts for openstack-support
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: Ia24fadf575dc5230246f3efa32a00fa1e3614abf
2021-10-13 12:43:08 -04:00
jayonlau
f4ec1c4cd3 Remove helm status from deployment scripts for network-policy
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I2264d29cd2dad1bc7636de8247ebec7f611a1f16
2021-10-13 12:38:05 -04:00
jayonlau
248a280293 Remove helm status from deployment scripts for keystone-auth
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I4cf135dc9852506cc2e853c9faa8544b7b2e2fae
2021-10-13 12:33:07 -04:00
jayonlau
74b79700c0 Remove helm status from deployment scripts for federated-monitoring
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I21ba5d8ca6f86954c793268142419e0a9e083943
2021-10-13 12:29:23 -04:00
jayonlau
60a9540e0b Remove helm status from deployment scripts for multinode
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: Ia600b979bf48629962577b3c5674bfa7415d78c0
2021-10-13 12:25:08 -04:00
jayonlau
2ef1d9b7ed Remove helm status from deployment scripts for elastic-beats
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I5c6dc5ea826c57b8c442ee0e876010a9ab726612
2021-10-13 12:17:49 -04:00
jayonlau
4df5e23c06 Remove helm status from deployment scripts for common
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: I8e035d70dd652d5253f534ad6b28042347158ff4
2021-10-13 12:12:22 -04:00
jayonlau
38f529faca Remove helm status from deployment scripts for apparmor
With the move to helm v3, helm status requires a namespace to be specified, but doing so breaks helm v2 compatability. This change removes the usage of helm serve in openstack-helm-infra's deployment scripts.

Change-Id: Idd97b6c8d2531c8cd55629a3ce91b2581af904f4
2021-10-13 12:01:56 -04:00
Tin Lam
5f75ffa180 fix(ssl): fixes libvirt ssl job
Changes the override to use dynamically generated certs for the
libvirt-ssl jobs so they don't expire in the future. Also, changes it so
it is voting again like before.

Signed-off-by: Tin Lam <t@lam.wtf>
Change-Id: If7215961b0b9a7cad75afd7f78592515b74a7b58
2021-09-27 12:45:29 -05:00
Gage Hugo
9030ff05da Remove unused jobs and related files
This change removes a bunch of unused and unmaintained files
and job declarations related to deploying osh-infra with armada.

Change-Id: I158a255132cd6b02607b6e1e77b8b9525cc8a3d5
2021-09-06 22:23:33 -05:00
jinyuanliu
cc9ad68b30 Clean up residual file
The soft link file has been deleted, This path cleans up the redundant files.

Change-Id: I71b9f7de7bf2cfac71984047b8d44d707ed2b07f
2021-06-25 13:53:01 +08:00
Parsons, Cliff (cp769u)
d9404f89c2 Enable Ceph CSI Provisioner to Stand Alone
The current implementation of the Ceph CSI provisioner is tied too
closely with the older Ceph RBD provisioner, which doesn't let the
deployer deploy Ceph CSI provisioner without the old RBD provisioner.

This patchset will decouple them such that they can be deployed
independently from one another.

A few other changes are needed as well:
1) The deployment/gate scripts are updated so that the old RBD and
   CSI RBD provisioners are separately enabled/disabled as needed.
   The original RBD provisioner is now deprecated.
2) Ceph-mon chart is updated because it had some RBD storageclass
   data in values.yaml that is not needed for ceph-mon deployment.
3) Fixed a couple of bugs in job-cephfs-client-key.yaml where RBD
   parameters were being used instead of cephfs parameters.

Change-Id: Icb5f78dcefa51990baf1b6d92411eb641c2ea9e2
2021-06-15 14:48:09 +00:00
Steven Fitzpatrick
d3c6069be3 Elasticsearch: Make templates job more robust
This change primarily changes the type of the api_objects yaml structure
to a map, which allows for additional objects to be added by values
overrides (Arrays/Lists are not mutable like this)

Also, in the previous change, some scripts in HTK were modified, while
other were copied over to the Elasticsearch chart. To simplify the chart's
structure, this change also moves the create_s3_bucket script to Elasticsearch,
and reverts the changes in HTK.

Those HTK scripts are no longer referenced by osh charts, and could be candidates
for removal if that chart needed to be pruned

Change-Id: I7d8d7ef28223948437450dcb64bd03f2975ad54d
2021-04-12 18:40:11 +00:00
Steven Fitzpatrick
6de864110e Elasticsearch S3 Update
This change updates how the Elasticsearch chart handles
S3 configuration and snapshot repository registration.

This allows for
  - Multiple snapshot destinations to be configued
  - Repositories to use a specific placement target
  - Management of multiple account credentials

Change-Id: I12de918adc5964a4ded46f6f6cd3fa94c7235112
2021-04-06 15:12:34 +00:00
Zuul
0d8331d7ec Merge "fix(script): removes replacement overrides" 2021-03-26 18:00:33 +00:00
Steven Fitzpatrick
4fb159f7a3 Elasticsearch Disable Curator in Gate & Chart Defaults
Since chart v0.1.3 SLM policies have been supported, but we still
run curator in the gate, and its manifest toggles still default to
true

Change-Id: I5d8a29ae78fa4f93cb71bdf6c7d1ab3254c31325
2021-03-22 21:16:59 +00:00
Tin Lam
b72f750e87 fix(script): removes replacement overrides
This removes the functionality to perform envsubst in the feature
gate script to prevent users with specific env set running into
unexpected error. This feature will be re-visited in the future to
be made more robust.

Signed-off-by: Tin Lam <tin@irrational.io>
Change-Id: I6dcfd4dad138573294a9222e4e7af80c9bff4ac0
2021-03-19 01:14:09 -05:00
Gupta, Sangeet (sg774j)
d64c5fea64 TLS gates from infra monitoring
Change-Id: If41dae31763abac8c9c65b1650556438a9b6b0df
2021-03-02 16:10:24 +00:00
jinyuanliu
5c6d281b62 Remove zookeeper residue
About zookeeper chart,It's been removed,But there are still some related scripts that have not been completely deleted,we should remove them.

Change-Id: Iae20717482ad6c7a40f54174eef120d094abbd59
2021-03-01 14:31:03 +08:00
Steven Fitzpatrick
558a4b5b2c [RFC] Remove Kafka and Zookeeper from osh-infra
These charts have not been used or maintained in quite a while

Change-Id: Ia5778a7a7e74e4938d5f0a1cf17102fc2b5cc779
2021-02-23 14:18:23 +00:00
jinyuan
5549eb0d31 Remove Alerta residue
About Alerta chart,It's been removed,But there are two related scripts,we should remove them.

Change-Id: I859a8713422f6d4c5df79d2b01f54c89dcdfa0b4
2021-02-20 09:40:09 +00:00
Xiaoguang(William) Zhang
567e4703e9 Remove Alerta from openstack-helm-infra repository
There is no significant value been added from Alerta base on current user story.

Change-Id: I274263e3dfefd7b9ec8ff84d03504d194225d693
2021-02-18 12:02:18 -05:00
Chinasubbareddy Mallavarapu
da289c78cb [CEPH] Uplift from Nautilus to Octopus release
This is to uplift ceph charts from 14.X release to 15.X

Change-Id: I4f7913967185dd52d4301c218450cfad9d0e2b2b
2021-02-03 22:34:53 +00:00
astebenkova
a589db04e9 Add possibility to use overrides for some charts
The deal is that all the jobs' scripts include extra arguments
when deploying helm charts, except these ones in the commit.
It would be useful to use override files in these charts.

+ Fix typo in apparmor.yaml for node-exporter
+ Amend apparmor.yaml for openstack-exporter since
those values are already by default in values.yaml

Change-Id: Ibe8b38977216e618dccba7e8443b3cc05a772de5
2021-01-27 18:45:19 +02:00
Zuul
02368a4d99 Merge "[ceph] Make sure loopback devices persistent across reboots" 2020-11-23 22:49:04 +00:00
Andrii Ostapenko
13315e57a7 Fix openvswitch gate issue with systemd 237-3ubuntu10.43
New systemd 237-3ubuntu10.43 bumps memlock limit from 16 to 64 MB [1]
which seems to cause issues with eBPF related operations in containers
run with root [2] as a possible root cause.

Here we have an option to downgrade systemd to previous available
version or to set previous default memlock limit to systemd defaults or
docker unit. Setting systemd DefaultLimitMEMLOCK in this commit.

[1] https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.43
[2] https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1837580/comments/9

Change-Id: I55d14ffa47a7a29d059f2f3b502bb38be0a5dd3d
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-11-22 14:04:15 +00:00
Chinasubbareddy Mallavarapu
515d31f9ae [ceph] Make sure loopback devices persistent across reboots
Change-Id: I50ddfcf0903fe00fc020c819e784ea289d5baae6
2020-11-09 21:23:03 +00:00
Andrii Ostapenko
9d7d4e4ba6 Add conntrack required for k8s 1.18.x
Change-Id: I8c85e11ad984fa283139b3d71d52bc7c3fb8e900
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-10-07 18:34:34 +00:00
Zuul
b3cea56e55 Merge "Override images provided as artifacts from buildset registry" 2020-09-28 19:25:49 +00:00
Andrii Ostapenko
7a0558bd78 Override images provided as artifacts from buildset registry
Switch from using images from defined in docker_images to provided as
zuul artifacts. Currently to be used in conjunction with [0] in
openstack-helm-images pipelines.

[0] https://review.opendev.org/741551

Change-Id: I43dbd38906e8854c87a361f2e5e479f57850252f
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-28 17:38:29 +00:00
okozachenko
3bcb347a5b Realize libvirt SSL
Motivation: libvirt 127.0.0.1 listen is terrible for live migration.
To resolve that, we can use 0.0.0.0 but it is not secure so tried
to realize SSL.
Once create secrets for cacert, client&server cert and keys then it will
 mounted on libvirt daemonset.
It means all instances use the same key and cert. This is not ideal
 but can be considered as the first stage.

Change-Id: Ic3407e484039afaf98495e0f6028254c4c2a0a78
2020-09-25 16:36:42 +03:00
diwakar thyagaraj
6dd08e84ca Add Zuul Jobs for apparmor to alerta and Prometheus black-box
1)Moved Apparmor changes to overides so as to use experimental Jobs.
2)Changed Numerical Convention to openstack exporterw

Change-Id: I9ac1f6399c09fc54fcdb98eb0c6cf91912bc93c1
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-09-03 13:28:24 +00:00
anthony.bellino
96369491cb Patroni exclusion for Postgres
This PS removes the previously put in place HA clustering support
Patroni provided.

Change-Id: I03ed11282413a454062ab34b8594ba60ac2175aa
2020-08-31 18:02:37 +00:00
diwakar thyagaraj
30afcad5a2 Add Apparmor to Prometheus alert manager and snmp-notifier
1) Added to service account name insted of traditional pod name
   to resolve for dynamic release names.
2) Added Apparmor Job to Prometheus Alert Manager.

Change-Id: Ib65f721c5b99b3ae3d3af924ca5187ad6174ed20
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-08-25 17:09:45 +00:00
Zuul
754d8e93b4 Merge "Add Alerta feature to osh-infra" 2020-08-19 21:19:18 +00:00
Xiaoguang(William) Zhang
83a55fd19e Add Alerta feature to osh-infra
Change-Id: Id8dc3f86b8d6754df4ba3c0c720a78731e3f54d5
2020-08-19 13:35:40 +00:00
Zuul
622bc4d972 Merge "Remove remaining test pods before new test run" 2020-08-18 16:21:00 +00:00
Gayathri Devi Kathiri
a57190fd8a Remove remaining test pods before new test run
If the test pod still exists, then the new test run
fails with ERROR: pods "abc-test" already exists

So, Removing remaining test pods before new test run

Change-Id: I3b3ed5ceaf420aa39a669b4a50a838ad154b1fdd
Closes-Bug: #1882030
2020-08-13 18:12:25 +00:00
Zuul
dbd465c4c6 Merge "prometheus exporter to monitor health check for web URL" 2020-08-12 00:51:52 +00:00
Vipul Jain
628186f05e prometheus exporter to monitor health check for web URL
1) A separate prometheus job need to provide target and scrap metrics
2) it is based on https://github.com/prometheus/blackbox_exporter

Adding script file for deployment and job under zuul.d
Resolving conflict
Change-Id: Ia15ab7d8ef882886fe0e37cc2599e6815d7bcc6c
2020-08-11 22:39:54 +05:30
Xiaoguang(William) Zhang
7c94deae43 Update alertmanager include snmp_notifier function
Change-Id: I5aedbdcdbba397a9fddde19a0898cb91de08553a
2020-08-07 12:25:33 -04:00
Zuul
8cd4e26a42 Merge "Fluentd: Allow for Multiple Config Files" 2020-08-05 14:48:13 +00:00
Zuul
e292b356b5 Merge "Use precreated minikube-aio image" 2020-08-04 22:01:04 +00:00