By default when deploying the openstack AIO, it will deploy
openstack ocata release on ubuntu xenial, which by now is quite
old and largely unsupported. This change updates these default
overrides to train and bionic respectively in order to bring
the default settings to more recent/supported releases.
Change-Id: I9b6e1120101767356413b1341828dc8d39bc9b3c
ClusterIssuer does not belong to a single namespace (unlike Issuer)
and can be referenced by Certificate resources from multiple different
namespaces. When internal TLS is added to multiple namespaces, same
ClusterIssuer can be used instead of one Issuer per namespace.
Depends-on: https://review.opendev.org/c/openstack/openstack-helm-infra/+/766359
Change-Id: I6585d5a8c2ccb507a5c99784c0190502b55a5bcf
We observe SSL related errors rarely in jobs.
Change-Id: Ia5569f411abd2828c6ab289e3942e3a7dabf2d46
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
This is to update installation script to enable option to skip the
loopback device creation as this gives flexibility to use exisitng
block devices for ceph.
Change-Id: I2e05cfa627dad5d32e882af3ba82bcde21e2ad70
This is to update ceph scripts to create loopback devices
in single script and also to update gate scripts.
Change-Id: I937ae79512ffc998d8dbd0b277a611347550044b
This is to update loopback devices creation script to take device names
from developers in case if default devices are busy.
Change-Id: Ie368ebdfdc64ea00ccf62cf61010beddcc2cf4ce
This change modifies the exerise-the-cloud.rst file to include user
steps for cleaning up the client environment to allow for subsequent
runs of the 900-use-it.sh script.
Change-Id: I6bd3c95d837f9b3273868d51c1f5121d96e53e73
In case user wants to re-run a script that failed (e.g because of a
timeout), next run should not fail just because the stacks were
already created.
Change-Id: I5b3650225794704de5433a24f678decc69212997
Switch osh fuctional jobs to osh-infra-job-runner playbook inheriting
from openstack-helm-infra-functional.
Specify gate_scripts_relative_path var for each job to support the
case when corresponding jobs defined in osh are invoked from another
project to allow playbook know where to look for gate scripts.
Depends-On: https://review.opendev.org/740557
Change-Id: I315f04ef7bdf5bf97d09843de8f878e2d15377dc
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
- braces
- brackets
- colons
- commas
- comments
- hyphens
- indentation
- key-duplicates
with corresponding code changes.
Also disable enforcement for document-(start|end) rules and
disables warnings to increase readability.
* Unrestrict octal values rule since benefits of file modes readability
exceed possible issues with yaml 1.2 adoption in future k8s versions.
These issues will be addressed when/if they occur.
Change-Id: Ic5e327cf40c4b09c90738baff56419a6cef132da
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
- This is to make use of loopback devices for ceph osds since
support for directory backed osds going to depricate.
- Move to bluestore from filestore for ceph-osds.
Change-Id: Ia95c9ceb81f7d253dd582a2e753a6ed8fe60a04d
The charts changes are required for deployment
of various clouds based on Tungsten Fabric SDN.
Right now it's tested for Airship-in-a-bottle.
The code cannot be tested currently in
OpenStack Helm project because of absence of
tests and platform for that.
This patchset doesn't have Heat-related changes,
they'll be added later.
Change-Id: I73f2ced2b09dbb93146334b59fe4571fa13dbfb0
Depends-On: https://review.opendev.org/#/c/734635/
Release overrides are not applied in component script if invoked from
developer ceph one because OSH_EXTRA_HELM_ARGS_NOVA is not empty.
Change-Id: Ic4eb1cf6115b740b59922272a789e37b683cb44e
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
OSH requires pip3 to install the openstackclient, and a recent
change in infra made the images no longer contain
pip by default. This change adds python3-pip in order to address
this.
Change-Id: I32febc7194ced6ab88794c6ac9fa2aa373909827
If the test pod still exists, then the new test run
fails with ERROR: pods "abc-test" already exists
So, Removing remaining test pods before new test run
Change-Id: I447d2b56b1419086b99df47b6605d0a95e1a9239
Closes-Bug: #1882030
This patch set adds in two additional parameters to:
a. establish ownership between certificate and secret so secrets can be
cleaned up when the certificate is deleted as part of a helm release
b. add the ability to always issue new tls.key as part of the key
rotation when the secret gets regenerated for any reason.
This also adds linebreaks for readability.
Change-Id: Id40d504251bbd98c32a7d9baa3dbe9858ad495cb
Signed-off-by: Tin Lam <tin@irrational.io>
This patch set updates the cert-manager.io version from v1alpha2 to
v1alpha3.
Change-Id: Ib9904f9f2c1f3fa426c852b012307cf7aed266e7
Signed-off-by: Tin Lam <tin@irrational.io>
