Commit Graph

3144 Commits

Author SHA1 Message Date
Zuul
040e6aa23a Merge "[Cinder] Gotpl script fix" 2020-02-13 20:41:01 +00:00
Zuul
c591479c8b Merge "Check return value of get subnets before iterate for ironic" 2020-02-13 20:37:26 +00:00
Vasyl Saienko
90d070390d Revert "Keystone Authtoken Cache: allow universal secret key to be set"
This reverts commit 1c85fdc390.

Do not use randomly generated strings in configmaps as this leads to
whole helm release redeployment even no values are changed. The random
items have to be generated outside of helm chart and provided via
values.
Also previous behaviour didn't allow to use cache during rolling upgrade
as new pods were spawned with new key.

Change-Id: I423611b18fca0d65e2e721a9c6a0c3d8df0813d2
2020-02-12 11:18:06 +00:00
Zuul
400b686f52 Merge "Doc: fix incorrect script path" 2020-02-10 03:54:56 +00:00
OpenStack Proposal Bot
549a114917 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I96b7f1e5391fe1cedcf7d23e0245881676ba3e0e
2020-02-08 08:20:40 +00:00
Tin Lam
4f1636590a [Cinder] Gotpl script fix
The gotpl script that determines if a cinder backend is ceph-backed
is not properly handling additional backends that does not have the
driver "cinder.volume.drivers.rbd.RBDDriver". This patch set fixes
the gotpl so it no longer causes a rendering problem.

Change-Id: I902e82301019531832afebce7a1e2f0b28bac8f3
Signed-off-by: Tin Lam <tin@irrational.io>
2020-02-07 09:39:29 -06:00
Zuul
a7fcc03112 Merge "Move apparmor to use feature gates" 2020-02-04 17:31:04 +00:00
Zuul
ca89cc4237 Merge "Fix health probe for several conductor workers" 2020-02-01 00:48:05 +00:00
Zuul
c6d852a22d Merge "[Keystone] Fix status code logic" 2020-01-31 22:50:39 +00:00
Gage Hugo
a1fc694ae9 Move apparmor to use feature gates
This change refactors the apparmor job to utilize the feature
gates system instead of relying on separate scripts.

Also disabled barbican running in the apparmor job temporarily
until the correct profile gets used and it can deploy
succesfully.

Change-Id: Iadacd214de3fdb06e4acde4433c5fa86973371d5
2020-01-31 22:24:55 +00:00
Tin Lam
45e22e45a5 [Keystone] Fix status code logic
This patch set fixes an issue with where the keystone chart's
domain-manage job/pod always restart once due to a calculation
logic error.

Change-Id: I801d04559a526d3a7339cd5102f2e738af9f72e0
Signed-off-by: Tin Lam <tin@irrational.io>
2020-01-31 14:29:46 -06:00
Tin Lam
b17b378390 Add rally clean up script
This patch set adds in a script that cleans up orphaned or
lingering rally helm test pods.

Depends-On: https://review.opendev.org/#/c/683759/

Change-Id: I94fc8d067b421248cf74fe40b2e8520f63d4417c
Signed-off-by: Tin Lam <tin@irrational.io>
2020-01-31 19:18:01 +00:00
Oleksii Grudev
d467d685a3 Fix health probe for several conductor workers
It was observed that when increasing amount of
conductor workers from default "1" to higher value
the readiness probe fails to check rabbitmq connections
for conductor processes - it happens since the script is trying
to obtain rabbitmq connections for parent conductor process
which in case of workers>1 doesn`t open rabbit connections
but spawns child processes which handle rabbitmq
connections instead.
This patch removes the "check-all-pids" option, keeps the logic
but simplifies and fastens he code - instead of checking all
processes when "check-all-pids" option was set (however
regardless of "sock_count value" if only one process opens connection
the check returns positive result) processes will be checked one-by-one
until the first one with open rabbitmq connection(s) is
found.

Change-Id: I72be0bbdefcba77a55b6ceed6e192c9621c069eb
2020-01-31 10:43:06 +00:00
Zuul
4844a63543 Merge "Change default image for glance_metadefs_load" 2020-01-31 03:16:36 +00:00
Zuul
406ee0065b Merge "Fix compute-kit netpol job" 2020-01-29 22:46:07 +00:00
Hemachandra Reddy
f00777e57d Make sure requested mtu is set
The 'options' keyword for setting mtu in 'set interface' does not
set mtu and it seems to ignore/fail the request silently.

Change-Id: Icec98c5166611a8c538f93e6326cf7d20b545ecd
2020-01-28 18:28:25 +00:00
Tin Lam
8e72ff7630 Fix compute-kit netpol job
This patch set addresses a failure in the compute-kit network
policy failing as some application:nova to application:nova
pods communication is blocked.

Change-Id: I29cc044e0d4f10198c23c7c3e132ab0093f91e21
Signed-off-by: Tin Lam <tin@irrational.io>
2020-01-28 12:24:22 +00:00
Zuul
402a72d74d Merge "Add barbican egress" 2020-01-27 21:36:13 +00:00
Andrii Ostapenko
f14906276a Change default image for glance_metadefs_load
Change-Id: Id9e8d6d6dda46559be3909763644ad1740bd6e3d
2020-01-27 19:23:47 +00:00
Roy Tang
fdce0e46d9 Add QOS support for neutron sriov
Change-Id: I5a1df5d7f6cf179e8cd26a288b5749340b8827dd
2020-01-27 14:36:49 +00:00
Zuul
76049bb591 Merge "barbican: add a deployment script" 2020-01-25 20:16:45 +00:00
Zuul
91fb5219aa Merge "barbican: fix values overrides for stein and ocata" 2020-01-25 20:16:44 +00:00
licanwei
bd3ad59478 Doc: fix incorrect script path
Should remove 'developer' from path:
./tools/deployment/developer/component/common/ingress.sh

Change-Id: If7f9dd763fc05150b9c08860e9b8b85bfa0de3d0
2020-01-20 17:14:46 +08:00
Phil Sphicas
1355197820 barbican: add a deployment script
Adds a barbican deployment script that picks up the desired overrides.

Change-Id: I020632ad6a33d29a657164cf0e32baef6b670d5a
2020-01-16 17:59:09 -06:00
Phil Sphicas
2cb3d41544 barbican: fix values overrides for stein and ocata
When the default release was switched from ocata to stein, some of the
policies were duplicated. This moves the ocata overrides back to where
they belong, and adds overrides for pike, queens, and rocky.

Change-Id: I342d69e721b2692987951055e41ed5e153a91d6c
2020-01-16 15:30:47 -08:00
OpenStack Proposal Bot
1258061410 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I7e149c96ee4ae090e47f775000dc1e3e55a3efc2
2020-01-16 07:54:06 +00:00
Zuul
9ded66d17f Merge "Add Glance ingress network policy overrides" 2020-01-13 21:07:29 +00:00
OpenStack Proposal Bot
ca3f9ca997 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I8d308aa46e6b107d818fbba59bb28313036fb1b8
2020-01-10 08:08:34 +00:00
Zuul
ff094ff354 Merge "Add functionality to specify FQDN" 2020-01-10 00:27:02 +00:00
Tin Lam
def68865a2 Add functionality to specify FQDN
Patch set to allow for FQDN for neutron agents.

Change-Id: Idde7ba35e940de59e0def35507ce2506cad672ed
Signed-off-by: Tin Lam <tin@irrational.io>
2020-01-09 16:10:37 -06:00
Zuul
acb88399fc Merge "Migrate default release to Stein" 2020-01-09 19:13:02 +00:00
Tin Lam
12bee1bb97 Migrate default release to Stein
This patch set updates the default job to use OpenStack Stein release.
The previously default Ocata release will be place in separate job.

Change-Id: I489324f762a179a2cab5499a6d8e57e97c81297f
Signed-off-by: Tin Lam <tin@irrational.io>
2020-01-09 10:00:31 -06:00
Gayathri Kathiri
6c65d21e94 Add Glance ingress network policy overrides
This patch set introduces the ingress network policy overrides
for Glance.

Change-Id: I2b28445dd6f0d2f1f8238d0d4bc1804136c92346
2020-01-09 12:06:14 +00:00
Pete Birley
c31f561641 Gate: Support AIO deployments when multiple default routes present
This PS updates the gateway setup script to support deployments where
multiple default routes may be present, eg when connecting to a vpn.

Change-Id: I5fe86e9471ecb6a9c80e1e4f942822cac00da669
Signed-off-by: Pete Birley <pete@port.direct>
2020-01-08 20:36:55 +00:00
Zuul
033ea6449b Merge "Add capability for using FQDN in nova compute" 2020-01-02 19:02:45 +00:00
Zuul
2d57ecc323 Merge "Update proxy documentation for AIO" 2020-01-02 16:19:56 +00:00
Tin Lam
bf434ffd67 Add capability for using FQDN in nova compute
This patch set adds in a capability for the user to defaultly use a
FQDN for the nova compute hostname and the hypervisor hostname when
the host is not explicitly specified in the .Values.conf override.

Change-Id: I3243068dfe91ebb97b3885002296a0f454822ec5
Co-authored-by: Drew Walters <andrew.walters@att.com>
Signed-off-by: Tin Lam <tin@irrational.io>
2020-01-01 20:01:25 +00:00
sungil
620286117b Improve accuracy for version detection on nova
Because it's almost time for expiring on some python version, OpenStack client
running on that version generates some messages for warning. Two scripts on
nova Fixed by this PS get version information using the OpenStack client
without any protection for this kinds of messages. This PS gives a little
more sophisticated way of it.

Change-Id: I2896c76e012b9acbf1e725276ba9c0b74789fa54
2020-01-01 01:11:05 +00:00
Mingyuan Qi
1fd5ec6595 Check return value of get subnets before iterate for ironic
With the update of openstack clients:
openstack client >= 4.0.0
neutron client >= 6.14.0
neturon lib >= 1.29.1

The command 'openstack network show ${network} -f value -c subnets'
returns '[]' instead of null string if no subnets found in the
specific network. This commit adds a check logic to avoid subsequent
command returns error by using '[]' as subnet input.

Change-Id: I7e7d5209227b0e34131b7715dbd3faa6066a94b7
Signed-off-by: Mingyuan Qi <mingyuan.qi@intel.com>
2019-12-31 19:02:45 +00:00
Tin Lam
adb617ab60 Add barbican egress
This patch set specifies the barbican egress in the override to be
inline with other services.

Change-Id: Ie4997a5bb476a21253e98e4c69a77e58b8498f4f
Signed-off-by: Tin Lam <tin@irrational.io>
Signed-off-by: Tin Lam <tlam@omegaprime.dev>
2019-12-31 18:34:59 +00:00
Steve Wilkerson
f6fe35d452 Disable kubeadm-aio jobs while issues addressed
This disables the keystone-auth single node job and all multinode
periodic and experimental jobs while standing issues with the
kubeadm-aio image deployment are sorted out

Change-Id: I4e1de001ddf17b3c035ca174b7ef8acec8f2bf2c
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-12-18 09:55:50 -06:00
Zuul
942fa475cf Merge "Support the Nautilus release for Ceph" 2019-12-17 18:17:59 +00:00
Zuul
bea2073200 Merge "Add capability to wait on compute nodes" 2019-12-17 17:32:42 +00:00
Chinasubbareddy Mallavarapu
d03a8a1a22 Support the Nautilus release for Ceph
- Change all tests to support Nautilus,Mimic and Luminous releases
- Update ceph-config-helper image

Change-Id: I557b1efa12529d0ee51d4c5b9d4beb4abf1b0574
2019-12-17 16:23:15 +00:00
Tin Lam
5057052c70 Fix feature gate envvar overriding
Currently using envsubst to perform substitution of value overrides in
the feature gate caused conflicts as gotpl gets templated into those
overrides. This adds in '%%%REPLACE_${var}%%%' and uses sed to perform
the substitution instead to address the issue.

This is to achieve parity with OSH-infra patch in [0].

[0] https://review.opendev.org/#/c/697749/

Depends-On: https://review.opendev.org/#/c/697749

Change-Id: I3ed504c65900e7b84728019f3acdf706a40c0427
Signed-off-by: Tin Lam <tlam@omegaprime.dev>
2019-12-17 09:49:38 +00:00
Cliff Parsons
58291db1a6 Add capability to wait on compute nodes
This patchset adds the capability to the Nova chart to be able to wait
for a percentage of the compute nodes/hypervisors to become ready/available
before continuing on with the deployment. It will be disabled by default,
because this is a feature that may or may not be needed in production
deployments.

Change-Id: I971151a663afc87e7d62efa4ab3723c5472a3736
2019-12-17 02:48:49 +00:00
Roy Tang
97ac0575ba Update neutron ovs agent for ovs-dpdk
This ps update neutron ovs agent to support properly:
- setting mtu on dpdk bond and nic interface port
- setting vhost-iommu-support on dpdk bond and nic interface port
- setting n_txq values on dpdk bond and nic interface port

Change-Id: I422fa21a622642ecb7c49914fef04073e4f984bc
2019-12-13 10:37:10 -06:00
Gage Hugo
13b0a3ffd9 Update proxy documentation for AIO
This change adds in information about overriding the dns entries
that can end up overwriting the existing ones in resolv.conf
and resulting in a lack of network connectivity when deploying
AIO behind a proxy.

Change-Id: I9faab36a114e28fe8f4c312e7cd64a582333033b
2019-12-12 13:32:36 -06:00
Zuul
52c132b935 Merge "Octavia: fix developer cert generation script" 2019-12-03 03:15:50 +00:00
Zuul
f09e805abf Merge "Implement Security Context for Nova" 2019-12-02 23:40:13 +00:00