The motivation is to remove 127.0.0.1 in connection_uri and so
can allow live migration in libvirtd.
Plus, realize tls on libvirt to secure.
Now /run is already mounted so it should work
Depends-On: https://review.opendev.org/752263
Change-Id: I911abb8b1ee1e300d02a373e083a404574cc3fea
In the ovs agent code, some of the secret ref are hardcoded, and
it breaks the host/label overrides mechanism. This patchset
fixes it.
Change-Id: Icf3ffc86fde77b1948e86cfd62e83fbdfe16ad8e
Now that it is 2021, this patch updates the copyright date to reflect
the correct years.
Change-Id: I7ce07588d18a463dc256cb6ed87424fc55d4e2c7
Signed-off-by: Tin Lam <tin@irrational.io>
We already run the rocky jobs in periodic. With Rocky in EOL, we
can remove them from being checked on every change.
Change-Id: I8728297c9b0742cd10977185568c75fc2b8b7e7e
This change updates the releasenotes for barbican to all current
changes as of the date of this commit.
Change-Id: Ibaf2f19aa51b751fab32f978910b33c509599e17
Bidirectional mount propagation doesn't work as expected,
HostToContainer does and is the safer option for now.
Change-Id: Ia0b0ab1a74991745cd74d3629d23f86bd8ff5296
ubuntu-bionic-expanded is not available now. Temporary disable it to
unlock urgent efforts.
Change-Id: Ib6224d7420b0b09c1fbd615437eb15f02e762c34
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
This change updates the releasenotes for glance to all current
changes as of the date of this commit.
Change-Id: I4c81140348246165509644a5633e37e282e7e497
When using a chart with the flux operator and helm3, it fails
when encountering a volumeMount "subpath" instead of "subPath".
This change corrects the typo to the right camelcase entry.
Change-Id: Id2d9ea25445d84f89b299c7f0b24da1cc5aaf264
With OSH now publishing charts regularly with each change, there
needs to be a way to track these changes in order to track the
changes between chart versions.
This proposed change adds in a reno check job to publish notes
based from the changes to each chart by version as a way to
track and document all the changes that get made to OSH
and published to tarballs.o.o.
Change-Id: Iff8681c697957e4711754fc20b07fa6b728eb584
ClusterIssuer does not belong to a single namespace (unlike Issuer)
and can be referenced by Certificate resources from multiple different
namespaces. When internal TLS is added to multiple namespaces, same
ClusterIssuer can be used instead of one Issuer per namespace.
Depends-on: https://review.opendev.org/c/openstack/openstack-helm-infra/+/766359
Change-Id: I6585d5a8c2ccb507a5c99784c0190502b55a5bcf
This patch set updates the Makefile to use a helm variable so it has
parity with OpenStack-Helm-Infra repository.
Change-Id: I6cdd599320103349d2fd2486670859a6ef970886
Signed-off-by: Tin Lam <tin@irrational.io>
This patchset added the necessary hostPath, hostIpc and
hostNetwork to enable the volume backup for iSCSI based
Cinder volumes.
Change-Id: Ief3cc723650a6c42e24dfd6159c0de6f81e56fce
For any host mounts that include /var/lib/kubelet, use HostToContainer
mountPropagation, which avoids creating extra references to mounts in
other containers.
Affects the following resources:
* neutron-lb-agent daemonset
* neutron-ovs-agent daemonset
* neutron-sriov-agent daemonset (unused mount removed)
* nova-compute daemeonset
Change-Id: I92f1700e56517a74b1fbcc8e3a68567045a593ee
This PS enables iscsi actions to work correctly in cinder
volume - enabling things like conversion of glance images
to cinder volumes (required for nova-boot-from-volume)
Change-Id: I63521ff9609ad89485a843bc0fbddb00e38dccc8
Signed-off-by: Pete Birley <pete@port.direct>
Add "enable_pwd_validator" variable to apply password
validator settings when enabled in horizon values.
Modify "PASSWORD_VALIDATOR" so as to enforce password
requirements i.e., password must be at least eight
characters in length and must include characters from
at least two of these groupings: alpha, numeric, and
special characters when "enable_pwd_validator" is enabled.
Change-Id: Ia866feb875490d0bb40e820c6c32ee2cb6aa4c29
