Commit Graph

3349 Commits

Author SHA1 Message Date
Michael Fix
1fcd52a484 Adding clean-up guide for 900-use-it script
This change modifies the exerise-the-cloud.rst file to include user
steps for cleaning up the client environment to allow for subsequent
runs of the 900-use-it.sh script.

Change-Id: I6bd3c95d837f9b3273868d51c1f5121d96e53e73
2020-07-20 23:41:00 +00:00
Zuul
eafe48a136 Merge "Add missing security context to Heat pods/containers" 2020-07-17 16:18:05 +00:00
Zuul
a78d929932 Merge "Add missing security context for Keystone rally tests" 2020-07-17 06:50:18 +00:00
DODDA, PRATEEK REDDY (PD2839)
2e752d180a Add missing security context to Heat pods/containers
This updates the heat chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I7ba17382059dfc23ab125a49b2b302166915c350
2020-07-17 06:01:39 +00:00
Zuul
1fd839139d Merge "Add missing security context to Horizon test pods/containers" 2020-07-16 18:53:46 +00:00
DODDA, PRATEEK REDDY (pd2839)
2eaa98ecf1 Add missing security context for Keystone rally tests
Change-Id: I29a432f28a4d8dd57341152d60b34c5a391e872f
2020-07-16 13:11:49 -05:00
Zuul
8c9b9a63bf Merge "Refactor to support jobs invocations from other projects" 2020-07-16 15:31:11 +00:00
DODDA, PRATEEK REDDY (pd2839)
e61f88465a Add missing security context to Horizon test pods/containers
This updates the horizon chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I2ccd920fa26aca2955afef8b71d56e55d1ae26e8
2020-07-15 22:26:41 +00:00
Zuul
794ee5e90d Merge "Fix security context for glance rally tests" 2020-07-15 21:19:57 +00:00
Andrii Ostapenko
f305793243 Fix security context for glance rally tests
Also enable glance helm tests for gates.
Temporary replaces cirros url to mirror due to [0]

[0] https://bugs.launchpad.net/rally/+bug/1887705

Change-Id: I21ceba857c375c1de054e69cf84449e02881b0ce
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-15 18:36:48 +00:00
sgupta
702c17eb78 feat(tls): Make openstack services compatible with mariadb with TLS
Depends-on: https://review.opendev.org/#/c/741037/
Change-Id: I21f4ede3bd18c0af8da1eba60cd0b7b932a31410
2020-07-14 23:32:03 +00:00
Zuul
61a61d9de1 Merge "Add missing security context to Barbican test pods/containers" 2020-07-13 19:00:48 +00:00
Zuul
d6022bc22e Merge "Add missing security context to Glance pods/containers" 2020-07-13 18:59:07 +00:00
Zuul
f9862e221e Merge "Add missing security context to Keystone pods/containers" 2020-07-13 18:57:52 +00:00
Zuul
c35a74c729 Merge "Add missing security context to Cinder pods/containers" 2020-07-13 18:57:50 +00:00
Zuul
009bde9d31 Merge "Add missing security context to Neutron pods/containers" 2020-07-13 18:46:33 +00:00
Zuul
861da9e355 Merge "Add missing security context to Nova pods/containers" 2020-07-13 18:33:57 +00:00
Zuul
8a5b087c13 Merge "Add horizon internationalization for extra panels" 2020-07-13 15:30:25 +00:00
Andrii Ostapenko
67acec14cd Refactor to support jobs invocations from other projects
Switch osh fuctional jobs to osh-infra-job-runner playbook inheriting
from openstack-helm-infra-functional.
Specify gate_scripts_relative_path var for each job to support the
case when corresponding jobs defined in osh are invoked from another
project to allow playbook know where to look for gate scripts.

Depends-On: https://review.opendev.org/740557
Change-Id: I315f04ef7bdf5bf97d09843de8f878e2d15377dc
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-12 03:19:39 +00:00
Andrii Ostapenko
44d263b2bf Enable templates linting
- braces
- brackets
- colons
- commas
- comments
- hyphens
- indentation
- key-duplicates

with corresponding code changes.

Also disable enforcement for document-(start|end) rules and
disables warnings to increase readability.

* Unrestrict octal values rule since benefits of file modes readability
  exceed possible issues with yaml 1.2 adoption in future k8s versions.
  These issues will be addressed when/if they occur.

Change-Id: Ic5e327cf40c4b09c90738baff56419a6cef132da
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-11 00:52:51 +00:00
Andrii Ostapenko
0807ecb354 Add security context from snippet for tungstenfabric container
Change-Id: I4db982e8f600288ec954d4c019f096bd8dcd7e52
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-11 00:52:46 +00:00
Zuul
afd68753c7 Merge "feat(tls): add tls support to openstack services" 2020-07-10 22:17:08 +00:00
Tin Lam
918a307427 feat(tls): add tls support to openstack services
This patch set enables TLS for the following OpenStack services: keystone,
horizon, glance, cinder, heat, nova, placement and neutron for s- (stein)
and t- (train) release. This serves as a consolidation and clean up patch
for the following patches:

[0] https://review.opendev.org/#/c/733291
[1] https://review.opendev.org/#/c/735202
[2] https://review.opendev.org/#/c/733962
[3] https://review.opendev.org/#/c/733404
[4] https://review.opendev.org/#/c/734896

This also addresses comments mentioned in previous patches.

Co-authored-by: Gage Hugo <gagehugo@gmail.com>
Co-authored-by: sgupta <sg774j@att.com>

Depends-on: https://review.opendev.org/#/c/737194/

Change-Id: Id34ace54298660b4b151522916e929a29f5731be
Signed-off-by: Tin Lam <tin@irrational.io>
2020-07-10 09:36:31 -05:00
OpenStack Proposal Bot
b2321587f9 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Id3ae2113ffd7b9cd53a8c147387b3417227fd3c0
2020-07-10 07:59:41 +00:00
DODDA, PRATEEK REDDY
cba3deb94e Add missing security context to Keystone pods/containers
This updates the Keystone chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true.

Change-Id: I2ac3a4efa6798e263de19f0db444f37c5236d121
2020-07-09 18:20:23 -05:00
Gage Hugo
6027ac0c0c Cleanup zuul checks
This change moves the tungsten fabric check down to the periodic
checks with the other feature overrides, removes several duplicate
checks that are currently non-functional, and moves the rest to
experimental.

Also moves the compute-kit jobs back to using the default
single-node nodeset due to cloudedge going down and not
enough available 32gb nodes as a result

Change-Id: Ib4f314d5246af8756611346ed4919492d98510a5
2020-07-09 18:38:56 +00:00
Zuul
135e2c8b64 Merge "Add TungstenFabric compatibility to charts" 2020-07-08 13:47:49 +00:00
limin0801
80994a360c Add horizon internationalization for extra panels
When introduces extra panels in horizon, eg. ironic-ui, it could
not achieve internationalization. This commit hope to achieve
internationalization.

Related bug: #1886396

Change-Id: Ic4b89d14ee27bb6c70e792193cbf23de1ae553a4
2020-07-08 14:33:38 +08:00
DODDA, PRATEEK REDDY (PD2839)
6e3c3a2eb4 Add missing security context to Cinder pods/containers
This updates the Cinder chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: If17af3e3dba188a43ed11a0d5757fcae9f5358e8
2020-07-07 01:42:27 +00:00
DODDA, PRATEEK REDDY (PD2839)
f742ebd6ae Add missing security context to Neutron pods/containers
This updates the Neutron chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I50ccec785eb3b18d6c00df2ad5f566a72db4604d
2020-07-07 01:41:22 +00:00
DODDA, PRATEEK REDDY (PD2839)
e2ec1c6134 Add missing security context to Glance pods/containers
This updates the Glance chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I49ac688fa9cb73ddbc215198c74fae26f503cb51
2020-07-07 01:41:16 +00:00
DODDA, PRATEEK REDDY (PD2839)
831e14d03f Add missing security context to Barbican test pods/containers
This updates the barbican chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: Ibb85435c1fa9fe577bc7a14d97e0acaf9b9513a2
2020-07-07 01:41:09 +00:00
DODDA, PRATEEK REDDY (PD2839)
a955108d1a Add missing security context to Nova pods/containers
This updates the Nova chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I3ba6fcf0cc6ff97a306866f2d2b408635519ff02
2020-07-06 23:25:54 +00:00
Chinasubbareddy Mallavarapu
a385c18176 [CEPH] OSH: use loopback devices for ceph osds.
- This is to make use of loopback devices for ceph osds since
support for directory backed osds going to depricate.

- Move to bluestore from filestore for ceph-osds.

Change-Id: Ia95c9ceb81f7d253dd582a2e753a6ed8fe60a04d
2020-06-30 17:05:22 -05:00
Zuul
84b27c895d Merge "RFC: fix(cleanup): neutron" 2020-06-30 20:17:36 +00:00
Zuul
50fd4653f8 Merge "Fix nova overrides" 2020-06-29 21:56:34 +00:00
Gage Hugo
72b3a855c5 Fix nova overrides
The current overrides do not function correctly, and should have
been setup with a multistring. This change corrects this to
deploy right in nova.

Change-Id: If709ea5d18399dc0d135351c2bdcdbd324663ad7
2020-06-28 21:16:11 +00:00
Zuul
30c9f003d2 Merge "Remove ctl socket ownership" 2020-06-28 16:23:39 +00:00
Zuul
ea86ff73e4 Merge "Fix developer compute-kit.sh script" 2020-06-26 17:00:36 +00:00
Tin
5dd018ecbe RFC: fix(cleanup): neutron
Change-Id: I371da6b47ca6ef31c2909302b0aa71040f8930d9
Signed-off-by: Tin <tin@irrational.io>
2020-06-26 09:13:46 -05:00
OlegBravo
4f2eb8cac6 Add TungstenFabric compatibility to charts
The charts changes are required for deployment
of various clouds based on Tungsten Fabric SDN.
Right now it's tested for Airship-in-a-bottle.

The code cannot be tested currently in
OpenStack Helm project because of absence of
tests and platform for that.

This patchset doesn't have Heat-related changes,
they'll be added later.

Change-Id: I73f2ced2b09dbb93146334b59fe4571fa13dbfb0
Depends-On: https://review.opendev.org/#/c/734635/
2020-06-26 10:39:20 +03:00
rajesh.kudaka
a9693843d7 Remove ctl socket ownership
Depends-On: https://review.opendev.org/#/c/722318/

Change-Id: I6743529c7cfbb5b828108f7c27e7f1c10f8d46c8
2020-06-26 05:40:18 +00:00
John Haan
2671986a6f enabled_drivers is not necessary any more in ironic chart
ironic conductor does not allow to have the enabled_drivers

configuration value from stein version.

If we set values for enabled_drivers, the service raised errors.

Change-Id: I5b299ab691013836d5eb2169f95b12805a27b4e8
2020-06-26 05:11:49 +00:00
Andrii Ostapenko
41a6fa26e4 Fix developer compute-kit.sh script
Release overrides are not applied in component script if invoked from
developer ceph one because OSH_EXTRA_HELM_ARGS_NOVA is not empty.

Change-Id: Ic4eb1cf6115b740b59922272a789e37b683cb44e
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-06-25 21:56:35 -05:00
Andrii Ostapenko
81884d8a60 Switch compute-kit jobs to 32GB nodes
We're running compute kit jobs on the edge of current flavor
capabilities and actually exceeding it with TLS enabled.
With this change compute kit TLS commit successfully pass check
jobs.

Change-Id: Ide1a1600f2e19fcb91ec7d90c8f316283b2d9697
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-06-21 18:14:59 -05:00
Ahmad Mahmoudi
0a91e260bc (fix) Changed pip to pip3
Changed pip to pip3 to address zuul gate issues.

Change-Id: I811fdefa258550b569977000e9b974d17e7be333
2020-06-18 05:20:14 +00:00
Gage Hugo
3a3cabc3b8 Add python3-pip to list of installed packages
OSH requires pip3 to install the openstackclient, and a recent
change in infra made the images no longer contain
pip by default. This change adds python3-pip in order to address
this.

Change-Id: I32febc7194ced6ab88794c6ac9fa2aa373909827
2020-06-17 16:02:11 +00:00
KHIYANI, RAHUL (rk0850)
d6a3a62c54 adding python3-pip package to installation script
python3-pip package is required to support openstack-client

Change-Id: Iccfc52d8ec0577f656c5d06fef43240b33c49c4d
2020-06-12 16:07:30 +00:00
Zuul
1fb8310770 Merge "Fix wrong parameter reference" 2020-06-09 19:36:21 +00:00
Zuul
5785a46ab3 Merge "fix(security): update horizon setting" 2020-06-08 22:58:09 +00:00