This PS enables sharing of network namespaces with the host,
allowing for hitless upgrades of agents, and much simpler debugging.
It does however require mount propogation to be enabled in kubernetes
which is a alpha gated feature introduced in 1.8, and enabled by default
as a beta feature in 1.10.
Depends-On: I7a37f45ff6061b144c6f04233712cd84fccb3e83
Change-Id: I2a191a343fe637cbfd9e4af5277f9784af736dd1
This PS adds the ceph-clients to the config helper image, which
were previously missed and also bumps the version used.
Change-Id: I6b62990895619759794e55e694243182bf51f3ca
This PS updates rootwrap to account for distros where python2 is
the default entrypoint for python 2.7 as opposed to either python
or python2.7.
Change-Id: Ia67768985133242e0aef10bb6ce54028eabfe1cf
This updates the labels in the armada-lma manifest to match the
updated labels in the osh-infra charts
Change-Id: I2b8af2f2eaa5be6bf4e8f592b249b311d07ac5e5
This PS adds vhost management to rabbitmq jobs. It also prevents
sensitive information being displayed in the management job, and
removes the 'administrator' tag from service users.
Change-Id: Id337f763c5e4776bce7269676a8a2dc54dc2e5f8
This PS updates the RabbitMQ chart to name nodes via their hostnames
rather than IPs - allowing the cluster (and single nodes) to be
restarted without impact.
Additionally the rabbitmq managment interface is exposed and basic
helm tests have been added.
Change-Id: I84857d9f3697eaa8491aafaf6ee3b9d47dbf2191
Make appctl to search pidfile for exit command as pid 1 is not
always the target process in some cases. For example, pid 1 is
"pause" when pid namespace sharing is enabled in your k8s cluster.
Change-Id: I90e202245a9522fe53bea7e1f047061a0a280834
This patch set addresses the comments left in [0] by fixing the header
information in the python template file and adding logic to query the
domain specific logic.
[0]https://review.openstack.org/#/c/559191/
Change-Id: I656d7ac8158f9b40246ac739e4dc4fc88e1e43da
Signed-off-by: Tin Lam <tin@irrational.io>
This moves to consume the roles from openstack-helm-infra
in the openstack-helm gates
Depends-On: https://review.openstack.org/559836
Change-Id: I3ed721333b899f8dde812f1843a9fcb074c63121
This patch set provides PATCH capability for ldap-backed domain config,
and prevents silent failure if the configuration contains erroneous
setting. This also moves from loading .conf files into DB directly,
and uses the API endpoints.
Change-Id: I17a19046fa96e0f3e8fb029c156ba79c924a0097
Signed-off-by: Tin Lam <tin@irrational.io>
This PS increases the robustness of storage cleaning jobs by
precreating the service accounts and roles for the pod to consume,
and removes the potential for race conditions by removing the delete
hook.
Change-Id: I1f3c35fe2bd2a4325430e8025951349526f683af
To help conserve resources move the centos / fedora multinode jobs
into the experimental pipeline. The will mean we are no longer using
10 nodes on every patchset.
These jobs have been non-voting for 3+ months, and will help reduce
the number of nodes needed by the helm project.
The jobs can still be run using 'check experimental' but now on
demand. And once they have been properly fixed can be moved back into
check / gate pipelines.
Change-Id: I6f5c6362749b7beb3e9f0ccff2b75d6b99d809d8
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This PS forces keyring creation on each start of the mgr container.
It resolves an issue found following k8s outage, where sometimes
the key is not created correctly the 1st time the container starts.
Change-Id: I7e642ca49883ac823196730362b796cd52cd841c
