Currently, the proxy troubleshooting guide does not include the IP
address of the Kubernetes API in the defined environment or Ansible
playbook variables. This causes deployments to fail when requests are
routed through proxy servers. This change adds a proxy configuration
section to the beginning of the installation guide and includes the
process of adding the Kubernetes API IP address to the environment and
Ansible playbook variables. It also removes the unecessary sections from
the troubleshooting guide and upgrades the note about resolv.conf being
overwritten to a warning.
Change-Id: I1ff753517b387027f0cc052b18e8822b638cfb4d
This PS moves the keystone chart to be linine with other OSH
components and drives all config via the charts values.yaml
Change-Id: I14ee6ede0a87619ecbb2c56d0edf82ffbc5606be
Signed-off-by: Pete Birley <pete@port.direct>
This PS updates the keystoen chart to stop running the keystone api
as the root user.
Change-Id: If3042210f761476846da02fc8e648c700267a591
Signed-off-by: Pete Birley <pete@port.direct>
This PS disables the v2 keystone API, and finishes the migration to
full v3 support.
Change-Id: I3021ebe0bee668db9f28e7fb18e2d4b26172f209
Signed-off-by: Pete Birley <pete@port.direct>
This adds a dynamically generated password for Prometheus to
build on the inclusion of basic auth for Prometheus in osh-infra
Depends-On: https://review.openstack.org/543553
Change-Id: I344b8326829c7816a5ce79529aa1a0f74df52dbd
This adds nagios to the armada-lma manifest and includes it in
the monitoring chart group
Depends-On: https://review.openstack.org/#/c/587972/
Change-Id: Id4c8f805dbc4472f9b49d19d2e0307d722dd7196
This PS moves to use port 80 by default for the keystone
asdmin endpoint, and adjusts paths accordingly.
Change-Id: Iccae704dadc17eba269e857301654782f64763c9
Signed-off-by: Pete Birley <pete@port.direct>
This PS updates the nova rootwrap config to be values.yaml driven,
inline with neutron and cinder.
Change-Id: I3df7e7de583a75234a6bc4a71a32bd0a8d369332
Signed-off-by: Pete Birley <pete@port.direct>
This PS udpates the libvirt chart to correctly handle listed params.
Change-Id: I73d71a8d10b99420d3f1c69be476cf7ca4927951
Signed-off-by: Pete Birley <pete@port.direct>
This PS udpates the developer scripts to deploy glance with configuration
that allows operation with heat by default with newton based deployments.
Change-Id: If77ad095c82fc5a28ee3acd3cca295e17f4f7939
Signed-off-by: Pete Birley <pete@port.direct>
As reported in OSSN-0083[0], "get_identity_providers" is invalid
and should be singular "get_identity_provider". The former rule
is ignored, this change to make the rule singular fixes this
issue.
[0] https://wiki.openstack.org/wiki/OSSN/OSSN-0083
Change-Id: I479bcda89b0be0056717864e79269b8d071d98ec
This PS updates the privs granted to the OvS containers.
Change-Id: Ie50ae5692dbf67c19f55521a5cb46308480f737a
Signed-off-by: Pete Birley <pete@port.direct>
This PS brings novas sudoers file config to be in line with neutron
and other osh charts.
Change-Id: I609455b1a58e576644b8a6cfb8b273d5aeb94c58
Signed-off-by: Pete Birley <pete@port.direct>
This PS moves the RabbitMQ chart to OSH-Infra
Story: 2002204
Task: 585554
Depends-On: https://review.openstack.org/#/c/585746
Change-Id: Ia57e63bbfb7d4266d58711cfb5644ecad34e2280
Signed-off-by: Pete Birley <pete@port.direct>
This PS disables the depreciated glance V1 API and registry
by default. For newton gates the registry is enabled, as newton
heat still used it.
Change-Id: Ia6bd4382750bde1b0a0e4db174d2de11626a1826
Signed-off-by: Pete Birley <pete@port.direct>
This PS updates the gate playbooks to both be slightly more
uniform in their instantiation, and also exposes the targeted
openstack release as an env var in scripts ran.
Change-Id: I4a2ab99bd3b1586703bf53e54231b0f08623a7d8
Signed-off-by: Pete Birley <pete@port.direct>
This PS moves the Memcached chart to OSH-Infra
Story: 2002204
Task: 21727
Depends-On: https://review.openstack.org/#/c/585553
Change-Id: Iabf15db6d14df7e6b7246f8abb9d2e97f6d96172
Signed-off-by: Pete Birley <pete@port.direct>
This PS fixes the rabbitmq exporter configurations.
Now, RABBIT_CAPABILITIES env values can not be set because of dummy
values.
After fix values, it needs to upgrade exporter image version because
of string parsing problem in the exporter.
Additional, bert option is added.
https://github.com/kbudde/rabbitmq_exporter
Change-Id: Ida5fae0697c59023eb8a605a13f0279138929969
Go returns the keys of a map in arbitrary order, so the name of DaemonSets
which includes a hash over all matchExpressions could change when upgrading
releases eventhough the node or label selector hasn't changed.
Change-Id: I882c7b51d52ba4ace99b8a8830725ae38a1c3b94
Co-authored-by: Lars Fenneberg <lf@elemental.net>
Signed-off-by: Pete Birley <pete@port.direct>
Story: 2002774
This PS removes the double logging of openstack components that
were caused by outputting to both stdout and stderr.
Change-Id: I6e0ae5861bbf5b8d736ae08251aa865e1c4ce0d8
Signed-off-by: Pete Birley <pete@port.direct>
This PS adds a script to update the keystone catalog endpoints
for keystone itself, as the keystone-bootstrap will not update
these once created.
Change-Id: Ie48c71bbdc9bbd14cebcee46285b3bf51bd28065
Signed-off-by: Pete Birley <pete@port.direct>
This PS moves the ingress chart to OSH-Infra
Story: 2002204
Task: 21733
Depends-On: https://review.openstack.org/585550
Change-Id: Ie5b511def55dcd481eb291c6b309af61c66e0416
Signed-off-by: Pete Birley <pete@port.direct>
In a jewel version, egrep -c "12.2|luminous" returns "0",
but execution will be error.
So, add pipe and echo command to make a success.
Change-Id: I94f45855f6510e747884d8b6a629a62c3d96adbd
This PS moves to use a service domain for openstack service accounts
and users.
Change-Id: Ibe7c5f83a9fc9960fb85e53f9745d24f2192a94a
Signed-off-by: Pete Birley <pete@port.direct>
This PS updates keystone, and the keystone endpoints sections to use
the same layout for port declarations as other charts.
Change-Id: I7dddabee6c74bf023da4b1cdf722a409e7475f8f
Signed-off-by: Pete Birley <pete@port.direct>
