Commit Graph

3482 Commits

Author SHA1 Message Date
Haider, Nafiz (nh532m)
68f0791f56 [HEAT] Remove tls override for clients_heat
Enable public endpoint for Heat Client for WaitCondition Functionality
by removing tls override for clients_heat section in heat.conf

Change-Id: I94e339a01e6dd4f82d4348805f02676190082a5d
2020-10-07 21:04:32 +00:00
Zuul
cb7d30fadf Merge "[cinder] Support service tokens" 2020-10-05 17:46:21 +00:00
Hemachandra Reddy
766ce51ba9 Establish Nova/Placement dependencies
When a placement service endpoint is changed, nova-compute does not
refresh its cache and continue send requests to the old one:
https://bugs.launchpad.net/charm-nova-compute/+bug/1826382

Also, in Train release, nova services expect placement user be present
in keystone in advance. Without the dependency, the pod starts crash looping.

Change-Id: I6b1a70ec859805794bac2689b04f7eca47ad61b3
2020-09-30 16:41:54 +00:00
okozachenko
74b119db35 Add nova-compute-ssh
Change-Id: Ia555bb69182441d5f17040504efc7d1d524e59ec
2020-09-25 17:39:05 +03:00
Michael Polenchuk
73b9629ea2 [cinder] Support service tokens
Bring in option to be able to create and send service
tokens to prevent long-running job failures (default is OFF).

Change-Id: I5e5707001687e464386696b9c8d80ad8b2977e97
2020-09-25 15:05:35 +04:00
Andrii Ostapenko
20b6b9a236 Change helm-toolkit dependency version to ">= 0.1.0"
Since we introduced chart version check in gates, requirements are not
satisfied with strict check of 0.1.0

Change-Id: If537f69dec7e3360f6bffcc4424f10c248919ece
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-24 12:20:13 -05:00
Zuul
b354f4049c Merge "[Cinder] Configuration for external ceph backend" 2020-09-18 15:54:56 +00:00
Zuul
c8d85cc5e2 Merge "Implement missing security context for placement container" 2020-09-17 19:38:42 +00:00
Huang, Sophie (sh879n)
be690aa5a3 [Cinder] Configuration for external ceph backend
In this patchset, comfigmap of ceph.conf and secret of
cinder user keyring is created for externally managed ceph
Cinder backend.

Change-Id: Ie76bf207a7d42bd70a6be2648e060122f7daf5ad
2020-09-17 17:49:40 +00:00
PrateekDodda
22c1c5310c Implement missing security context for placement container
This change adds security context template at pod/container level

Change-Id: I47e1076a33deb5493ec5562466d00f2bfa62ae0a
2020-09-17 11:13:26 -05:00
Zuul
28669f8854 Merge "Sync logging values with upstream repos" 2020-09-17 04:08:40 +00:00
Zuul
ca48e44974 Merge "Optimize tls job to reduce build time" 2020-09-17 02:12:29 +00:00
Zuul
239d8ddf06 Merge "Add chart-testing linter" 2020-09-17 02:12:27 +00:00
Mohammed Naser
89969ade3a Add chart-testing linter
Added chart lint in zuul CI to enhance the stability for charts.
Fixed some lint errors in the current charts.

Change-Id: I7e4b191fb9e355ab5d5a233e8ed121346519df62
2020-09-16 21:12:17 +03:00
okozachenko
b0c4f7f593 Upgrade train jobs to ussuri
I am gonna use openstack-helm images to run the latest
openstack, ussuri on k8s and so added ussuri zuul ci.
As the first stage, only added for ones which has train
already.

Change-Id: Icd554a0d21f55cd074d1e5c35e1de25e02223cee
2020-09-15 22:47:33 +03:00
okozachenko
a8fc28696d Sync logging values with upstream repos
Some OSH charts have diffferent values for logger_root
handler from upsgream repo config defaul values.
Exactly, logger_root handler values.
This leads double logging finally.
To fix this, set logger_root as null like upstream repos.

Change-Id: I20e4f48efe29ae59c56f74e0ed9a4085283de6ad
2020-09-15 19:15:05 +03:00
Zuul
0abcd93fd9 Merge "Do not pass extra config files to neutron agents" 2020-09-14 22:06:07 +00:00
Zuul
40eb1bd706 Merge "neutron: fix default value for tungsten fabric" 2020-09-14 22:06:05 +00:00
Zuul
ae4fb4807c Merge "Add force cron jobs test run" 2020-09-14 18:24:04 +00:00
Mohammed Naser
0ff2beee30 neutron: fix default value for tungsten fabric
The lack of quotes means if it defaults to nothing, Kubernetes is not
happy because it is trying to set a nil value instead of an empty
string.

Change-Id: I7af08b93a4df92acd9d428266aaa7922a66cf599
2020-09-11 18:48:03 -04:00
Zuul
f63bc1c14d Merge "Move tls job to gate pipeline" 2020-09-11 04:15:43 +00:00
Zuul
028aae2a24 Merge "[Cinder] Support for external ceph backend" 2020-09-11 00:28:34 +00:00
Andrii Ostapenko
5f4a385add Optimize tls job to reduce build time
Also run cron job test in parallel with 900-use-it.sh

Change-Id: I79ba1f3d15b3788fc9271d7b0029cc7989055728
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-10 22:15:46 +00:00
Andrii Ostapenko
25a02b797f Add force cron jobs test run
Change-Id: Iba1045e8b8a992c77449c77a16d410589b7778bc
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-10 17:15:26 -05:00
Andrii Ostapenko
4cd0626fb5 Move tls job to gate pipeline
Running it in gates only to at least avoid dramatically impacting
feedback time for check pipeline.

Change-Id: Ic08714615d0c1b1cecc67fa1cd690a63a8a7c5c2
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-10 15:59:51 +00:00
Andrii Ostapenko
e5d600fdee [tls] Add missing mysql certs to heat-purge-deleted cj
Change-Id: Id434ddcb28f10a5d95550236a892676626c14123
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-10 02:04:51 +00:00
Zuul
b95cd0108f Merge "Imported Translations from Zanata" 2020-09-10 01:52:53 +00:00
PrateekDodda
16b2c8dcc4 Implement missing security context for nginx container
This change adds security context template at pod/container level

Change-Id: I2fbff7b3325f4b6dd98d9299b0daf9e230ece9ae
2020-09-09 19:38:50 +00:00
OpenStack Proposal Bot
e66cf73814 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I8dc7c10a06f803ea80d52f8a7519f8f0faf908d0
2020-09-09 08:18:48 +00:00
diwakar thyagaraj
56772fdbaa [FIX] Remove nginx Container name for apparmor in Glance-registry
Ref PS : https://review.opendev.org/#/c/749985/

Change-Id: I52e42500b2573324cec2b6d43d67cda39dad8a31
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-09-08 11:00:57 +00:00
OpenStack Proposal Bot
38501f839c Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I39a853b3ffda003b59dd7d4b0700f40b3b048ab3
2020-09-07 08:10:24 +00:00
Zuul
81a2a65de5 Merge "Glance: Remove nginx side car from registery" 2020-09-04 18:50:50 +00:00
Gupta, Sangeet (sg774j)
7b52b915d7 Glance: Remove nginx side car from registery
Glance-registry does not need nginx sidecar

Change-Id: I3fbc414821f16aeaad4ea01039eb832496480348
2020-09-04 15:09:56 +00:00
Chinasubbareddy Mallavarapu
054affa290 [Cinder] Support for external ceph backend
This is to add support for external ceph cluster as second backend
for cinder.

prerequisite:
  - create ceph.conf for external ceph cluster as configmap
  - create cinder2 user and keyring on external ceph cluster
  - create keyring of user cinder2 as a secret

now point configmap and secret created as prerequisite under
values.ceph_client.external_ceph section

also we need to add second backend under values.conf.backends section
with all the details of external ceph cluster.

Change-Id: I8df9f1da7208304f479dbb70b19af97fb01cd38f
2020-09-03 23:58:10 -05:00
PrateekDodda
c57391366a Implement missing security context template for deployment server
This change adds security context template at pod/container level

Change-Id: I2180cdf934ce21bc5ae7148f2830d1a8683e82db
2020-09-03 14:22:22 +00:00
diwakar thyagaraj
9c39f2e328 Add Apparmor for Missing containers for glance and neutron pods
1)Fixed nginx container in glance.
2)Fixed rpc server in neutron.
3)Enabled Certificates for creating pods.

Change-Id: Ida510ee22808b818e256f93b11d2e1ed36f63a19
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-08-27 21:27:36 +00:00
Andrii Ostapenko
71bc6d15c7 Dynamically determine if ceph is enabled for compute kit
Change-Id: If9af66b0e5e1d6b5ba514c8e5e5f27383e74850e
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-08-26 03:35:35 +00:00
Zuul
289e3ff6f8 Merge "[horizon] Allow to pass any setting to horizon local_settings.py" 2020-08-24 17:55:17 +00:00
KHIYANI, RAHUL (rk0850)
3221807042 Add volumemounts to cinder-backup container
Adding volumemounts to allow cinder to access /var/lib/cinder/tmp

Change-Id: I1e93587da2b4889118f2b941c89e7d3adee2b7c8
2020-08-20 11:42:03 -05:00
Gupta, Sangeet (sg774j)
0a91dd5f30 feat-tls: Add certs to cinder scheduler and Volume.
This ps mounts certs to scheduler and Volume.

Change-Id: Ibc013ffd4e8fe7500fcfdd285ad896b0e6b97acc
2020-08-19 21:52:11 +00:00
Zuul
6a8e6e9a35 Merge "Update ovs dpdk config when required" 2020-08-19 16:09:29 +00:00
rajesh.kudaka
a2f2e0418f Update ovs dpdk config when required
This commit enables user to update dpdk bond config
only when required using the flag UPDATE_DPDK_BOND_CONFIG.
This helps in avoiding disruption in ovs dpdk during ovs
agent restart or when there is a update in bond config.

Setting UPDATE_DPDK_BOND_CONFIG to true will have default
behavior.

Setting UPDATE_DPDK_BOND_CONFIG to false will disable
configuration of bonds after the first run and can be
set to true when required.

Change-Id: I4c8ec145c8f1c1c1b5f7a5201f792e040fdd89a2
2020-08-14 11:26:53 -05:00
OpenStack Proposal Bot
565837332e Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Ib791e2879f19788fb90b13dab1421e03811854e7
2020-08-14 08:27:51 +00:00
diwakar thyagaraj
2ae6f9200a Enable Apparmor to Placement db-migrate Jobs
Change-Id: I15141ff74cbc731238d634fb11995d21234327ba
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-08-14 00:40:27 +00:00
Gupta, Sangeet (sg774j)
94642833dd [nova] fix cell0 database connection
This patchset sets/updates the Database Connection for cell0 to
correct value in the database.

Change-Id: I4d445023691b748a7de0d256433bd17c7958cc04
2020-08-13 20:55:40 +00:00
Vasyl Saienko
d0bd3dbb50 [horizon] Allow to pass any setting to horizon local_settings.py
Change-Id: I164f3bb0af5d07af17490bd3d275c7b0fbadb0b9
2020-08-13 17:21:14 +00:00
Zuul
5e0d50215e Merge "Add retry for curling cfssl.org" 2020-08-12 20:51:18 +00:00
Zuul
4eb8c1bed8 Merge "Dont run cert-manager in jobs w/o tls enabled" 2020-08-12 20:48:51 +00:00
Andrii Ostapenko
ba412dec93 Dont run cert-manager in jobs w/o tls enabled
Change-Id: I1bf7d33811417866dd03bbed13dc9ef155b36f18
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-08-12 13:04:00 -05:00
Andrii Ostapenko
b334b221db Add retry for curling cfssl.org
We observe SSL related errors rarely in jobs.

Change-Id: Ia5569f411abd2828c6ab289e3942e3a7dabf2d46
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-08-12 12:23:59 -05:00