With the move to helm v3, helm status requires a namespace to be
specified, but doing so breaks helm v2 compatability. In order
to preserve our gating with both versions of helm while we make
the change from v2 to v3, this change removes the usage of helm
serve in openstack-helm's deployment scripts.
Once we fully move to helm v3, these scripts can be improved and
cleaned up to be more compatible with the new v3 syntax.
Change-Id: I02b6bbf780abf8c8bc7c1783c35d9411d25e18a8
By default when deploying the openstack AIO, it will deploy
openstack ocata release on ubuntu xenial, which by now is quite
old and largely unsupported. This change updates these default
overrides to train and bionic respectively in order to bring
the default settings to more recent/supported releases.
Change-Id: I9b6e1120101767356413b1341828dc8d39bc9b3c
This change modifies the exerise-the-cloud.rst file to include user
steps for cleaning up the client environment to allow for subsequent
runs of the 900-use-it.sh script.
Change-Id: I6bd3c95d837f9b3273868d51c1f5121d96e53e73
If the test pod still exists, then the new test run
fails with ERROR: pods "abc-test" already exists
So, Removing remaining test pods before new test run
Change-Id: I447d2b56b1419086b99df47b6605d0a95e1a9239
Closes-Bug: #1882030
The current copyright refers to a non-existent group
"openstack helm authors" with often out-of-date references that
are confusing when adding a new file to the repo.
This change removes all references to this copyright by the
non-existent group and any blank lines underneath.
Change-Id: Ia035037e000f1bf95202fc07b8cd1ad0fc019094
This PS updates the gateway setup script to support deployments where
multiple default routes may be present, eg when connecting to a vpn.
Change-Id: I5fe86e9471ecb6a9c80e1e4f942822cac00da669
Signed-off-by: Pete Birley <pete@port.direct>
This PS fixes the developer script for generating certs for use with
octavia.
Change-Id: I2dae5bc32dbbaa9055884a568cebeb27fe13ac74
Signed-off-by: Pete Birley <pete@port.direct>
For simplification of deployment and maintenance, reduce the number
of scripts that do usually the same.
The important part is that when user wants to do multinode deployment,
OSH_DEPLOY_MULTINODE variable must be set before executing the script.
For now multinone script still stays, only to invoke the common one,
but in future it would be better to remove multinode scripts completely
and let user call the common script with the right argument.
Change-Id: I4dca159827581cbe8d6ded3be85e732acbf60ed1
This PS adds octavia chart and its deployment scripts.
Blueprint name : openstack-helm-octavia
- Deployments : api, worker, housekeeping
- Daemonset : health-manager
- health-manager daemonset creates o-hm device on each controller node.
- This is for multi node deployment.
- 180-create-resource-for-octavia.sh : Create openstack resources
(network, sec groups, flavor, keypair, image for development)
- 190-create-octavia-certs.sh : Create certificates to use Octavia
(the certs is passed into pod using secret and volume for development)
- 200-octavia.sh : Deploy Octavia chart
Note: This chart doesn't include amphora image itself and its build.
Change-Id: I0bb7dfc7c15d77287c05a8542347e19fc269aba4
Signed-off-by: hagun.kim <hagun.kim@samsung.com>
This change adds two network policy zuul checks, one for the compute-kit,
and one for cinder/ceph, to test network policy for each OpenStack
service. These checks will be non-voting initially.
The network policy rules for each service will initially allow all
traffic. These ingress/egress rules will be defined in future changes
to only explicitly allow traffic between services that are explicitly
allowed to communicate, other traffic will be denied.
Depends-On: https://review.opendev.org/#/c/685130/
Change-Id: Ide2998ebb2af2832f24ca7abc398a82e4a6d70e3
In the 900-use-it.sh script, the user can define the gateway
(OSH_BR_EX_ADDR) and the subnet of the external network
(OSH_EXT_SUBNET). However, in the script that configures the gateway
correctly in br-ex, these values are hardcoded.
This patch allows the user to modify them by a env. variable, same as
the 900-use-it.sh script does
Change-Id: I25124024ebb72ff5fea8903fb393b71a052d0f93
Signed-off-by: Manuel Buil <mbuil@suse.com>
This PS updates the charts to use the htk function recently introduced
to allow oslo.messaging clients ans servers to directly hit their
backends rather than using either DNS or K8S svc based routing.
Depends-On: I5150a64bd29fa062e30496c1f2127de138322863
Change-Id: I458b4313c57fc50c8181cedeca9919670487926a
Signed-off-by: Pete Birley <pete@port.direct>
This adds a helm test for Horizon, the helm test
runs a selenium webdriver check to verify the dashboard
is up
Change-Id: I3616c05596b2bd94931c39fb774333bf65453d52
Signed-off-by: Steve Wilkerson <sw5822@att.com>
This change removes the network policy overrides from the default
developer deployment scripts now that there is a set of
designated scripts that provide this functionality.
Change-Id: I788845e85314b3a8a9c860fbc77de536113781e0
Prometheus mysql exporter is failing because of missing label in
network policy for mysql. This is to add the label to the override
yaml
Change-Id: Ic5e2613303f04d2bfab1229d3818a2fc9b4263bc
Signed-off-by: Sreejith Punnapuzha <Sreejith.Punnapuzha@outlook.com>
This PS allows rabbit compoents, eg other rabbit servers, tests, and jobs
to connect to rabbit.
Change-Id: I61cca52072940e31c093e4895a1c6406b15456bf
Signed-off-by: Pete Birley <pete@port.direct>
1. Chart name : change from "ceph" to "ceph-rgw"
2. Postfix of environment variable's name
: change from "OPENSTACK" to "CEPH"
Change-Id: I03a4e12457cec1811b6fa03367811f74e4bb8b83
Signed-off-by: Deokjin Kim <deokjin81.kim@samsung.com>
This PS is enable the Egress policies
and enforces them in Openstack-helm.
Depends-On: Icbe2a18c98dba795d15398dcdcac64228f6a7b4c
Change-Id: I6ef3cd157749fd562acb2f89ad44e63be4f7e975
This patch set updates the gate to by default uses network policy
for all components and enforces them in Openstack-helm.
Change-Id: I70c90b5808075797f02670f21481a4f968205325
Depends-On: I78e87ef3276e948ae4dd2eb462b4b8012251c8c8
Co-Authored-By: Mike Pham <tp6510@att.com>
Signed-off-by: Tin Lam <tin@irrational.io>
This patch set moves the default deployment to ocata from newton.
Newton zuul job is now moved into its separate job.
Change-Id: Ic534c8ee02179f23c7855d93a4707e5a2fd77354
Signed-off-by: Tin Lam <tin@irrational.io>
This PS updates the use it script to be more flexible
Change-Id: I7c1ee3308a6e7605fc6908dfa7e9429c8a8a7a80
Signed-off-by: Pete Birley <pete@port.direct>
This updates the make command for the osh-infra charts in the
deployment scripts to account for the charts residing in
openstack-helm-infra instead of the openstack-helm working
directory
Change-Id: I9f492e586f69b0caf908366a9cae2b55da0d4cfc
This updates the make command for the openvswitch chart to account
for the chart residing in openstack-helm-infra instead of the
openstack-helm project directory
Change-Id: Ia8bd5ada3ecf4aa4c42b6b542c477e9013d87a3d
This moves the openvswitch chart to openstack-helm-infra as part of
the effort to move charts to their appropriate repositories
Depends-On: https://review.openstack.org/#/c/599723/
Change-Id: I248ad2dd24f4ab101839f05070f1f6f022f93715
Story: 2002204
Task: 21730
This updates the Make command used in the mariadb deployment
scripts to account for the chart residing in openstack-helm-infra
Change-Id: I4485cc425ea4c21eac71dc2f8fe625a5b5c89b96
This moves the mariadb chart to openstack-helm-infra as part of
the effort to move charts to the appropriate repositories
Depends-On: https://review.openstack.org/#/c/599651/
Change-Id: I9835da54aa4dd323b841f9605b688857ecf3a123
Story: 2002204
Task: 21725
This PS moves the RabbitMQ chart to OSH-Infra
Story: 2002204
Task: 585554
Depends-On: https://review.openstack.org/#/c/585746
Change-Id: Ia57e63bbfb7d4266d58711cfb5644ecad34e2280
Signed-off-by: Pete Birley <pete@port.direct>
This PS moves the ingress chart to OSH-Infra
Story: 2002204
Task: 21733
Depends-On: https://review.openstack.org/585550
Change-Id: Ie5b511def55dcd481eb291c6b309af61c66e0416
Signed-off-by: Pete Birley <pete@port.direct>
The ingress gate script displayed the `helm status` of the openstack
namespace ingress twice, rather than once for openstack and once
for ceph namespaces. This fixes.
Change-Id: I9637b44d2cfad45f4935242351ee9160e013364f
This PS updates the ceph chart to use the ingress controller for
the radosgw.
Change-Id: Ie0ff4d9dd91d8228170e0ed4f2793599132077a7
Signed-off-by: Pete Birley <pete@port.direct>
This PS updates the dnsmasq pod that runs in the gate to allow vm's
API access to only bind to br-ex, as otherwise it collides with other
DNS servers running in the gates.
Change-Id: I85bb3043d56689ad8ee2996df61d23969a535de1
This ps removes ipcalc from the required packages for the developer
environment.
Change-Id: Iaa56150663605f9a880007d140cf03ec739d5371
Signed-off-by: Pete Birley <pete@port.direct>
