This patch set adds in two additional parameters to:
a. establish ownership between certificate and secret so secrets can be
cleaned up when the certificate is deleted as part of a helm release
b. add the ability to always issue new tls.key as part of the key
rotation when the secret gets regenerated for any reason.
This also adds linebreaks for readability.
Change-Id: Id40d504251bbd98c32a7d9baa3dbe9858ad495cb
Signed-off-by: Tin Lam <tin@irrational.io>
Switch to openstackdocstheme 2.2.1 version. Using
this version will allow especially:
* Linking from HTML to PDF document
* Allow parallel building of documents
* Fix some rendering problems
Update Sphinx version as well.
Disable openstackdocs_auto_name to use 'project' variable as name.
Change pygments_style to 'native' since old theme version always used
'native' and the theme now respects the setting and using 'sphinx' can
lead to some strange rendering.
openstackdocstheme renames some variables, so follow the renames
before the next release removes them. A couple of variables are also
not needed anymore, remove them.
See also
http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014971.html
Change-Id: I46021aa93e28242d0f7dc9d80f598538247a6df5
Some nova settings for huge_page reservation can be needed when
deploying things like ovs-dpdk to avoid running out of memory.
This change adds in the values override for setting huge_page
reservations as an example to use when overriding nova values.
Change-Id: I9ee13d3a8bcaabf50a449cb2566cfb0fe8212484
In a recent apparmor security patch [0], additional annotations were
added to the cronjobs that were incorrectly indented. While helm v2
seems fairly tolerant and ignores these errors, running this usig helm
v3 seems to cause rendering problems as we are placing incorrect key
and value pair into the spec: field. This patch set corrects this.
[0] https://review.opendev.org/#/c/725727/8
Change-Id: I9aae94bc0a68318b2c16fedbc973f7a0a2a3729e
Signed-off-by: Tin Lam <tin@irrational.io>
This patch set updates the cert-manager.io version from v1alpha2 to
v1alpha3.
Change-Id: Ib9904f9f2c1f3fa426c852b012307cf7aed266e7
Signed-off-by: Tin Lam <tin@irrational.io>
This patch set places in a placement database migration script to
upgrade an installation from one without the placement service to one
with the placement service.
Change-Id: I1a9abb4999beac26b140a8302665f5c63901e71d
Signed-off-by: Tin Lam <tin@irrational.io>
This updates the policy.yaml file with the latest rules generated by
tox -egenpolicy in openstack/placement project.
Change-Id: I43a2fb00121eb7addd5b07378eb51aeb273aedfb
Signed-off-by: Tin Lam <tin@irrational.io>
All the Dockerfiles have been moved to openstack-helm-images project
where it is better supported. The old Dockerfiles in the tools/images
folder should be removed to reduce confusion. Users should be using
the ones in openstack-helm-images project.
Change-Id: Ife430a54806885220d25f426bac68ef87b9035d3
Signed-off-by: Tin Lam <tin@irrational.io>
This patch disables other placement service kubernetes resources.
Change-Id: I12c2627820975a44f639ff3c0a2508a5e292db47
Signed-off-by: Tin Lam <tin@irrational.io>
Adds yamllint tox environment with bootstrapping non-voting
configuration. To work around a situation that some of overrides
contain entries for replacement and are not actually valid yamls,
all directories are copied to temporary directory, */values*
files are modified to be readable by yamllint.
Change-Id: I0084b243c1df1692178c59fb5b1b2fb7a4cbac44
This change updates the requirements-and-host-config guide to include
proxy setup instructions as well as updating the ubuntu version to
include 18.04 as the reference linux flavor.
Also updated kubernetes-and-common-setup to include proxy and dns
configuration steps as well as header cleanup.
Change-Id: Ie075cdb7c32bcba5429abb9168ef7cc9b4845d89
With this patch we allow for a more easy way of overriding some
of the values that may be used in other distros while maintainting
the default values if those values are not overriden.
The following values are introduced to be overriden:
conf:
security:
software:
apache2:
binary:
start_flags:
a2enmod:
a2dismod:
On which:
* binary: the binary to use for launching apache
* start_flags: any flags that will be passed to the apache binary call
* a2enmod: mods to enable
* a2dismod: mods to disable
Notice that if there is no overrides given, it should not affect anything
and the templates will not be changed as the default values are set to what
they used to be as to not disrupt existing deployments.
Change-Id: I77940ff847fc5785178ee5cf84cb77bed9f1ec71
Signed-off-by: Zhipeng Liu <zhipengs.liu@intel.com>
The cleanup script used for router, network, server, and flavor does not
account for the first column being the resource ID. Matching via
^[sc]_rally will always result in an empty return. This fix now correctly
matches the the name of the second column. This also fixes an issue where
rally creates flavor as "private", adding --all so it cleans up the
private flavors as well.
Change-Id: Id1a0e31e56b51fd92a95e8588d259ce21fa839d6
Signed-off-by: Tin Lam <tin@irrational.io>
This updates to use TOX_CONSTRAINTS_FILE instead of
UPPER_CONSTRAINTS_FILE since the latter is obsolete.
Change-Id: I5be335d6aec053b58694610865513bf6c5488fb2
Signed-off-by: Tin Lam <tin@irrational.io>
