Commit Graph

2599 Commits

Author SHA1 Message Date
Zuul
a85a1f84a2 Merge "Ceilometer chart: replace the obsolete ceilometer upgrade command" 2019-03-06 05:20:29 +00:00
Zuul
89d53f2d78 Merge "Update irc meeting channel" 2019-03-06 04:10:00 +00:00
Zuul
e7c8c82d69 Merge "Only run bandit when changing python content" 2019-03-06 04:09:59 +00:00
Zuul
1ad5467252 Merge "Increase default logging" 2019-03-06 04:09:58 +00:00
Zuul
ffa5bcb4c4 Merge "Adapt Makefile for releasenotes" 2019-03-06 04:01:01 +00:00
Angie Wang
d6984c26b3 Ceilometer chart: replace the obsolete ceilometer upgrade command
The current ceilometer upgrade command "ceilometer-dbsync" was
deprecated since newton and was removed since ocata. The commit
updates to use the replaced command.

Story: 2005019
Task: 29727
Change-Id: I06afb2cc99726991d6941aabb039379dc78c5d66
Signed-off-by: Angie Wang <angie.wang@windriver.com>
2019-03-06 03:57:43 +00:00
Zuul
532d583b9a Merge "Support per-host overrides of auto_bridge_add" 2019-03-06 03:42:49 +00:00
chengli3
6e2e4aba8d Support per-host overrides of auto_bridge_add
.Values.network.auto_bridge_add is a global config. So in multi nodes
deployment, it requires that all hosts have the same nic names. This is
a strict limit.
This patch is to support per-host auto_bridge_add, so that we can define
different auto_bridge_add for hosts.
Also, this patch move .network.auto_bridge_add to .conf.auto_bridge_add

Change-Id: I4a4d6efbbfe073d035bc5c03700fbe998e708d0f
Story: 2005059
Task: 29601
2019-03-05 16:40:58 +08:00
Zuul
01cb93c471 Merge "Report the reason why the script hits a timeout." 2019-03-05 01:44:10 +00:00
pd2839
0c502d2062 readOnlyFilesystem: true for keystone chart
Fix for adding readOnlyFilesystem flag at pod level

Change-Id: I37fb7f580ae0a408530d58b195c353e41d701eac
2019-03-04 21:43:43 +00:00
Jiří Suchomel
295475481f Report the reason why the script hits a timeout.
Also small code cleanup and bit more consistency to the commands
and variables.

Change-Id: I7bb1a9e3bafc105c17010dc145adfb3a166e945e
2019-03-04 15:53:58 +01:00
Gage Hugo
7406014483 Only run bandit when changing python content
This changes the gate check for bandit to only run when either python
or templated python files are edited. This will cause the check
to only be ran when those specific file types are edited, and to
skip the check when not needed.

Change-Id: I149ef6827ca10e32492f2b05beb8a13af5a03fc5
2019-03-01 19:36:35 +00:00
Jean-Philippe Evrard
5890ebf4f8 Increase default logging
The current helm chart defaults drops logs of any warnings
(and above) for any logger outside of the namespace
of the deployed chart.

This is a problem, as logging could reveal important information for
operators. While this could be done with a value override, there
is no reason to hide warning, errors, or critical information that
are happening in the cycle of the operation of the software
deployed with the helm charts. For example, nothing would get
logged in oslo_service, which is a very important part of running
OpenStack.

This fixes it by logging to stdout all the warnings (and above)
for OpenStack apps.

Change-Id: I16f77f4cc64caf21b21c8519e6da34eaf5d31498
2019-02-28 09:53:01 +00:00
Jean-Philippe Evrard
9b0d62ed59 Adapt Makefile for releasenotes
Release notes should be excluded from make, as they will cause
linting issues.

Change-Id: I48fec6e7e263d0136e987e744b3a339f8118bfe1
2019-02-28 10:52:18 +01:00
chengli3
e1a005b0a7 Update irc meeting channel
Seems we have moved from #openstack-meeting-5 to #openstack-meeting-4,
so update README

Change-Id: I7344afbf084b79ea07e07bb02cc4037326ad1b30
2019-02-27 14:51:15 +08:00
Zuul
66ba0be81c Merge "Explicitly set datefmt for logging" 2019-02-27 01:31:09 +00:00
Zuul
62c937c6d0 Merge "Fix missing dependency key in neutron values.yaml" 2019-02-25 18:22:57 +00:00
Zuul
c869b4ef4a Merge "Add startingDeadlineSeconds field to cronJobs" 2019-02-23 21:18:26 +00:00
sg774j
93658c75ec enable_proxy_headers_parsing to various services.
Adding this parameter to Cinder, Heat, Glance,and Neutron
config. Adding this parameter allows proper handling to resource
links in response using API services behind https proxy.

Change-Id: Ib99a16b6252b15d9f138417485731ec401cb8f81
2019-02-21 15:01:45 +00:00
Pavlo Shchelokovskyy
55645c7e73 Explicitly set datefmt for logging
the defaults in Python [0] and oslo.log [1] are such that when using
separate config file for logging configuration (log-config-append)
the log fomat of dates containes miliseconds twice (as in sec,ms.ms)
which is exactly what is currently seen in logs of OpenStack services
deployed by openstack-helm.

When not provided with datefmt log formatter option, Python effectively
uses '%Y-%m-%d %H:%M:%S,%f' [0] as a default time formatting string to
render `%(asctime)s`, but the defaults in oslo.log add another `.%f`
to it [1].

Since `log-date-format` oslo.log option has no effect when using
log-config-append, we need to explicitly set date format to avoid double
miliseconds rendering in date of log entries.

[0] 6ee41793d2/Lib/logging/__init__.py (L427-L428)
[1] http://git.openstack.org/cgit/openstack/oslo.log/tree/oslo_log/_options.py?id=7c5f8362b26313217b6c248e77be3dc8e2ef74a5#n148

Change-Id: I47aa7ce96770d94b905b56d6fe4abad428f01047
2019-02-21 08:28:35 +00:00
Dmitrii Kabanov
34a092a7f4 Add startingDeadlineSeconds field to cronJobs
This patch set adds "startingDeadlineSeconds" field to cronJobs.
When the field is not set, the controller counts how many missed
jobs occured from the last scheduled time till now. And if it happends
more than 100 time the job will not be scheduled. To avoid this
the "startingDeadlineSeconds" field should be set to sufficient period
of time. In this case the controller counts how many missed jobs occured
during this period of time. The value of the field should be less than
time (in seconds) needed for running >100 jobs (according to schedule).

Change-Id: I3bf7c7077b55ca5a3421052bd0b59b70c9bbcf24
2019-02-20 04:11:05 +00:00
Zuul
815fa767ed Merge "Docs for deploying Neutron TaaS & TaaS Dashboard plugin" 2019-02-16 17:57:25 +00:00
Zuul
ba41c16d6f Merge "Actually add db-drop to ironic chart" 2019-02-16 17:36:57 +00:00
Zuul
53aae7a481 Merge "Unhardcode dns server for ironic pxe network" 2019-02-16 17:36:18 +00:00
Zuul
9e18fa2d5c Merge "Add release-uuid annotation to pod spec" 2019-02-16 01:38:09 +00:00
Zuul
ef313188b3 Merge "Use tinyipa of Ocata by default in ironic chart" 2019-02-16 01:38:08 +00:00
Zuul
710db97513 Merge "Add Armada job for testing update of chart passwords" 2019-02-16 00:59:19 +00:00
Sphicas, Phil (ps3910)
27ef3fba34 Fix missing dependency key in neutron values.yaml
Resolve issue with sriov dependency removal.
sriov key is required even if there are no dependencies.

Change-Id: I978b411502af575579e4f4a56e0974ef2baf5f52
2019-02-14 09:01:17 -08:00
Deepak Tiwari
0545dd1003 Docs for deploying Neutron TaaS & TaaS Dashboard plugin
Add documentation describing steps to deploy tap-as-a-service neutron
plugin as L2 Agent ext, and to deploy tap-as-a-service-dashboard
plugin in horizon.

Change-Id: I3e671d58b612a517af9cd2902401f91aad4bcd78
2019-02-13 16:05:50 -06:00
Pavlo Shchelokovskyy
163497a421 Actually add db-drop to ironic chart
while the job_db_drop was there it was missing both image, script
and limits.

Change-Id: I7fdb8fdd33cbe3c086299d7b71922ae889bc0a14
2019-02-13 18:38:09 +00:00
Zuul
e304c01594 Merge "[CEPH] Enable helm tests for RGW gate job" 2019-02-13 17:15:43 +00:00
Pavlo Shchelokovskyy
7844ecec38 Unhardcode dns server for ironic pxe network
Is configurable in tempest chart but not ironic

Change-Id: I029258a5f2cd33d5770f006ea212afb8310228fd
2019-02-13 08:25:28 +00:00
Steve Wilkerson
f4c01d2461 Add release-uuid annotation to pod spec
This adds the release-uuid annotation to the pod spec for all
replication controller templates in the openstack-helm charts

Change-Id: I0159f2741c27277fd173208e7169ff657bb33e57
2019-02-12 12:31:59 -06:00
Pete Birley
65df9acaf8 Nova: Move ceph config to remain on host
Change-Id: I786f9fec553eb8b65faa5b8b022d6c971f7dfba1
Signed-off-by: Pete Birley <pete@port.direct>
2019-02-08 16:02:13 -06:00
Zuul
51463ddbc2 Merge "Horizon: Expose additional security config params" 2019-02-08 05:51:14 +00:00
Rick Bartra
e60c91e99d Horizon: Expose additional security config params
Expose additional Horizon security params in accordance with the
OpenStack Security Guide [0]

- Check-Dashboard-03: Is DISALLOW_IFRAME_EMBED parameter set to True
- Check-Dashboard-07: Is PASSWORD_AUTOCOMPLETE set to False

[0] https://docs.openstack.org/security-guide/dashboard/checklist.html

Change-Id: I355ddbc9fb1dcd0a6100ee650afd54680ef9ffbd
2019-02-07 09:13:35 -05:00
Steve Wilkerson
61ddb2d87a Add Armada job for testing update of chart passwords
This adds both a periodic and experimental job for deploying Ceph
and the OSH components via Armada. This job will then generate new
passphrases for the OSH components, render an updated manifest for
the OSH components including the new passphrases, then applies the
updated OSH manifest to validate the ability for all deployed
charts to update those passphrases successfully
Change-Id: I42d19bbf8161b60311c4b8101217cdcfbdf6b568
2019-02-06 16:20:16 -06:00
Matthew Heler
edee4245eb [CEPH] Enable helm tests for RGW gate job
Enable the RGW helm tests for the multinode gate job

Depends-On: https://review.openstack.org/#/c/635192/
Change-Id: I899a945487032bdfafa1cf91156d40dac794a5a9
2019-02-06 14:31:03 -06:00
Pavlo Shchelokovskyy
4740a3e0cd Use tinyipa of Ocata by default in ironic chart
the release name is currently hard-coded to 'newton' while the default
images are for ocata (and the oldest supported release is also ocata).

Change-Id: Iac5112bb978309a07114fcfd0bd899ef3f3d56d0
2019-02-06 13:52:25 +02:00
Zuul
7edbfc8a7e Merge "OSH: Add Armada job for testing update of release uuids" 2019-02-05 20:21:06 +00:00
Zuul
3c8a6c0f8e Merge "Drop heat_stack_owner role" 2019-02-05 20:06:21 +00:00
Pavlo Shchelokovskyy
776f4a8297 Drop heat_stack_owner role
this role is not actually required since ~Kilo
I3f1b70b78b91bfac9af5fadb71140679b208c999
plus the heat chart already sets the trusts_delegated_roles option
for Heat to pass all roles to the trust

Change-Id: Icf900f318d3173d63c5967857d96f7d2a7f9aa5b
2019-02-05 17:36:18 +02:00
Steve Wilkerson
7c283e7b5d OSH: Add Armada job for testing update of release uuids
This adds both a periodic and experimental job for deploying Ceph
and the OSH components via Armada. This job will then generate a
new release uuid, render an updated manifest for all previously
deployed releases, then apply that manifest to validate the
ability for all deployed charts to update successfully with the
new release uuid annotation

Change-Id: I6f2125f3505904c4714688e7a9900b8d6bea49b4
2019-02-05 08:32:22 -06:00
Steve Wilkerson
99b3062315 Armada manifest: Add timeout to nova and neutron
This adds wait timeouts to nova and neutron to circumvent timeout
issues with deploying those two releases

Change-Id: I3fcc9ef5f16ecbc6dc33fc52df22c2d5ff504fb7
2019-02-05 08:31:41 -06:00
Zuul
5648754f50 Merge "Update openstack-helm Armada job" 2019-02-04 20:17:16 +00:00
Steve Wilkerson
dc1ef4c138 Update openstack-helm Armada job
This updates the openstack-helm Armada job to instead deploy
only Ceph, the OpenStack service charts, and their dependencies.
This is dependent on the addition of the Armada job for Ceph and
the LMA components to openstack-helm-infra. This also updates the
jobs definition to use the osh-gate-runner playbook instead, as
well as sets the job both to a periodic and experimental job

Depends-On: https://review.openstack.org/#/c/634676/
Depends-On: https://review.openstack.org/#/c/633067/
Change-Id: I7e191a153f123e04e123acc33fb691d8117062a9
2019-02-04 16:46:22 +00:00
Pete Birley
b02ec05d76 Horizon: Expose security config params
This PS exposes security related config params

Change-Id: Ia6d2e089301cfc8fd809380ad3f31c6e37dc5607
Signed-off-by: Pete Birley <pete@port.direct>
2019-02-01 22:30:14 +00:00
Pete Birley
23f5b18f1c Cinder: Update auth_strategy to explictly specify keystone
In accordance with the OpenStack Security Guide this PS updates
the cinder.conf to explicity set the auth_strategy param.

Change-Id: Ie0a2b9ffebb597166851226eabac4924c34e1404
Signed-off-by: Pete Birley <pete@port.direct>
2019-01-31 15:09:29 -06:00
Zuul
326200bf93 Merge "Scan templated python files with bandit" 2019-01-31 13:53:16 +00:00
Zuul
64e79b7065 Merge "heat : fix heat trustee configuration" 2019-01-31 08:18:05 +00:00