Some of the LDAP configurations were deprecated in N- or O-release have
been since removed, namely the option to allow for write operations in
LDAP. This is causing some issue with more recent releases of keystone
as discovered in [0]. This patch set removes them from the example to
avoid the errors for more recent releases without impacting N- or
O-releases as they were already deprecated at that point.
Also, this adds in a configuration sample that bootstraps an LDAP
domain by default.
[0] https://review.openstack.org/#/c/561751/
Change-Id: Ie8f23cd61dad1860a41422264945c169f0488729
Signed-off-by: Tin Lam <tin@irrational.io>
This PS enables sharing of network namespaces with the host,
allowing for hitless upgrades of agents, and much simpler debugging.
It does however require mount propogation to be enabled in kubernetes
which is a alpha gated feature introduced in 1.8, and enabled by default
as a beta feature in 1.10.
Depends-On: I7a37f45ff6061b144c6f04233712cd84fccb3e83
Change-Id: I2a191a343fe637cbfd9e4af5277f9784af736dd1
This PS adds the ceph-clients to the config helper image, which
were previously missed and also bumps the version used.
Change-Id: I6b62990895619759794e55e694243182bf51f3ca
This PS updates rootwrap to account for distros where python2 is
the default entrypoint for python 2.7 as opposed to either python
or python2.7.
Change-Id: Ia67768985133242e0aef10bb6ce54028eabfe1cf
This updates the labels in the armada-lma manifest to match the
updated labels in the osh-infra charts
Change-Id: I2b8af2f2eaa5be6bf4e8f592b249b311d07ac5e5
This PS adds vhost management to rabbitmq jobs. It also prevents
sensitive information being displayed in the management job, and
removes the 'administrator' tag from service users.
Change-Id: Id337f763c5e4776bce7269676a8a2dc54dc2e5f8
This PS updates the RabbitMQ chart to name nodes via their hostnames
rather than IPs - allowing the cluster (and single nodes) to be
restarted without impact.
Additionally the rabbitmq managment interface is exposed and basic
helm tests have been added.
Change-Id: I84857d9f3697eaa8491aafaf6ee3b9d47dbf2191
Make appctl to search pidfile for exit command as pid 1 is not
always the target process in some cases. For example, pid 1 is
"pause" when pid namespace sharing is enabled in your k8s cluster.
Change-Id: I90e202245a9522fe53bea7e1f047061a0a280834
This patch set addresses the comments left in [0] by fixing the header
information in the python template file and adding logic to query the
domain specific logic.
[0]https://review.openstack.org/#/c/559191/
Change-Id: I656d7ac8158f9b40246ac739e4dc4fc88e1e43da
Signed-off-by: Tin Lam <tin@irrational.io>
