Commit Graph

3497 Commits

Author SHA1 Message Date
wu.shiming
aac748ebd2 Dep's should be restricted by tox-constraints
Tox trying to install latest versions for building docs which may
not be supported by stable and lower branches, so should be
restricted by respective version's tox-constraints.txt

Change-Id: I92b67aa48834c00ad175a311744c36542692f292
2020-11-17 16:21:34 +08:00
Andrii Ostapenko
42712e1d36 Pass ovs agent config to dhcp agent
Since metadata server is accessed via dhcp namespace, dhcp relies on
conf.OVS.datapath_type for [0] logic to disable checksum offloading
that is not supported with ovs-dpdk, making metadata server not available.

[0] https://opendev.org/openstack/neutron/src/branch/stable/train/neutron/agent/linux/interface.py#L444-L446

Change-Id: I382af9d9e83b39fd9a616351e7cd5a752a603e77
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-10-30 15:21:34 -05:00
KHIYANI, RAHUL (rk0850)
32c72a08ea Update neutron to use Nginx apparmor profile
neutron-rpc-server container was removed and nginx container
was added here in this commit https://review.opendev.org/#/c/758919/4

Change-Id: Ie7b3a23ea8d7a5d3b1788bce1c1419fe1f627b75
2020-10-23 10:18:10 -05:00
Zuul
d6c649db59 Merge "[keystone] Fix fernet secret reset" 2020-10-22 06:15:27 +00:00
Zuul
efd37ad882 Merge "fix(neutron): fixes tls issue" 2020-10-21 20:56:55 +00:00
Mohammed Naser
f5a757b106 [keystone] Fix fernet secret reset
This patch makes the fernet and credential secret something that gets
created only once when the deployment is first done, as when using Helm,
it's possible that it overrides it's values with an empty secret in the
runs afterwards.

By making it a hook, it will instead create it and leave an owner
reference in Helm 3 to delete it later if the release is deleted.  It
will not manage it afterwards as well.

Change-Id: I7c1c97f38877e0e54bea7fc09b37dd6f77c9dc8a
2020-10-21 16:12:56 -04:00
Tin Lam
6895a5ba7a fix(neutron): fixes tls issue
Updated neutron to use an Nginx sidecar to terminate internal TLS rather
than using Apache with a separate RPC servers. Multiple RPC servers (in
sidecar) causes communication issues with RabbitMQ causing expected
errors.

Change-Id: Iaa6d3d64b730a54b1b85a338517bcb5be1842bda
Signed-off-by: Tin Lam <tin@irrational.io>
2020-10-21 11:02:57 -05:00
Gage Hugo
fe53b5e559 Add blank access_rules file
When starting the keystone-api pod, the service checks for a
access_rules file for application credentials during startup.
If the file does not exist, keystone emits a warning saying the
file is not found:

WARNING keystone.access_rules_config.backends.json [-] No config
file found for access rules, application credential access rules
will be unavailable.: FileNotFoundError: [Errno 2] No such file
or directory: '/etc/keystone/access_rules.json'

This change adds in a blank access_rules.json file to the
keystone etc directory in order to surpress this message.

Change-Id: I63ac153cc91ac45b3fd223f8a54b933b5cbffac4
2020-10-15 21:13:34 +00:00
Zuul
0699a2c162 Merge "[Cinder] Updates for external ceph backend" 2020-10-08 20:30:53 +00:00
Zuul
f0bb7d294c Merge "[HEAT] Remove tls override for clients_heat" 2020-10-08 17:25:33 +00:00
Huang, Sophie (sh879n)
085a0dd1a9 [Cinder] Updates for external ceph backend
Example override yaml file is added to indicate how to
override the manifest for configure an additional externally
managed Ceph Cinder backend.

In ceph.conf, either "mon_host" or "mon host" can be used for
the same parameter. In order not to force the user to use it one
way or the other, "mon_host" is removed from default setting.

Change-Id: I179567d77196ab2fb82d7a78e3a08efb966ed68c
2020-10-08 16:44:17 +00:00
Zuul
91fdbcdf50 Merge "Use proper default placement image" 2020-10-08 04:39:16 +00:00
Zuul
725b5b8607 Merge "docs(typo): fixes misspelling and spaces" 2020-10-07 21:16:15 +00:00
Haider, Nafiz (nh532m)
68f0791f56 [HEAT] Remove tls override for clients_heat
Enable public endpoint for Heat Client for WaitCondition Functionality
by removing tls override for clients_heat section in heat.conf

Change-Id: I94e339a01e6dd4f82d4348805f02676190082a5d
2020-10-07 21:04:32 +00:00
Andrii Ostapenko
b50ea497b5 Use proper default placement image
Change-Id: Ia7404d29fd7353b75550e25859f3aa1897989671
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-10-05 19:23:36 +00:00
Zuul
cb7d30fadf Merge "[cinder] Support service tokens" 2020-10-05 17:46:21 +00:00
Hemachandra Reddy
766ce51ba9 Establish Nova/Placement dependencies
When a placement service endpoint is changed, nova-compute does not
refresh its cache and continue send requests to the old one:
https://bugs.launchpad.net/charm-nova-compute/+bug/1826382

Also, in Train release, nova services expect placement user be present
in keystone in advance. Without the dependency, the pod starts crash looping.

Change-Id: I6b1a70ec859805794bac2689b04f7eca47ad61b3
2020-09-30 16:41:54 +00:00
Tin Lam
653d082d2c docs(typo): fixes misspelling and spaces
This patch set fixes a small misspelling and spaces in docs.

Change-Id: I8d86c86ffa1766d533a79c9e98809f217d0c4eed
Signed-off-by: Tin Lam <tin@irrational.io>
2020-09-27 10:13:57 +00:00
okozachenko
74b119db35 Add nova-compute-ssh
Change-Id: Ia555bb69182441d5f17040504efc7d1d524e59ec
2020-09-25 17:39:05 +03:00
Michael Polenchuk
73b9629ea2 [cinder] Support service tokens
Bring in option to be able to create and send service
tokens to prevent long-running job failures (default is OFF).

Change-Id: I5e5707001687e464386696b9c8d80ad8b2977e97
2020-09-25 15:05:35 +04:00
Andrii Ostapenko
20b6b9a236 Change helm-toolkit dependency version to ">= 0.1.0"
Since we introduced chart version check in gates, requirements are not
satisfied with strict check of 0.1.0

Change-Id: If537f69dec7e3360f6bffcc4424f10c248919ece
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-24 12:20:13 -05:00
Zuul
b354f4049c Merge "[Cinder] Configuration for external ceph backend" 2020-09-18 15:54:56 +00:00
Zuul
c8d85cc5e2 Merge "Implement missing security context for placement container" 2020-09-17 19:38:42 +00:00
Huang, Sophie (sh879n)
be690aa5a3 [Cinder] Configuration for external ceph backend
In this patchset, comfigmap of ceph.conf and secret of
cinder user keyring is created for externally managed ceph
Cinder backend.

Change-Id: Ie76bf207a7d42bd70a6be2648e060122f7daf5ad
2020-09-17 17:49:40 +00:00
PrateekDodda
22c1c5310c Implement missing security context for placement container
This change adds security context template at pod/container level

Change-Id: I47e1076a33deb5493ec5562466d00f2bfa62ae0a
2020-09-17 11:13:26 -05:00
Zuul
28669f8854 Merge "Sync logging values with upstream repos" 2020-09-17 04:08:40 +00:00
Zuul
ca48e44974 Merge "Optimize tls job to reduce build time" 2020-09-17 02:12:29 +00:00
Zuul
239d8ddf06 Merge "Add chart-testing linter" 2020-09-17 02:12:27 +00:00
Mohammed Naser
89969ade3a Add chart-testing linter
Added chart lint in zuul CI to enhance the stability for charts.
Fixed some lint errors in the current charts.

Change-Id: I7e4b191fb9e355ab5d5a233e8ed121346519df62
2020-09-16 21:12:17 +03:00
okozachenko
b0c4f7f593 Upgrade train jobs to ussuri
I am gonna use openstack-helm images to run the latest
openstack, ussuri on k8s and so added ussuri zuul ci.
As the first stage, only added for ones which has train
already.

Change-Id: Icd554a0d21f55cd074d1e5c35e1de25e02223cee
2020-09-15 22:47:33 +03:00
okozachenko
a8fc28696d Sync logging values with upstream repos
Some OSH charts have diffferent values for logger_root
handler from upsgream repo config defaul values.
Exactly, logger_root handler values.
This leads double logging finally.
To fix this, set logger_root as null like upstream repos.

Change-Id: I20e4f48efe29ae59c56f74e0ed9a4085283de6ad
2020-09-15 19:15:05 +03:00
Zuul
0abcd93fd9 Merge "Do not pass extra config files to neutron agents" 2020-09-14 22:06:07 +00:00
Zuul
40eb1bd706 Merge "neutron: fix default value for tungsten fabric" 2020-09-14 22:06:05 +00:00
Zuul
ae4fb4807c Merge "Add force cron jobs test run" 2020-09-14 18:24:04 +00:00
Mohammed Naser
0ff2beee30 neutron: fix default value for tungsten fabric
The lack of quotes means if it defaults to nothing, Kubernetes is not
happy because it is trying to set a nil value instead of an empty
string.

Change-Id: I7af08b93a4df92acd9d428266aaa7922a66cf599
2020-09-11 18:48:03 -04:00
Zuul
f63bc1c14d Merge "Move tls job to gate pipeline" 2020-09-11 04:15:43 +00:00
Zuul
028aae2a24 Merge "[Cinder] Support for external ceph backend" 2020-09-11 00:28:34 +00:00
Andrii Ostapenko
5f4a385add Optimize tls job to reduce build time
Also run cron job test in parallel with 900-use-it.sh

Change-Id: I79ba1f3d15b3788fc9271d7b0029cc7989055728
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-10 22:15:46 +00:00
Andrii Ostapenko
25a02b797f Add force cron jobs test run
Change-Id: Iba1045e8b8a992c77449c77a16d410589b7778bc
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-10 17:15:26 -05:00
Andrii Ostapenko
4cd0626fb5 Move tls job to gate pipeline
Running it in gates only to at least avoid dramatically impacting
feedback time for check pipeline.

Change-Id: Ic08714615d0c1b1cecc67fa1cd690a63a8a7c5c2
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-10 15:59:51 +00:00
Andrii Ostapenko
e5d600fdee [tls] Add missing mysql certs to heat-purge-deleted cj
Change-Id: Id434ddcb28f10a5d95550236a892676626c14123
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-10 02:04:51 +00:00
Zuul
b95cd0108f Merge "Imported Translations from Zanata" 2020-09-10 01:52:53 +00:00
PrateekDodda
16b2c8dcc4 Implement missing security context for nginx container
This change adds security context template at pod/container level

Change-Id: I2fbff7b3325f4b6dd98d9299b0daf9e230ece9ae
2020-09-09 19:38:50 +00:00
OpenStack Proposal Bot
e66cf73814 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I8dc7c10a06f803ea80d52f8a7519f8f0faf908d0
2020-09-09 08:18:48 +00:00
diwakar thyagaraj
56772fdbaa [FIX] Remove nginx Container name for apparmor in Glance-registry
Ref PS : https://review.opendev.org/#/c/749985/

Change-Id: I52e42500b2573324cec2b6d43d67cda39dad8a31
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-09-08 11:00:57 +00:00
OpenStack Proposal Bot
38501f839c Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I39a853b3ffda003b59dd7d4b0700f40b3b048ab3
2020-09-07 08:10:24 +00:00
Zuul
81a2a65de5 Merge "Glance: Remove nginx side car from registery" 2020-09-04 18:50:50 +00:00
Gupta, Sangeet (sg774j)
7b52b915d7 Glance: Remove nginx side car from registery
Glance-registry does not need nginx sidecar

Change-Id: I3fbc414821f16aeaad4ea01039eb832496480348
2020-09-04 15:09:56 +00:00
Chinasubbareddy Mallavarapu
054affa290 [Cinder] Support for external ceph backend
This is to add support for external ceph cluster as second backend
for cinder.

prerequisite:
  - create ceph.conf for external ceph cluster as configmap
  - create cinder2 user and keyring on external ceph cluster
  - create keyring of user cinder2 as a secret

now point configmap and secret created as prerequisite under
values.ceph_client.external_ceph section

also we need to add second backend under values.conf.backends section
with all the details of external ceph cluster.

Change-Id: I8df9f1da7208304f479dbb70b19af97fb01cd38f
2020-09-03 23:58:10 -05:00
PrateekDodda
c57391366a Implement missing security context template for deployment server
This change adds security context template at pod/container level

Change-Id: I2180cdf934ce21bc5ae7148f2830d1a8683e82db
2020-09-03 14:22:22 +00:00