Commit Graph

112 Commits

Author SHA1 Message Date
Sean Eagan
97ac197a6e Move to v0.3.1 of kubernetes-entrypoint
Move to v0.3.1 of kubernetes-entrypoint which has 2
breaking changes to pod dependencies, and also adds support for
depending on jobs via labels.

Change-Id: I49d2cea11fbe5c5919ae22a020b877ebbb285992
2018-04-25 12:45:50 -05:00
Pete Birley
40a45b9751 RabbitMQ: Add vHost management and improve security
This PS adds vhost management to rabbitmq jobs. It also prevents
sensitive information being displayed in the management job, and
removes the 'administrator' tag from service users.

Change-Id: Id337f763c5e4776bce7269676a8a2dc54dc2e5f8
2018-04-19 08:26:45 -05:00
Pete Birley
0b5ea314c7 Helm-Toolkit: Reduce delta between OSH and OSH-Infra to image repo
This PS reduces the delta between OSH and OSH-Infra helm toolkits
to simply the image repo management functions.

Change-Id: I62a169cff39a96f98ec2b5664d483db26c771e4c
2018-03-31 08:43:05 -05:00
portdirect
63f883b57c Helm-Toolkit: Reduce delta between OSH and OSH-Infra
This PS reduces the delta between OSH and OSH-Infra helm toolkits.

Change-Id: I5026b0238555513f8415a864adf4e91e81e3fbd8
2018-03-30 16:36:49 -04:00
Zuul
02d2367fcf Merge "Ingress: Give arbitary fqdns a different name from namespaced rules" 2018-03-30 05:20:19 +00:00
Tin Lam
866d858c6f Update heat bootstrap scripts
This patch set adds in two roles for heat: heat_stack_owner
and heat_stack_user as outlined in the Newton [0] and Ocata [1],
as well as assigning roles.

[0] https://docs.openstack.org/project-install-guide/orchestration/newton/install-ubuntu.html
[1] https://docs.openstack.org/project-install-guide/orchestration/ocata/install-ubuntu.html

Change-Id: I8510ae114448cc1985c11e9b337b9697a379a920
Signed-off-by: Tin Lam <tin@irrational.io>
Co-Authored-By: Pete Birley <pete@port.direct>
2018-03-29 20:52:54 +00:00
portdirect
ff9f84d900 Horizon: Move all config to be directly values driven.
This PS moves all the config files to be directly values driven,
both simplifying over-ride and allowing configs to be targeted
to pods in future work.

Change-Id: I7e16585c9ef49275327d19a48f00bad192dc4923
2018-03-28 13:21:02 -04:00
portdirect
34175d43af Ingress: Give arbitary fqdns a different name from namespaced rules
This PS gives ingress rules attached to the cluster wide ingress
controller the suffix `-fqdn` to allow them to be used.

Change-Id: I7de85e349fb609b8380070030579b9b4767e72d1
2018-03-28 10:27:21 -04:00
Pete Birley
6971143048 Ingress: support arbitary hostnames.
This PS allows arbitary hostnames to be used for public endpoints,
provided the resolve externally to the ingress controllers.

Change-Id: I44411687f756968d00178d487af66c2393e6bde0
2018-03-21 09:39:55 -05:00
Sean Eagan
6d0a0fc0c3 Use pod dependencies in nova chart
Changes nova chart to depend on neutron pod labels instead of daemonsets
in order to prepare for utilizing daemonset overrides in neutron chart,
Utilizes a new feature of kubernetes-entrypoint, pod dependencies, added
to kubernetes-entrypoint in v0.3.0.

Change-Id: Ic79ddc1b7f477195c5b3dfd630df4d78d7589030
2018-03-16 09:23:34 -05:00
Zuul
d50f2d1fa4 Merge "Add LDAP-backed domain gate" 2018-03-15 15:17:27 +00:00
Tin Lam
93757adee7 Add LDAP-backed domain gate
This patch set adds a nv-gating with an OpenLDAP server with some sample
data loaded for development or testing use using a bootstrap job.
This patch set also adds confirming authentication works using  domain-
specific configuration for keystone.

Consolidated change from: https://review.openstack.org/#/c/552976/
Co-Authored-By: Gage Hugo <gagehugo@gmail.com>

Change-Id: I1aeccffc018d0fcefc8e2b15a4ac6b83cb2be8b6
Signed-off-by: Tin Lam <tin@irrational.io>
2018-03-14 23:25:54 -05:00
Pete Birley
86be88e1d9 Neutron: SR-IOV support
This PS adds SR-IOV Support to OSH.

Change-Id: Ia744c6d7c4a45be7728bba3213b50f1246b897db
2018-03-14 18:13:13 -05:00
Zuul
32a468178b Merge "Ingress controller service: consolidate to helm-toolkit" 2018-03-14 02:14:22 +00:00
Pete Birley
507600e898 Ingress controller service: consolidate to helm-toolkit
This PS consolidates the Ingress controller service, that is used
to resolve internal requests to public endpoints correctly, to
helm-toolkit.

Change-Id: If7c7deca1b8289a32709f7dc7c936883469aadfe
2018-03-12 13:48:39 +00:00
Zuul
4f0aeb619d Merge "DB-Drop-Jobs: consolidate to helm-toolkit" 2018-03-10 20:10:23 +00:00
Zuul
b06a371cf6 Merge "remove trailing ws" 2018-03-10 12:39:32 +00:00
Pete Birley
6e4bcebcf5 DB-Drop-Jobs: consolidate to helm-toolkit
This PS consolidates the DB-Drop Job to helm-toolkit.

Change-Id: Ia2b035d730bf612086a9fd9b5d14aba494f56dc7
2018-03-09 14:25:15 +00:00
Renis
1ecc905b65 Rabbitmq Credential Management
- This PS implements job to create new user
for each chart

Change-Id: I7335ba4ad4bc9f70871100dbd9e6f030049abe07
2018-02-26 17:44:44 -08:00
Pete Birley
340a9ec434 Networking: dynamic backend support
This PS allows the neutron and nova charts to dynamicly adapt to
various backends.

Depends-On: I0ec13f45fd4561fec59d08b08eb78390a3866156

Change-Id: I1891af4b0e49237e229ff5e61e907dc3e413cf87
2018-02-26 13:16:25 +00:00
Pete Birley
f57972b5b6 dependencies: move static dependencies under a 'static' key
This PS moves static dependencies under a 'static' key to allow
expansion to cover dynamic dependencies.

Change-Id: I38990b93aa79fa1f70af6f2c78e5e5c61c63f32c
2018-02-23 12:31:15 -08:00
Pete Birley
49aacc2030 Ingress rules: consolidate to helm-toolkit
This PS consolidates ingress rules to helm-toolkit.

Change-Id: I38a4de939e1ec65fed1630a53787d363f2ec78f6
2018-02-21 10:21:16 -08:00
Zuul
e4313c86c7 Merge "remove unnecessary calls to quote" 2018-02-20 14:53:21 +00:00
portdirect
c7e2eb9e25 Bootstrap jobs: move template to helm toolkit
This PS moves the templates for bootstrap jobs to helm-toolkit.

Change-Id: I0fc0f7722cfc87b00e26510dee7ba79d2139a171
2018-02-19 22:53:34 -05:00
Chris Wedgwood
4f6a9983f5 remove unnecessary calls to quote
Change-Id: I1099c3f56b1d81b97033a8653d6bf1b9ea4d04e7
2018-02-19 18:55:46 +00:00
portdirect
eb943b63fb DB-Sync-Jobs: consolidate to helm-toolkit
This PS consolidates the DB-Sync Job to helm-toolkit.

Change-Id: I54d53468a437f6cacf6943ed3dec27089bf5f482
2018-02-18 21:08:24 -06:00
portdirect
897edb3202 DB-Init-Jobs: consolidate to helm-toolkit
This PS consolidates the DB-Init Job to helm-toolkit.

Change-Id: Ib92743d678de09a6fb4457e5415a098013952410
2018-02-17 22:47:58 +00:00
Zuul
12eebb5d1c Merge "Add deep merge utility to helm-toolkit" 2018-02-14 21:17:15 +00:00
Sean Eagan
a9e74b84fd Add deep merge utility to helm-toolkit
Adds "helm-toolkit.utils.merge" which is a replacement for the
upstream sprig "merge" function which didn't quite do what we
wanted, specifically it didn't merge slices, it just overrode
one with the other.

Change-Id: I6402ffe043c75eb3a63797ef1be5b56f35b0adc4
2018-02-14 08:48:26 -06:00
portdirect
8d30e6698e Helm-Toolkit: move keystone endpoint jobs to helm-toolkit
This PS moves the keystone endpoint jobs to be driven by
a helm-toolkit function providing greater consistency
to the charts in OSH, and reduced tech debt.

Change-Id: I06555171ce93a2b0a8798bc891a2990ea9626276
2018-02-07 19:51:41 -05:00
portdirect
914ffdbfe4 Helm-Toolkit: move keystone service jobs to helm-toolkit
This PS moves the keystone service jobs to be driven by
a helm-toolkit function providing greater consistency
to the charts in OSH, and reduced tech debt.

Change-Id: I36e012854473fcb942d62391d182ee6a8406bb72
2018-02-08 00:31:52 +00:00
portdirect
72792a49d4 Keystone: update user jobs to use defaults in dict keys
This PS updates the Keystone user job template to use default
values when not specified via the input dict.

Change-Id: I937e720ab3ab4ba70c33ea981d7693ebfd01c894
2018-02-07 11:03:17 -05:00
portdirect
f296acf647 Helm-Toolkit: move keystone user jobs to helm-toolkit
This PS moves the keystone user jobs to be driven by
a helm-toolkit function providing greater consistency
to the charts in OSH, and reduced tech debt.

Change-Id: Ic5eb172b0443f61b8ecab8b3a607c764fb145c75
2018-02-07 09:49:04 -05:00
Zuul
fb4fe70bf8 Merge "to_kv_list util handles value with slice/list type" 2018-02-06 04:24:51 +00:00
Chris Wedgwood
2304fe63fb remove trailing ws
Change-Id: Ida8e4a5d072f8dff635dfffd4336d697ab1d4753
2018-02-06 02:38:03 +00:00
Madhukar Nayakbomman
468e0815ac to_kv_list util handles value with slice/list type
Previously to_kv_list assumes that all values happen to be string type. In this
commit we are taking care of values which are also type list/slice. In future
commits we will have to take care of values which are also of type dicts

Change-Id: Ie670c91d9880638d04cadf2acc32e7aa0400ca2c
2018-01-28 20:52:36 -08:00
portdirect
4746de33f4 Helm-Test: remove user and tenant creation from test context
This PS removes the user managemnt from the rally driven helm tests
which allows LDAP and other read only sources being used to validate
service functionality, in addition to reducing false -ve results in
the Zuul gates.

Change-Id: I1cc0e99bf74d578648b3cd40eaf60c1804044d88
2018-01-29 02:40:22 +00:00
portdirect
dbb778a784 HostSpecific Over-rides: Add Ceph OSD to host targetable config
This PS adds Ceph OSD's to the host specific over-rides, it also
simplifies the host-specific daemonset logic.

Change-Id: Icd5daf46f29a328e96273ac64ad761e30d933e9c
2018-01-22 09:26:56 -05:00
Steve Wilkerson
2332c6fb58 helm-toolkit prometheus service annotation clean up
This adds checks for the fields in the service annotations for
prometheus, similar to the pod annotations. It changes the
setting of annotations by ingesting a prometheus: key under a
top-level monitoring tree to allow for configuration of other
monitoring solutions aside from prometheus

Change-Id: Id05f235ae07407ea4dcd45bce3a26dd92293b116
2018-01-17 13:13:11 +00:00
portdirect
35dfb998f4 Ingress: Move to namespaced ingress controllers and edge VIP
This PS moves to namespace specific ingress controllers, and a
cluster wide ingress controller that acts as the external front
door to the cluster. The cluster ingress controller will also
be able to create a dummy interface that can be announced via the
OpenStack-Helm-Infra Calico chart.

The ability to exercise the edge VIP feature is currently only
demonstrated in the single node gate and guide, as it requires
additional configuration, or hardware to set up the routes in
a multinode env.

Change-Id: I8b823b93465f2e90aaabcca9ec9b783d34539e07
2018-01-15 01:23:45 -05:00
Steve Wilkerson
6116e84416 Remove unneeded context in prometheus service annotation
Removes an unused context declaration from the prometheus service
annotation template in helm-toolkit

Change-Id: I118b352d2b5a80fc43f27d7f3f154b61e5406f8c
2018-01-11 18:03:55 -06:00
Steve Wilkerson
2c436f1231 Add prometheus annotations to helm-toolkit
This adds the prometheus pod and service annotations to helm
toolkit, which allows for using prometheus's kubernetes service
discovery mechanisms for osh pods and service metrics as needed

Change-Id: I0e080d960553381014c4fd4f2bb6c83652241b0b
2018-01-11 11:58:50 -06:00
Zuul
a78e638897 Merge "Add support for node-level conf overrides" 2018-01-09 15:38:29 +00:00
Craig Anderson
b73bb03e5b Add support for node-level conf overrides
Add override functionality to helm-toolkit and enable in compute daemonset.

Change-Id: Ia85abbbea89c12d0b6f21ecf2413cd3ae7b9552e
2018-01-08 22:35:36 +00:00
portdirect
dade748dcf Libvirt: move configuration to be generated directly from values
This PS moves the configuration files used by libvirt to be
generated directly from the values, rather than being templated.

Change-Id: I8ab2783c9d1d5d815cc02eccafa21058ff3acead
2018-01-04 18:24:08 -05:00
Tin Lam
943a400b9a RBAC: Fix issue with inclusion of empty jobs or daemonsets
Currently, the rbac logic would allow for ``jobs`` or ``daemonsets``
if it is specified in the dependencies, even if they may just be empty
or null.  This patch set addresses this by checking the jobs or
daemonsets map in the value.yaml is non-empty before including it
in the Role.

This mirrors the fix in OSH-infra in [0].

[0] https://review.openstack.org/#/c/530337/1

Change-Id: I37e8d8c1a0d587410811c544e049bbafed73cba8
Signed-off-by: Tin Lam <tin@irrational.io>
2017-12-28 22:05:34 -06:00
portdirect
fa2620d54b RBAC for OSH
This PS applys RBAC rules to OSH, based off the work
done in https://review.openstack.org/#/c/526464/

Change-Id: I541b0ac1a3972566ef2b66571ae32744dab70c17
2017-12-26 10:24:19 -05:00
Vlad Naboichenko
090d2656cf Add congress chart
This chart provides a policy framework for the cloud.
It consist of 3 services. Api, policy engine, datasource.

helm install --name=congress local/congress --namespace=openstack

Change-Id: I5fabf91893bc006470469af397994b13fe86223b
2017-11-20 11:19:50 -08:00
Grzegorz Grasza (xek)
538e630774 Support services in different namespaces
Pass the service namespace to kubernetes-entrypoint in
order to support dependencies between namespaces.
Add documentation about endpoint/service namespaces.

Change-Id: I208c3240e9f2c8900323595f7b0e488bef5cb1fc
Implements: blueprint entrypoint-namespaces
2017-11-02 01:22:12 +00:00
intlabs
fe6107cf76 Images: Update values to allow simple parse of images being used
This PS updates the values file layout for images to allow simple
parsing of the images in use by charts, allowing them to be queried
and modified much more simply. By moving the image tags to a 'tags'
key, we can extend the options used simply to accomodate extra
options simply (eg prefixing the tag for use with an internal
registry) or pre-pulling the images to reduce chart deploy failure.

Change-Id: I9ec1dbb00d997ab6cb021bf0b698f7aae740e95d
2017-10-23 10:05:20 -05:00