oslo_messaging.get_transport is currently deprecated. This change
moves the health prove to use get_notification_transport instead.
Change-Id: Iea7c914b41dec70b36ebe93fa8ce91e00894f50e
1. Log specific compute services failing rabbitMQ socket tests in nova
health probe
2. Log specific compute services failing Database socket tests in nova
health probe
3. Make log level configurable for nova and neutron health probes
Change-Id: I5e5d909d598af734596eb1732ae42808c1f6cd12
Glance registry was deprecated in Queens and removed in Stein.
This change removes glance-registry settings and templates
from the glance chart. Also removed the overrides from older
releases that are no longer actively supported and tested.
Change-Id: I704d844b9ab96daa73ec42e29cded31fbbe3f720
We currently run the TLS job in both check and gating. The TLS job
does not reliably pass however due to resource constraints so
having it run on each check results in quite a few rechecks.
This change moves the TLS job from check to experimental to avoid
having to perform these rechecks while having the ability to
run the job on demand when needed.
Change-Id: Ia44354066cc22c936de7dbab4c56b18527cfaa85
The development scripts are currently pointing to the old helm v2
minikube scripts and as a result, they do not work properly. This
change points them to use the correct up-to-date scripts and is
part of the effort to update and cleanup the deployment scripts
for openstack-helm.
Change-Id: I4797eace5f9f625de886c7abe1111222da2e92f9
All ssh configurations for the nova-compute pods
are now done by _ssh-init.sh.tpl . This patch removes
the ssh-config that is not needed anymore.
Signed-off-by: Hugo Brito <hugo.brito@windriver.com>
Change-Id: Ib1b24466678a0df28a3ce7ba4d3fe94bfb169702
This reverts commit 73531436e9.
Reason for revert: When the keys are rotated, the links become
broken and keystone only uses the 0 key.
Change-Id: Iffc4ab5d659b01babe7b4f9ee35b0a5789dac3ec
This change adds the minimum version of tls1.2 to not allow insecure
older tls versions to be allowed.
Change-Id: I880ac1caf31d2a26ca78389d5f96b07cf42b61ac
This fixes the file name that was modified in
the mentioned version.
Signed-off-by: Hugo Brito <hugo.brito@windriver.com>
Change-Id: Ib43e8a34173ef397ba7e2c29cc242a340c585232
The current bandit job appears to be failing due to a dependency
on setuptools. This change adds in a manual install for setuptools
when running the bandit job.
Change-Id: I6d0f5987c4f1a5fe7cfeed3eddb6d21c3040ebb0
This change reduces the amount of scripts used to deploy memcache
down to one by removing a duplicate and pointing the symlink
to the component script.
Change-Id: Ia127666cf89c8823ffb3ba2b5ebe7d62afa5f82b
On _ssh-init.sh.tpl, despite one change the runAsUser for the
nova-compute container on the securityContext, the ssh keys are always
being copied into the 'nova' user's folder. This change fixes it by
getting the correct user defined on the securityContext and copying the
keys to its correct folder.
Signed-off-by: Thiago Brito <thiago.brito@windriver.com>
Change-Id: Ia7883dc4626a295892eb4637ef717b0b1725ac89
masakari hostmonitors needs to run the privsep-helper as root. As masakari monitors runs as masakari-monitors users, sudoers file is added so that privsep-helper can be run as root user without using password.
Change-Id: I3501d8913f4b8b0bf9d7e03c8d411137d9c25a8c
Keystone has default policy defined in code, this change
removes the outdated values set in values.yaml in order to fall
back onto the in code values for policy.
Change-Id: If27eb0aa312b52c6fddd3811f10bc6207c7dfe27
This change cleans up several redundant values and updates several
openstack release references to wallaby.
Change-Id: I547408a81c73b6b3db147582def6e8527e75a5c3
The deployment scripts for glance have leftover value settings
from older openstack releases that are no longer supported by
OSH. This change removes those random override values and has
them fallback to the get-values-overrides script.
Change-Id: If348d8be9748c281be27bdf5e8ac37d240d72636
When using Barbican with a large number of clusters, this option can
allow Magnum to cache the certificates locally to avoid hitting
the API excessively. It is enabled out of the box however since
we don't have that folder, it is not working.
Change-Id: I63cb35798b82460f7addd4ec719c157e2c1c4fd9
At the moment, the Cinder usage audit runs every 5 minutes which
is excessive and causes load on the system. Also, it defaults to
auditing an entire month which can take ages for large systems.
This patch makes it run sanely at the 5th minute of ever hour and
also runs the audit for the past hour only.
Change-Id: I59d1230fa4d33a2cf0364ade1a710e65ef449057
Signed-off-by: Mohammed Naser <mnaser@vexxhost.com>
