For simplification of deployment and maintenance, reduce the number
of scripts that do usually the same.
The important part is that when user wants to do multinode deployment,
OSH_DEPLOY_MULTINODE variable must be set before executing the script.
For now multinone script still stays, only to invoke the common one,
but in future it would be better to remove multinode scripts completely
and let user call the common script with the right argument.
Change-Id: I4dca159827581cbe8d6ded3be85e732acbf60ed1
This change adds two network policy zuul checks, one for the compute-kit,
and one for cinder/ceph, to test network policy for each OpenStack
service. These checks will be non-voting initially.
The network policy rules for each service will initially allow all
traffic. These ingress/egress rules will be defined in future changes
to only explicitly allow traffic between services that are explicitly
allowed to communicate, other traffic will be denied.
Depends-On: https://review.opendev.org/#/c/685130/
Change-Id: Ide2998ebb2af2832f24ca7abc398a82e4a6d70e3
In the 900-use-it.sh script, the user can define the gateway
(OSH_BR_EX_ADDR) and the subnet of the external network
(OSH_EXT_SUBNET). However, in the script that configures the gateway
correctly in br-ex, these values are hardcoded.
This patch allows the user to modify them by a env. variable, same as
the 900-use-it.sh script does
Change-Id: I25124024ebb72ff5fea8903fb393b71a052d0f93
Signed-off-by: Manuel Buil <mbuil@suse.com>
This PS updates the charts to use the htk function recently introduced
to allow oslo.messaging clients ans servers to directly hit their
backends rather than using either DNS or K8S svc based routing.
Depends-On: I5150a64bd29fa062e30496c1f2127de138322863
Change-Id: I458b4313c57fc50c8181cedeca9919670487926a
Signed-off-by: Pete Birley <pete@port.direct>
This adds a helm test for Horizon, the helm test
runs a selenium webdriver check to verify the dashboard
is up
Change-Id: I3616c05596b2bd94931c39fb774333bf65453d52
Signed-off-by: Steve Wilkerson <sw5822@att.com>
This change removes the network policy overrides from the default
developer deployment scripts now that there is a set of
designated scripts that provide this functionality.
Change-Id: I788845e85314b3a8a9c860fbc77de536113781e0
Prometheus mysql exporter is failing because of missing label in
network policy for mysql. This is to add the label to the override
yaml
Change-Id: Ic5e2613303f04d2bfab1229d3818a2fc9b4263bc
Signed-off-by: Sreejith Punnapuzha <Sreejith.Punnapuzha@outlook.com>
This PS allows rabbit compoents, eg other rabbit servers, tests, and jobs
to connect to rabbit.
Change-Id: I61cca52072940e31c093e4895a1c6406b15456bf
Signed-off-by: Pete Birley <pete@port.direct>
1. Chart name : change from "ceph" to "ceph-rgw"
2. Postfix of environment variable's name
: change from "OPENSTACK" to "CEPH"
Change-Id: I03a4e12457cec1811b6fa03367811f74e4bb8b83
Signed-off-by: Deokjin Kim <deokjin81.kim@samsung.com>
This PS is enable the Egress policies
and enforces them in Openstack-helm.
Depends-On: Icbe2a18c98dba795d15398dcdcac64228f6a7b4c
Change-Id: I6ef3cd157749fd562acb2f89ad44e63be4f7e975
This patch set updates the gate to by default uses network policy
for all components and enforces them in Openstack-helm.
Change-Id: I70c90b5808075797f02670f21481a4f968205325
Depends-On: I78e87ef3276e948ae4dd2eb462b4b8012251c8c8
Co-Authored-By: Mike Pham <tp6510@att.com>
Signed-off-by: Tin Lam <tin@irrational.io>
This patch set moves the default deployment to ocata from newton.
Newton zuul job is now moved into its separate job.
Change-Id: Ic534c8ee02179f23c7855d93a4707e5a2fd77354
Signed-off-by: Tin Lam <tin@irrational.io>
This PS updates the use it script to be more flexible
Change-Id: I7c1ee3308a6e7605fc6908dfa7e9429c8a8a7a80
Signed-off-by: Pete Birley <pete@port.direct>
This updates the make command for the osh-infra charts in the
deployment scripts to account for the charts residing in
openstack-helm-infra instead of the openstack-helm working
directory
Change-Id: I9f492e586f69b0caf908366a9cae2b55da0d4cfc
This updates the make command for the openvswitch chart to account
for the chart residing in openstack-helm-infra instead of the
openstack-helm project directory
Change-Id: Ia8bd5ada3ecf4aa4c42b6b542c477e9013d87a3d
This moves the openvswitch chart to openstack-helm-infra as part of
the effort to move charts to their appropriate repositories
Depends-On: https://review.openstack.org/#/c/599723/
Change-Id: I248ad2dd24f4ab101839f05070f1f6f022f93715
Story: 2002204
Task: 21730
This updates the Make command used in the mariadb deployment
scripts to account for the chart residing in openstack-helm-infra
Change-Id: I4485cc425ea4c21eac71dc2f8fe625a5b5c89b96
This moves the mariadb chart to openstack-helm-infra as part of
the effort to move charts to the appropriate repositories
Depends-On: https://review.openstack.org/#/c/599651/
Change-Id: I9835da54aa4dd323b841f9605b688857ecf3a123
Story: 2002204
Task: 21725
This PS moves the RabbitMQ chart to OSH-Infra
Story: 2002204
Task: 585554
Depends-On: https://review.openstack.org/#/c/585746
Change-Id: Ia57e63bbfb7d4266d58711cfb5644ecad34e2280
Signed-off-by: Pete Birley <pete@port.direct>
This PS moves the ingress chart to OSH-Infra
Story: 2002204
Task: 21733
Depends-On: https://review.openstack.org/585550
Change-Id: Ie5b511def55dcd481eb291c6b309af61c66e0416
Signed-off-by: Pete Birley <pete@port.direct>
The ingress gate script displayed the `helm status` of the openstack
namespace ingress twice, rather than once for openstack and once
for ceph namespaces. This fixes.
Change-Id: I9637b44d2cfad45f4935242351ee9160e013364f
This PS updates the ceph chart to use the ingress controller for
the radosgw.
Change-Id: Ie0ff4d9dd91d8228170e0ed4f2793599132077a7
Signed-off-by: Pete Birley <pete@port.direct>
This PS updates the dnsmasq pod that runs in the gate to allow vm's
API access to only bind to br-ex, as otherwise it collides with other
DNS servers running in the gates.
Change-Id: I85bb3043d56689ad8ee2996df61d23969a535de1
This ps removes ipcalc from the required packages for the developer
environment.
Change-Id: Iaa56150663605f9a880007d140cf03ec739d5371
Signed-off-by: Pete Birley <pete@port.direct>
This PS enables API access from VMs in the gate and development env
Change-Id: I0639e43dc88cbe8bf4cfe102320e2a8bf9025073
Depends-On: I32c8e752675b037610f77c8baee1c1636d5a032e
Signed-off-by: Pete Birley <pete@port.direct>
This PS stops pulling the charts default images, as the make file
target cannot target over-rides - resulting in longer gate runs with
twice as many images pulled than required in some cases.
Change-Id: I2a49ab0e8034b0aadc2c06cc347f7d76ef71784a
This PS updates the heat templates, reducing the size of the
launched vm. In addition cinder is enabled in the ceph dev
pipeline, this is possible due to the resources no longer
consumed by the test vm.
Change-Id: I9efe6fe643c636b660dd54b60dfe7c8785d7fec2
This PS allows the neutron and nova charts to dynamicly adapt to
various backends.
Depends-On: I0ec13f45fd4561fec59d08b08eb78390a3866156
Change-Id: I1891af4b0e49237e229ff5e61e907dc3e413cf87
This PS moves the default image in OSH for most services to use LOCI
and also provides a Kolla gate for newton openstack.
Change-Id: Ice6cb9f89bc3ce6e8280e580d215aedda9e71904
This PS extends the host targeting utility to create daemonsets
for storage focused charts. This PS supports both block device
and bind mount backed journals and OSDs.
Change-Id: Id90b197ba3e4f383eea7ce6137ed77b3ef4e5625
- corrected the path of "socket" volume, which is used for sharing
metadata proxy unix socket among the agents
- and give neutron user permission to write to the dir
- set the default nova_metadata_ip to full hostname of metadata
so that it could be accessed properly via ingress
- removed unnecessary configurations from values
Change-Id: I4d20dc670fecebd9799851d659c5f42edb4821ac
Closes-Bug:1745370
This PS tidies the Ceph scripts. In addition, it allows the
chart to be removed and re-deployed without data loss,
and improves robustness to rebooting nodes and/or
the cluster.
Change-Id: If5a65d0dcca1d049b177d9bffb654a13d56c3823
