Commit Graph

1157 Commits

Author SHA1 Message Date
Jenkins
ff94785f81 Merge "Remove some unused declarations" 2017-09-06 21:28:41 +00:00
Jenkins
15dc95754d Merge "Adding missing labels and mounts to heat-trusts job" 2017-09-06 18:55:55 +00:00
Jenkins
8618b3c541 Merge "Endpoint lookups: fix typo in overrides" 2017-09-06 18:55:09 +00:00
Jenkins
8a18f62685 Merge "Merge separate AIO docs into one" 2017-09-06 18:54:24 +00:00
Chris Wedgwood
0754f6f19a Remove some unused declarations
Change-Id: I10239c43c7dde2fe30a0ddbb290229c84b23e7a6
2017-09-06 16:55:18 +00:00
Pete Birley
b120667031 Endpoint lookups: fix typo in overrides
This PS fixes a typo in the endpoint lookup function and input.

Change-Id: I6ff6d68bf82e1e1f70438a7017f4e1a6df7f59a7
2017-09-06 11:15:54 -05:00
Jenkins
4976b398fa Merge "Configure RabbitMQ management port from values.yaml" 2017-09-05 22:29:18 +00:00
Jenkins
57a54ff1b9 Merge "Ingress: Update labels" 2017-09-05 22:25:10 +00:00
Pete Birley
f398d73c53 Ceph: Cleanup entrypoint scripts
This PS cleans up the entrypoint scripts to remove unrequired functions.

Change-Id: Ibc445e422c1ebad972de59b47955511d14dd6d3c
2017-09-05 16:34:02 -04:00
Jenkins
2ef73dfdf6 Merge "'affinity' constraints added in remaining services" 2017-09-05 15:06:56 +00:00
Artur Korzeniewski
ca05f7ac3c Neutron and OVS: add full name to ovs and lb daemonsets
Add neutron prefix to lb-agent and ovs-agent.
Rename ovs-db and ovs-vswitchd to openvswitch-db and openvswitch-vswitchd.

Change-Id: Iad69b0c00d17e59a9f0eb66003e4512ccaeab128
2017-09-04 13:58:59 +02:00
Mateusz Blaszkowski
e4f0690eb2 'affinity' constraints added in remaining services
Change-Id: I1ca654fbcc0301591e6b290d41fce1797ea2820a
Signed-off-by: Mateusz Blaszkowski <mateusz.blaszkowski@intel.com>
2017-09-04 05:56:19 -04:00
Mateusz Blaszkowski
6e2ae0b739 Adding missing labels and mounts to heat-trusts job
Change-Id: I19c85574f78d2c90019ad1f94cba45630c8f48de
Signed-off-by: Mateusz Blaszkowski <mateusz.blaszkowski@intel.com>
2017-09-04 04:38:09 -04:00
Pete Birley
d503d5b6bf Ingress: Update labels
This PS fixes some issues and inconsistencies with the way labels
were applied to the ingress controller.

Change-Id: I98a71e75836f4c4673502ae1f7f7e13a4d19bf95
2017-09-03 11:51:04 +00:00
Jenkins
198162a073 Merge "Fix some typos" 2017-09-03 04:47:48 +00:00
Jenkins
a505d7389f Merge "Remove spurious sys.exits" 2017-09-03 04:47:15 +00:00
Craig Anderson
701dd585c3 Merge separate AIO docs into one
Creation of one source of truth for kubeadm-aio docs.  The kubeadm-aio
README now links to developer all-in-one document.

Change-Id: I9e405036e50cfd5336e0e6ce901d5e5d6850fae4
Closes-Bug: #1711727
2017-09-01 17:05:31 +00:00
Jenkins
3ac70eb89d Merge "Set DNS policy for ceph-mon daemonset" 2017-09-01 14:35:50 +00:00
Grzegorz Grasza (xek)
80c6e725bc Remove spurious sys.exits
This removes sys.exits which are never called and moves one try-except
block to the lines in which the exception is actually raised.

Change-Id: Idb5bde84136208dc39d877b4b66b39a433d85375
2017-09-01 10:43:04 +00:00
Grzegorz Grasza (xek)
b21b874051 Configure RabbitMQ management port from values.yaml
Change-Id: I6f3ca1782fc9153220f63cf775993b6ff6aee9ba
2017-09-01 10:28:05 +00:00
Jenkins
53c5679b17 Merge "Wait for libvirtd socket to be available" 2017-08-31 21:42:01 +00:00
Pete Birley
bede94c835 Endpoint lookup namespace and fqdn support
This PS adds namespace and fqdn support to endpoint lookup functions,
it also permits over-riding of the puplic endpoint for ingress.

Change-Id: Ib61c5c00a214d75fe85fbffe9080c2ae88bd8cb9
2017-08-31 19:06:33 +00:00
Chris Wedgwood
bfd9cb8655 Wait for libvirtd socket to be available
There is a race where the libvirtd.pid file appears but the socket has
not (yet) been created; this adds a timeout-loop waiting specifically
for the socket.

Change-Id: Ib2ede3b8d5c49bc650bf8a64cbffc03444bb2dd0
2017-08-31 17:24:47 +00:00
Jenkins
cb8efbd954 Merge "Prevent kubeadm-aio being run as root." 2017-08-31 03:32:27 +00:00
Craig Anderson
862960dac3 Prevent kubeadm-aio being run as root.
Prevent duplicate docker mounts by disallowing root in kubeadm-aio.

Change-Id: I3e743a0d82e03b9d2ffb3af685c27dd15415ab81
Closes-Bug: #1711744
2017-08-30 10:19:11 -07:00
Pete Birley
37b099e320 Neutron: Move OpenVSwitch into its own chart
This PS moves OpenVSwitch into its own chart - decoupling it from neutron,
both making it easier to deploy and use seperately and permitting
use of other network backends.

Partially implements: blueprint split-nova-and-neutron-infra

Change-Id: Ifd637136b950ddf1ba1c26ce76c9bbdeafc232c3
2017-08-30 16:01:29 +00:00
Pete Birley
0252ca776e Nova: Move Libvirt into its own chart
This PS moves libvirt into its own chart - decoupling it from nova,
both making it easier to deploy and use seperately and permitting
use of other compute backends.

Partially implements: blueprint split-nova-and-neutron-infra

Change-Id: I06237157244c3cdb5503eafa01229d061b1614f0
2017-08-29 23:50:08 -05:00
Jenkins
84eecc457e Merge "Horizon: add policy override and make chart image agnostic" 2017-08-30 01:56:43 +00:00
Pete Birley
3469b22d1c Horizon: add policy override and make chart image agnostic
This PS makes horizon image agnostic and also use PyMySQL for the
database backend, in addition to making the policy fully configurable.

Change-Id: I95f269139539a9397c3cc05327f02dd28ee4917c
2017-08-29 21:59:05 +00:00
Jenkins
0e4fe36849 Merge "Ingress: Disable resource constraints by default" 2017-08-29 15:13:19 +00:00
Jenkins
38cc836bab Merge "Neutron: add linuxbridge daemonset and config script" 2017-08-29 13:43:21 +00:00
Pete Birley
fb8313e0aa Ingress: Disable resource constraints by default
This ps disables the resouce constraints upon the ingress controller
which was accently left on by default.

Change-Id: I573a4c52f727570aafcd4a1eb16c5c13131323a8
2017-08-29 13:35:00 +00:00
Jenkins
774c34176d Merge "Security: Add Pod user to missed services" 2017-08-29 11:25:46 +00:00
Artur Korzeniewski
aaedb4a150 Neutron: add linuxbridge daemonset and config script
Adding daemonset for Linux bridge. Using node selector
"linuxbridge enabled".

network.backend added in neutron/values.yaml to support scenario for
different SDNs using the same networking software, like OVS is used
for reference Neutron L2 agent, ODL, OVN and SONA. The other option for
network.backend can be linuxbridge and calico.
network.backend impacts configuration of DHCP, L3 and metadata agents.
Those agents are dependent on ovsdb_connection flag (officially it is
placed in openvswitch_agent.ini file).

Added daemonset_lb_agent flag in manifests section. Currently
OVS and LinuxBridge L2 agents can be turned on/off to be deployed.
OVS L2 agent and OVS as a network virtualization SW can be deployed
independently.

Removed conf.neutron.default.neutron.interface_driver, since it was not
used anywhere.

Marked places in neutron/values.yaml where changes are needed in order
to use linuxbridge for:
- neutron.conf interface_driver
- ML2 mechanism driver
- dhcp and l3 agents interface_driver

Added example of neutron values overrides in:
tools/overrides/mvp/neutron-linuxbridge.yaml

Change-Id: I7cdcfaa9a73af392a0d45f7df29b7b3ae3cc4c76
Implements: blueprint support-linux-bridge-on-neutron
2017-08-29 11:51:42 +02:00
Pete Birley
ceb30e8cc7 Jobs: Consoloate on heat-engine for admin jobs where possible.
This ps moves to use a container sultaible for use as the heat engine
for all possible admin jobs - it is lighter than the kolla-toolbox image
and makes it easy to swap out to other image sets. This is as the heat
engine container should contain the openstack client (with all required
libs for the cloud) and the oslo_db supporting libs required by the db
management jobs, as well as the oslo_messaging libs required for future
rabbitmq management expansion.

Change-Id: I5451c15c8fb49c85b4f254cc60156420bee2efea
2017-08-29 04:34:26 +00:00
Pete Birley
46f9dea2c8 Security: Add Pod user to missed services
This PS adds the pod user to missed services, which is required
for fully agnosic image operation.

Change-Id: I09c481f90b5e6a478e699ebaae51a2316ceb6a8d
2017-08-28 20:19:22 -05:00
Jenkins
10591db58c Merge "Remove local/* reference from documentation" 2017-08-29 00:05:07 +00:00
Jenkins
68ce1ac550 Merge "Magnum: Fix chart decomposition statements" 2017-08-29 00:05:00 +00:00
Jenkins
50760405ce Merge "Keystone: Fix limits and requests for resources" 2017-08-28 22:20:44 +00:00
Jenkins
3f9506ffef Merge "Nova: Mount machine id into compute daemonsets" 2017-08-28 21:18:57 +00:00
Pete Birley
4458e2c9b9 Keystone: Fix limits and requests for resources
There were some erros in the limit and requests for resources in
some of the keystone pods. This PS resolves the issue.

Change-Id: I5f8eed1a22a42621654198ab9b844914ba0aade8
2017-08-28 10:41:36 -05:00
Pete Birley
0f22d2b0e4 Magnum: Fix chart decomposition statements
There were some errors inthe magnum chart decomposition values
and conditionals. This PS resolves them.

Change-Id: Ie3617c7431cf2a3379b5ede8af0838f833d0554c
2017-08-28 10:35:53 -05:00
Pete Birley
d99ac61a0d Nova: Mount machine id into compute daemonsets
This PS mounts the machine id into the compute daemonsets. It is
required for newer verions of libvirt and nova.

Change-Id: I75d3ebe670fe1372eb4b6a7fc90102bee69465bf
2017-08-28 15:19:17 +00:00
Pete Birley
05ab27bff9 Nova: Make policy fully configurable via helm values
This PS moves the nova policy.yaml to be fully driven by gotpl,
allowing full configuration without editing the template.

Change-Id: I0af8693df8b54486e2ba3dbe9eaca8d718d7d022
2017-08-28 10:18:16 -05:00
Jenkins
ebf571fd45 Merge "Security: Make policy fully configurable via helm values" 2017-08-28 15:10:48 +00:00
Jenkins
05753add36 Merge "Cinder: Make policy fully configurable via helm values" 2017-08-28 15:09:46 +00:00
Jenkins
ce1ce138fc Merge "Security: Container user and rootwrap for cinder" 2017-08-28 15:09:40 +00:00
Jenkins
2a08d8cde6 Merge "Security: Container user for support openstack services" 2017-08-28 15:02:22 +00:00
Pete Birley
54599a8fb6 Security: Container user and rootwrap for nova
This PS adds user control for the service user and rootwrap for
the Nova chart.

Change-Id: I3012e2e83e5a44c7093049b68b3d89d4c2c1ed26
2017-08-28 14:49:43 +00:00
Jaesang Lee
26252ae1fd Set DNS policy for ceph-mon daemonset
add dnsPolicy parameter in daemonset-mon.yaml, ceph-mon should have
dnsPolicy ClusterFirstWithHostNet because it use hostNetwork.

Closes-bug: 1713383
Change-Id: I14aba0f5caeb6cb7057aeadb18c60337b130da90
2017-08-28 11:27:54 +09:00