Commit Graph

76 Commits

Author SHA1 Message Date
Pete Birley
b120667031 Endpoint lookups: fix typo in overrides
This PS fixes a typo in the endpoint lookup function and input.

Change-Id: I6ff6d68bf82e1e1f70438a7017f4e1a6df7f59a7
2017-09-06 11:15:54 -05:00
Artur Korzeniewski
ca05f7ac3c Neutron and OVS: add full name to ovs and lb daemonsets
Add neutron prefix to lb-agent and ovs-agent.
Rename ovs-db and ovs-vswitchd to openvswitch-db and openvswitch-vswitchd.

Change-Id: Iad69b0c00d17e59a9f0eb66003e4512ccaeab128
2017-09-04 13:58:59 +02:00
Pete Birley
bede94c835 Endpoint lookup namespace and fqdn support
This PS adds namespace and fqdn support to endpoint lookup functions,
it also permits over-riding of the puplic endpoint for ingress.

Change-Id: Ib61c5c00a214d75fe85fbffe9080c2ae88bd8cb9
2017-08-31 19:06:33 +00:00
Pete Birley
37b099e320 Neutron: Move OpenVSwitch into its own chart
This PS moves OpenVSwitch into its own chart - decoupling it from neutron,
both making it easier to deploy and use seperately and permitting
use of other network backends.

Partially implements: blueprint split-nova-and-neutron-infra

Change-Id: Ifd637136b950ddf1ba1c26ce76c9bbdeafc232c3
2017-08-30 16:01:29 +00:00
Jenkins
38cc836bab Merge "Neutron: add linuxbridge daemonset and config script" 2017-08-29 13:43:21 +00:00
Artur Korzeniewski
aaedb4a150 Neutron: add linuxbridge daemonset and config script
Adding daemonset for Linux bridge. Using node selector
"linuxbridge enabled".

network.backend added in neutron/values.yaml to support scenario for
different SDNs using the same networking software, like OVS is used
for reference Neutron L2 agent, ODL, OVN and SONA. The other option for
network.backend can be linuxbridge and calico.
network.backend impacts configuration of DHCP, L3 and metadata agents.
Those agents are dependent on ovsdb_connection flag (officially it is
placed in openvswitch_agent.ini file).

Added daemonset_lb_agent flag in manifests section. Currently
OVS and LinuxBridge L2 agents can be turned on/off to be deployed.
OVS L2 agent and OVS as a network virtualization SW can be deployed
independently.

Removed conf.neutron.default.neutron.interface_driver, since it was not
used anywhere.

Marked places in neutron/values.yaml where changes are needed in order
to use linuxbridge for:
- neutron.conf interface_driver
- ML2 mechanism driver
- dhcp and l3 agents interface_driver

Added example of neutron values overrides in:
tools/overrides/mvp/neutron-linuxbridge.yaml

Change-Id: I7cdcfaa9a73af392a0d45f7df29b7b3ae3cc4c76
Implements: blueprint support-linux-bridge-on-neutron
2017-08-29 11:51:42 +02:00
Pete Birley
ceb30e8cc7 Jobs: Consoloate on heat-engine for admin jobs where possible.
This ps moves to use a container sultaible for use as the heat engine
for all possible admin jobs - it is lighter than the kolla-toolbox image
and makes it easy to swap out to other image sets. This is as the heat
engine container should contain the openstack client (with all required
libs for the cloud) and the oslo_db supporting libs required by the db
management jobs, as well as the oslo_messaging libs required for future
rabbitmq management expansion.

Change-Id: I5451c15c8fb49c85b4f254cc60156420bee2efea
2017-08-29 04:34:26 +00:00
Pete Birley
7cfd182929 Security: Make policy fully configurable via helm values
This PS moves the policy.json to be fully driven by gotpl,
allowing full configuration without editing the template.

Nova and Cinder are addressed in the seperate patchsets:
 * https://review.openstack.org/#/c/498215/
 * https://review.openstack.org/#/c/498216/

Change-Id: Ia2be5fb4e460d41034fdadbbefc1e48d0869e023
2017-08-26 17:50:22 -05:00
Jenkins
d04e69c438 Merge "Enable keystonemiddleware cache encryption" 2017-08-25 01:56:10 +00:00
Pete Birley
4740486f63 Security: Container user and rootwrap for neutron
This PS adds user control for the service user and rootwrap for
the Neutron chart.

Change-Id: Ibefa3e76c9e64427e97cdcbb93a11d2b2125e171
2017-08-24 05:26:30 +00:00
Dae Seong Kim
aacd11e361 Add Tempest script in helm test framework
Now, openstack-helm support "helm test" function, and It execute rally
container.
Rally also can test Tempest itself, so this fix will be add tempest
test in rally container.

Change-Id: I2c2f684f6583f2a3d9c7279a3d85cb242934e90e
Implements: blueprint add-tempest-in-helm-test
2017-08-16 16:56:10 +09:00
Tin Lam
c35f08c4fa Enable keystonemiddleware cache encryption
This patch set enables keystonemiddleware memcache encryption by providing a
random string key into the service configuration file, and setting the
memcache_security_strategy as ENCRYPT.

Change-Id: Ia030f5414308a29096c644bae70047a323eaffde
2017-08-15 22:47:55 -05:00
Pete Birley
0c75f1ab9c Update DNS policy for pods in host network namespace
This PS updates the DNS policy for pods that run in the hosts network
namespace.

Change-Id: I5ff11985459c967e5248d1ce9f62ebfc578e3afb
2017-08-10 16:43:20 -05:00
Pete Birley
35601e2bd3 Charts: make manifests optional for all OpenStack elements
This PS allows the rendering of manifests to be controlled. It enables
both increased control over deployment when required but also makes
development of a feature easier to target.

Change-Id: I1716e8ee23fe5c53f935bd739ea283bc4a2a9963
2017-08-07 14:59:48 -05:00
Pete Birley
f30cbcf108 Update pod affinity to allow customisation
This PS updates the pod affinity function to allow customisation by
operators at the point of deployment.

Change-Id: I8b7b2f584e990e068051d9a6d5cc7b1e1adb5aa5
2017-07-28 15:02:47 +00:00
Pete Birley
cbae720d1d Values: Move mounts to pod key
This PS moves the mounts key to be under the pod key in the values.
It brings further consolation of related configuration params to be
nested under common keys across all charts.

Change-Id: If9963e4f8b438847e2fcad3bdd8c0d71ca9ecdd8
2017-07-14 10:44:35 -05:00
Pete Birley
4d066332a7 Values: Move replicas to pod key
This PS move s the replicas key to be under the pod key in the values.
It brings further consolation of related configuration params to be
nested under common keys across all charts.

Change-Id: I420b06debd0a62ba5d83497be43ff6c49c49d339
2017-07-13 23:08:08 -05:00
Pete Birley
20527cb57c Move k8s pod params under common key
This PS moves K8s pod params under a common key.

Change-Id: Ib4e72e82a4f1540fa800c39d0dcc91b286d96c93
2017-07-11 23:28:47 +00:00
Pete Birley
ab52a43425 Neutron: Add bootstrap job
This PS adds a bootstrap job to Neutron, in the same format as
Keystone and other services.

Change-Id: Ice724be9c8b20b27aaddf528f6cc0e848793c1c1
2017-07-07 04:36:05 +00:00
Pete Birley
ac06f49849 Unify and normalise K8s Resources and Upgrade Strategy
This PS unifies and normalises Kubernetes resource allocation and
update strategy across all OpenStack-Helm elements.

Change-Id: Ia41fc453cb5191fa447ca6e1aa0f5b431c939dc8
2017-07-06 17:48:16 +00:00
Pete Birley
c221fa5248 Secret and endpoint standardisation.
This PS moves keystone credentials to the endpoints section within
the values.yaml, and also adds a 'secrets' key, allowing standardiation
of secrets and credential management across OpenStack-Helm.

Change-Id: I86a21e625afd822379ac11351603b2c606a3769f
2017-07-05 12:22:04 -05:00
Jenkins
6231dde5c1 Merge "Introduce rolling updates for daemonsets" 2017-07-04 22:17:06 +00:00
Michał Dulko
3d732ce4d0 Enable oslo.cache for Neutron metadata agent
Neutron metadata agent can use oslo.cache to cache some requests to
neutron-server. As we have memcached already in place, we can enable
that feature. This commit does so.

Change-Id: I4ec1e7d22ed6bb54359dd5b6a80bc42222e59d00
2017-07-04 17:56:17 +02:00
Steve Wilkerson
d58059aa7a Introduce rolling updates for daemonsets
Kubernetes 1.6 introduced the ability to declare an update
strategy for daemonsets. As weve made >1.6 a requirement, we
should adopt the ability to update our daemonsets just as we do
with deployments. This brings the daemonset templates in our
charts in line with other patterns developed.

Change-Id: I317560b24d65274b69bec2df4f6225f1255b7ae6
2017-06-29 15:52:52 -05:00
Pete Birley
c0cf2337a2 Ingress controller for public endpoints
This PS provides the framework for Ingress controller based access to
public APIs.

Services covered:
 * Barbican
 * Cinder
 * Glance
 * Heat
 * Horizon
 * Keystone
 * Magnum
 * Mistral
 * Neutron
 * Nova
 * Senlin

Change-Id: I82d55f6ca41859ebed3312ec7d95b353df09e772
Implements: blueprint api-ingress
External-Tracking-Id: OSH-58, OSH-62
2017-06-28 17:37:10 -05:00
Chris Wedgwood
1633197fda Merge ovs 'ensure' logic into the caller
Rename ml2.ovs.auto_bridge_add to network.auto_bridge_add

Change-Id: Idf0e746df8b91cbbf89373d1516108ce2163083c
Co-Authored-By: Artur Korzeniewski <artur.korzeniewski@intel.com>
2017-06-26 15:51:44 +00:00
Pete Birley
be7ed2b5ab Remove some orphaned values in glance and neutron.
Some unused values were present in glance and neutron that were left
over from the early development of OSH this PS removes them.

Change-Id: I5dbbb1d6e1262e4c06dd6c083724fd213838e5b7
2017-06-23 04:38:13 +00:00
Pete Birley
653f7ed3e4 Neutron: Helm test functionaility using Rally
This PS adds 'helm test' functionality using Rally to Neutron

Change-Id: I6e89aca1870704368b4dc1f8ad93f8ba563002c1
Partial-Implements: blueprint implement-helm-test-for-charts
External-Tracking-Id: OSH-89
2017-06-22 15:51:27 -05:00
Jenkins
06b08eb714 Merge "Remove duplicate oslo_db entry in Neutron values" 2017-06-20 16:08:39 +00:00
Darla Ahlert
7ce9cbe3d2 Remove duplicate oslo_db entry in Neutron values
Change-Id: I9b0563cb304d6cd4bf0fbb1d4be3ccacf2ec2f46
2017-06-20 09:39:45 -05:00
Pete Birley
a7503a7d3f Kubernetes Entrypoint: Lookup service names for dependency checks
The existing entrypoint logic used static names to reolve dependencies.
This prevented the service names, and thus the hostnames of services
being altered. This PS resolves that issue by looking up the service name
from the endpoints specified in the values for a chart.

Partial-Implements: blueprint enhance-entrypoint-dependency-checking
External-Tracking-Id: OSH-21
Change-Id: Ib49490f332f8cd88e98c50d9335dfd314a170936
2017-06-20 08:51:36 -05:00
Darla Ahlert
c394d22112 Add Graceful Termination to all existing charts
This commit adds graceful termination to all existing charts.
It also adds a setting in the values.yaml file for clarity and
the ability to override if wished.

Change-Id: I42025e4be86d248be467c1d2f0980f864c4d440e
2017-06-05 12:38:26 -05:00
Jenkins
07bf94ae82 Merge "Neutron fixes; fix external and tunnel interfaces." 2017-06-02 00:07:36 +00:00
Jenkins
89b4ae24e1 Merge "Add pod disruption budget for neutron" 2017-05-31 21:29:50 +00:00
Larry Rensing
3720765608 Add pod disruption budget for neutron
This PS adds a pod disruption budget for neutron server

Change-Id: I512d97c5dba281af21cc767a3744e2f5c05c7019
2017-05-31 16:41:17 +00:00
Jenkins
c846259675 Merge "Neutron; fix paths for l2' and arp'" 2017-05-31 03:09:40 +00:00
Chris Wedgwood
7b96c5cfff Neutron fixes; fix external and tunnel interfaces.
Fixes to resolve confusion between gotpl and bash variable handling
and also how bash handles empty strings.

These are required to robustly:
 1. make use of an external network (for floating IPs)
 2. specify *which* interface in the nodes is used for the tunnelled
    traffic.

Change-Id: I30fd675cd471a77dc09a6c7f6ee81120a978b38b
2017-05-30 05:13:52 +00:00
Chris Wedgwood
2dba908e73 Neutron; set the default az to nova to be consistent with everything else.
Change-Id: I0f763d1a35a481cbea28c9ee4875c44933fc7781
2017-05-27 21:41:42 +00:00
Chris Wedgwood
b5e55a92b4 Neutron; fix paths for l2' and arp'
Change-Id: Ib3906fcd7f0509737fc6bbfa1cf601e585a88305
2017-05-27 05:27:45 +00:00
Mark Burnett
de20cbb15d Use the standard Dockerhub MariaDB image
Addresses consistency issues that appear with autoincrement fields in
the existing chart, as demonstrated in [1].  It should allow automatic
recovery of 2 out of the 3 (default) cluster members.

It does not address automatic recovery of a complete shutdown of all
cluster nodes.

[1] https://review.openstack.org/#/c/465977/

Change-Id: I84c86e1862f03a6d381bf219b821ea3636049f0b
2017-05-25 08:56:35 -05:00
Jenkins
4f1aecb9c4 Merge "Neutron chart: add tunnel types, bridge mappings and default interfaces" 2017-05-24 05:10:48 +00:00
Artur Korzeniewski
a378304490 Neutron chart: add tunnel types, bridge mappings and default interfaces
Correction of tunnel_types config option in values.yaml, regarding the
_openvswitch_agent.ini.tpl layout.
Added bridge mappings, since it was lost with auto-generate configs.

Removed br-physnet1 and physnet1 in favor of 'external' network config.

Removed default network interface, replacing it with search for interface
with default gateway for tunneling. The interface for external bridge
has to be defined explicitly, otherwise no interface will be added to
external bridge automatically.
In OVS configuration scripts, added handling null port passed.

Change-Id: I90ebe222323b3b1ec8d20a8038c0dfed3de9b58c
Closes-Bug: #1686365
Closes-Bug: #1686367
2017-05-23 18:48:40 +02:00
Jenkins
3bb2c91bdb Merge "Cleanup - Adding volume overrides" 2017-05-22 16:23:32 +00:00
Jenkins
8e8085f455 Merge "Neutron chart: add OVS firewall" 2017-05-20 23:04:28 +00:00
Larry Rensing
b02c4d215e Cleanup - Adding volume overrides
Added volume overrides for the remaining kubernetes manifests

Change-Id: I582609b38ac511ef920f849fdfd45fd03ad32677
2017-05-18 14:58:27 +00:00
Artur Korzeniewski
83710071bb Neutron chart: add OVS firewall
Add openvswitch based firewall, which is better than hybrid iptables one.
It does not interfere with k8s iptables rules on compute nodes.
The advantage is that VMs have access to the OpenStack API.

Change-Id: Ic6baef5867db962b3cb4709d7e6dce8a9a13584f
Closes-Bug: #1686371
2017-05-17 14:03:50 +02:00
Jawon Choo
9286d085b1 remove unused & mismatched value in neutron values.yaml
in neutron chart,
line 112~116 values.yaml are not used after 2017-04-11, moved
into conf.
and l3_ha_network_type should not be gre, because ml2 network type
is set vxlan.

Closes-Bug: #1691706

Change-Id: I5d993d6adffe7d7e938ce17d98ac780384b0a100
2017-05-16 23:21:19 +09:00
Artur Korzeniewski
ccf90b2a25 Neutron chart: add interface_driver for DHCP and L3 agents
interface_driver is required for DHCP and L3 agents.

Change-Id: I15b3a7ea758669bb80326e561ebb39779386bf3b
Closes-Bug: #1686373
2017-04-26 13:17:03 +02:00
Jenkins
2f2e7aebc3 Merge "Neutron chart: fix neutron to keystone and nova API calls" 2017-04-23 00:40:17 +00:00
Artur Korzeniewski
d317f50545 Neutron chart: fix neutron to keystone and nova API calls
Adding lost parameter to neutron to nova API call: "auth_type: password"

Also correcting the project_name and username to neutron-> keystone
communication.

Change-Id: I516a2d5fb17b0ac2ca170b249185a914b34c8250
2017-04-21 15:50:57 +02:00