4029 Commits

Author SHA1 Message Date
Vladimir Kozhukalov
a96a6b955e Prepare for upcoming merger with OSH
* Remove unnecessary scripts
* Sync identical scripts
* Update chart_version.sh so to make it identical with OSH
* Sync README.rst, tox.ini, .gitignore, Makefile
* Rename some files to prevent merge conflicts
* Sync releasenotes config

Change-Id: Ibfdebcb62a416fc1b15989a1fd89b897a783d8f4
2025-03-16 13:38:18 -05:00
Vladimir Kozhukalov
2ff55b2078 Move docs to the openstack-helm repo
This is to prepare for the upcoming merger
to the openstack-helm repo and to reduce
the number of merge conflicts.

Depends-On: I6a4166f5d4d69279ebd56c66f74e2cbc8cbd17dd
Change-Id: I3cb3f2c44d8401e1d0de673bf83f8e294433b8df
2025-03-14 09:46:32 -05:00
Zuul
cc204d0a07 Merge "Do not install reno globally using pip" 2025-03-11 23:09:44 +00:00
Vladimir Kozhukalov
e10a841384 [ceph-rook] Skip check iteration if TOOLS_POD empty
When we deploy Ceph cluster using Rook we
check its status in a loop using Rook tools pod.
If tools pod is not found, let's skip the iteration.

Change-Id: Ib6bc90034961f89b8bb53081db5bf03c4d736110
2025-03-11 16:04:42 -05:00
Vladimir Kozhukalov
ea130ff50c Do not install reno globally using pip
It does not work on Ubuntu Noble which requires using virtual
env when you try to install packages using pip. Also
for deployment tests reno is not needed because we build
charts with SKIP_CHANGELOG=1

Change-Id: I8f0578ed2e1d0e757add155c618eea2e8a2e30d2
2025-03-11 19:36:14 +00:00
Vladimir Kozhukalov
c8e87da4ae [deploy-env] Do not use kubernetes.core ansible module
It fails with the error: `No module named 'yaml'`.
So let's use native helm with the ansible shell instead.

Change-Id: If652d603cfcaeb0b70c9b566b90d98e627d3bada
2025-03-11 13:17:54 -05:00
Vladimir Kozhukalov
e599421b0b Remove ceph repos from deploy-env role
Also do not install ceph-common package on the
test nodes.

Change-Id: Ia33f2e7f26f3ccaec4863a22702946b4383d39a5
2025-03-10 16:04:15 -05:00
Vladimir Kozhukalov
d2a98c293d Update ceph-rook.sh script
While we are waiting for Ceph cluster to be ready
we check Ceph status in a loop using tools pod provided by Rook.
We have to get this tools pod name every iteration
within the loop because K8s can terminate the pod for
some reason and this is expected behavior.

Change-Id: Iabb98e94d7470fe996091bf77787637f3e8f4798
2025-03-03 22:56:48 -06:00
Zuul
baed887c72 Merge "Add ingress deployment to deploy-env role" 2025-03-04 03:21:44 +00:00
Zuul
3189d29ac0 Merge "Cleanup FEATURE_GATES env var" 2025-03-04 03:21:42 +00:00
Vladimir Kozhukalov
a836113584 Add ingress deployment to deploy-env role
Change-Id: I910862d391650c443c6f0e352b3687120af14a91
2025-03-03 22:33:24 +00:00
Vladimir Kozhukalov
7d5a093f24 Cleanup FEATURE_GATES env var
A while ago we changed the way how we define features
for the test jobs and this variable is not needed any more

Also change keystone jobs so they don't deploy
Rook but instead use local volumes.

Depends-On: Ib4afe58b27cd255ce844626b1eee5ecc82e3aeb3
Change-Id: Ia8971bd8c3723542a275c9658db7f9a5bb943f92
2025-03-03 13:41:28 -06:00
Vladimir Kozhukalov
4f5dcfd712 Update jobs
* Make TLS job non-voting because it is unstable and
  we don't want it to block the gate.
* Ceph migration job is not very important now. Let's
  run it in a periodic-weekly pipeline.

Change-Id: Iadb67e1c5218794d15e60538abb2e869ae7e67c0
2025-03-03 19:13:38 +00:00
Zuul
e30724af4c Merge "Remove resource limits for Rook" 2025-03-01 04:04:49 +00:00
Vladimir Kozhukalov
0b1b437f46 Remove resource limits for Rook
Change-Id: I857f75974a2ba0e3374fb46e06c7bce7fa04980c
2025-02-28 18:07:58 -06:00
Vladimir Kozhukalov
19c263109e Cleanup old scripts
The env-variables.sh get-values-overrides.sh
and wait-for-pods.sh are not needed any more
since they are now a part of openstack-helm-plugin.

Change-Id: I044ee7e7182822a9d7e5fd3e56c444fbfea9a753
2025-02-26 14:21:25 -06:00
Doug Goldstein
1ba8089cd5 helm-toolkit: always add pod mounts for db-sync job
Always include mounts defined for the db-sync job under the pods section
rather than requiring every chart to pass it in explicitly. Now the
passed in value can be just for overrides. Since charts today already
pass this in, we need to de-duplicate it to ensure we don't create this
multiple times.

Change-Id: I042e79cee7859ebdc001a056edc75eb89dd3e5b3
2025-02-20 12:42:15 +00:00
Sergiy Markin
aa1571d8ed Rolling update on secret changes
Change-Id: If1bb0218eb70a2bed55f18b9fb6dd36ea042286c
2025-02-19 22:53:12 +00:00
Stephen Taylor
e26324d5a5 [ceph] Update Ceph and Rook
This change updates all of the charts that use Ceph images to use
new images based on the Squid 19.2.1 release.

Rook is also updated to 1.16.3 and is configured to deploy Ceph
19.2.1.

Change-Id: Ie2c0353a4bfa181873c98ce5de655c3388aa9574
2025-02-18 13:38:05 -07:00
Zuul
7f9b4fb013 Merge "Ceph migration gate improvement" 2025-02-14 12:17:04 +00:00
Stephen Taylor
e4458b2fc8 Ceph migration gate improvement
This change addresses instability in the Ceph migration gate job
by adding extra nodes to the cluster.

Change-Id: Id60d61274a42f87280748f0b4b9c0c3c7adb7357
2025-02-13 10:44:04 -07:00
Stephen Taylor
646180ea0e [k8s,ceph,docker] Apt repository filename cleanup
The prerequisites and containerd tasks that add the Kubernetes,
Ceph, and Docker repos to apt list the filenames as
kubernetes.list, ceph.list, and docker.list, which results in the
files created under /etc/apt/sources.list.d being named with
'.list.list' extensions. This change simply removes the redundant
'.list' from the filenames to clean that up.

Change-Id: I3672873149d137ad89c176cabad4c64dcff2bfee
2025-02-12 16:37:31 +00:00
Zuul
93ed069c9a Merge "Add OVN network logging parser" 2025-02-10 16:46:46 +00:00
ricolin
d6e1e2604b Add OVN network logging parser
Change-Id: I03a1c600c161536e693743219912199fabc1e5a5
2025-02-07 15:18:37 -06:00
astebenkova
962333df31 [openvswitch] Make --user flag optional
Add the ability to run the OVS server as root
since the following change lacks backward compatibility:
https://review.opendev.org/c/openstack/openstack-helm-infra/+/939580

Change-Id: I071f77be0d329fbe98ce283324466bf129fe190d
2025-02-04 13:12:25 +02:00
astebenkova
117b08c6fc [deploy-env] Install reno for OSH jobs
This commit requires reno installed on the system:
https://review.opendev.org/c/openstack/openstack-helm/+/940142

Change-Id: I874fabc0199229d8e05d1e0bb2626d7630c06a12
2025-02-04 13:12:14 +02:00
Vladimir Kozhukalov
7a403d5db2 Generate CHANGELOG.md for charts
We use reno>=4.1.0 features to combine release notes from
a bunch of release notes files. Reno uses git tags
to figure out which release notes files to include
to a given release.

When building charts for deployment tests we skip
generating CHANGELOG.md files.

Change-Id: I2f55e76844afa05139a5c4b63ecb6c0ae2bcb5b2
2025-01-31 22:11:31 +00:00
Zuul
eb60e37c55 Merge "Revert "Temporarily disable voting for ovn job"" 2025-01-31 16:40:24 +00:00
Zuul
e7bcd17a75 Merge "Ceph rook gates improvement" 2025-01-31 16:28:18 +00:00
Sergiy Markin
711ef3f735 Ceph rook gates improvement
This patchset fixes the instability of the
ceph-rook gates by adding extra nodes to the
cluster.

Also improved ceph deployment process monitoring.

Change-Id: I405e501afc15f3974a047475a2b463e7f254da66
2025-01-31 04:16:17 +00:00
Zuul
6e5477e00a Merge "ovn: implement Daemonset overrides" 2025-01-30 21:12:52 +00:00
Vladimir Kozhukalov
278b7c65b3 Revert "Temporarily disable voting for ovn job"
This reverts commit 7c6c32038d6e49bd8188d02199f054002266432d.

Reason for revert: OVN issue is resolved

Change-Id: I2425701e6075335433b90c949bac444fcebe3ac9
2025-01-30 19:21:59 +00:00
Zuul
fe95c4d1cf Merge "Run ovn controller with non root openvswitch user" 2025-01-30 14:52:03 +00:00
Vladimir Kozhukalov
f5531f3bcb Run ovn controller with non root openvswitch user
We recently updated the openvswitch chart to run
ovs db server as non root.

See: https://review.opendev.org/c/openstack/openstack-helm-infra/+/939580

Also ovn-kubernetes script ovnkube.sh that we are using for
lifecycle management of OVN components tries to update the
ownership of OVS run and config directories before start.

So we have to pass the correct username to the script
so it does not break the OVS files permissions.

Change-Id: Ie00dd2657c616645ec237c0880bbc552b3805236
2025-01-30 06:57:42 -06:00
Vladimir Kozhukalov
4aef6a6d7b Ensure python and pip installed for lint and build chart jobs
Change-Id: I7819d67894eff03e57fe1c22f02e167a6c63b346
2025-01-29 09:08:00 -06:00
Sergiy Markin
41199aee82 Update create db user queries
This commit changes the queries to use % instead
of %% in the Host field of CREATE USER and GRANT
ALL statements.

It also uplifts fresh jammy images for mariadb.

Change-Id: I6779f55d962bc9d8efc3b3bfe05b72cbe0b7f863
2025-01-28 22:15:22 +00:00
Vladimir Kozhukalov
7c6c32038d Temporarily disable voting for ovn job
OVN jobs is failing due to recent changes:
https://review.opendev.org/c/openstack/openstack-helm-infra/+/939580
https://review.opendev.org/c/openstack/openstack-helm-images/+/939589

This is to unblock unrelated PRs.

Change-Id: Id6f411c8ddf819e3f96401995afe5fcdca2386af
2025-01-28 16:10:04 -06:00
Zuul
775a2d079b Merge "update openvswitch to run with non-root user" 2025-01-28 17:06:39 +00:00
Zuul
f465b5d966 Merge "[memcached] Expose exporter port via service" 2025-01-27 19:00:34 +00:00
Vladimir Kozhukalov
baecad31b3 Install reno>=4.1.0 on test env nodes
This is needed to generate CHANGELOG.md files from
release nodes while building chart tarballs.

Change-Id: I3c52f4ace6770515d64bfdf4433d27fd3a674eb0
2025-01-27 06:18:48 -06:00
Vasyl Saienko
b5b9e509de [memcached] Expose exporter port via service
Pods may be discovered via prometheus endpoint scraper [0]
expose exporter port via service to have ability to scrape over endpoints.

[0] https://prometheus.io/docs/prometheus/latest/configuration/configuration/#endpoints

Change-Id: I59a4472f13753db0ff2dc48559dd644d2648d97e
2025-01-24 02:31:04 +00:00
okozachenko1203
a91a54e0c6 ovn: implement Daemonset overrides
Change-Id: I2735748a200071c9488810456b8cccfc3bb2cff6
2025-01-21 14:39:31 -06:00
Zuul
e25a201116 Merge "Add OVN Kubernetes support" 2025-01-20 13:47:43 +00:00
Yaguang Tang
5b47f00633 update openvswitch to run with non-root user
Change-Id: I27a0927fb8b01b4eb997e8e7b840adc7a9e56d26
2025-01-19 18:01:31 +08:00
Zuul
45c22402a7 Merge "set hugepage mount point permission for nova when using dpdk" 2025-01-17 18:28:02 +00:00
Zuul
0922b0ea1a Merge "Add release note template" 2025-01-17 17:30:03 +00:00
Yaguang Tang
e15d449f0f set hugepage mount point permission for nova when using dpdk
Change-Id: Ic4b6e8aac5a4c6b6398e5ef03fa9608c43f766ed
2025-01-17 06:14:27 -06:00
ricolin
ffd183a164 Add OVN Kubernetes support
This patch introduce OVN Kubernetes support.
With OVN Kubernetes (https://github.com/ovn-org/ovn-kubernetes)
OVN services control gets more native in Kubernetes way.

At this point we only use OVN Kubernetes utilities
to run and probe OVN components. We don't use OVN-Kubernetes
CNI and CRD features.

Depends-On: I2ec8ebb06a1ab7dca6651f5d1d6f34e417021447
Change-Id: I5821149c987070125f14d01c99343b72f234fc36
2025-01-16 02:05:59 -06:00
Zuul
558ed90132 Merge "[helm-toolkit] Allow to pass raw network policy" 2025-01-15 14:43:20 +00:00
Vladimir Kozhukalov
7ef00681be Add release note template
Change-Id: Ied6af6bf7521a92c70170a62d6ad8b29c731eac0
2025-01-15 03:09:52 -06:00