1642 Commits

Author SHA1 Message Date
Zuul
0b14152664 Merge "Add docker-default apparmor profile for prometheus process exporter." 2019-04-12 18:37:59 +00:00
Anderson, Craig (ca846m)
c9396e3480 Add tiller version requirement to helm-toolkit
Change-Id: I30b54188dcfb7d007cb5812f40fd7e0d9ccc443d
2019-04-11 10:32:10 -07:00
Randeep Jalli
26faa8a66d Add docker-default apparmor profile for prometheus process exporter.
Change-Id: Iaa1eb80074c280ff00cc599105b598130132cc26
2019-04-11 17:16:49 +00:00
Randeep Jalli
c98f7a7f05 Fix Elasticsearch helm test indentation
This indents the closing {{ end }} for the check for executing the 
Elasticsearch test that checks the snapshot repositories

Change-Id: I77ebb1af7ee648cc9787665bfb81dfbb1a30663a
2019-04-10 13:59:08 +00:00
Jean-Philippe Evrard
811a1df1ef Allow value overrides in CI
This allows to pass a new env var into shell scripts, for value
overrides, with Zuul's help (value_overrides can be part of the
job definition).

Change-Id: Ia5dcecb73f4b872fd8fb65d3cd0bf69c19addf07
2019-04-10 11:46:37 +00:00
Zuul
ab887b11aa Merge "Add Liveness probe to Calico-Kubecontrollers" 2019-04-10 00:21:27 +00:00
Goutham Pratapa
d8bc4f0c48 Add Liveness probe to Calico-Kubecontrollers
This commit is to add liveness probe to the
calico kubecontroller containers.

Change-Id: I99e5b0c1e04d94605efa8bfe6863f1f50c2692cd
2019-04-09 22:24:04 +00:00
kranthikirang
6c45566132 ceph-mon, tenat-ceph storageclass schema
In order to align with ceph-provisioner storageclass
.Values we need to update ceph-mon .Values and tenant-
ceph scripts

Change-Id: I36fb07de9e791ac33cf0b4c38b3e4d63337d3e72
Story: storageclass schema changes
Signed-off-by: kranthi guttikonda <kranthi.guttikonda@att.com>
Signed-off-by: kranthikirang <kranthi.guttikonda@b-yond.com>
2019-04-09 22:10:23 +00:00
Steve Wilkerson
380bc3a892 Mariadb: Disable monitoring by default
This moves the mariadb chart back to disabling the prometheus
exporter by default

Change-Id: I04a10e9733f98387f0502ed76fa926bacaedb7e4
2019-04-09 13:29:57 -05:00
Steve Wilkerson
ff31ec7ad9 Add selector.matchLabel key to packetbeat and apm-server
This adds the selector.matchLabel key to the packetbeat daemonset
and the elastic-apm-server deployment templates as it's a required
field for apps/v1

Change-Id: Idcc639b49b34579508e77a03f814dcf45ecf667c
2019-04-09 13:21:52 -05:00
Steve Wilkerson
a63f3b3662 MariaDB: Add network policy template for mysql exporter
This adds the network policy template and overrides for the mysql
prometheus exporter.

Change-Id: I83b526d11fe25f45b02a7e797b785b8ad59c7848
2019-04-09 12:16:22 -05:00
Koffi Nogbe
211ce288ca Add Create database if not exist to postgres restore
* Postgresql lack the feature of creating databases if not exist
  * Add a function to workaround in the restore script.

Change-Id: If451204e3cec573a0dbfe91549a47ee569799a22
2019-04-09 12:59:20 -04:00
Zuul
c77dc230f4 Merge "Fix mysqldump default option" 2019-04-09 03:49:38 +00:00
Zuul
da8cb2ffa1 Merge "Ceph: fix overriding ceph monitor hosts value" 2019-04-08 16:38:31 +00:00
Zuul
ef012b829c Merge "HTK: Update k8s-entrypoint container macro to add security context" 2019-04-08 16:34:34 +00:00
Pete Birley
9af2ef9f62 HTK: Update k8s-entrypoint container macro to add security context
This PS updates the htk k8s-entrypoint container macro to add security
context, with a set of defaults to allow operation with existing charts.

Change-Id: Ib41600e2e3c848ae0d62181ad7e01f3cf00a26a0
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-08 13:03:03 +00:00
Zuul
96eca1f425 Merge "MariaDB: remove unused options and function from backup script" 2019-04-07 21:31:34 +00:00
Zuul
5bd0404af8 Merge "MariaDB: Catch when mysqld process has exited immediately" 2019-04-07 20:25:42 +00:00
Zuul
0bf55001a1 Merge "MariaDB: Clean up values file and exporter start script" 2019-04-07 20:13:54 +00:00
Pete Birley
e582a7df66 MariaDB: remove unused options and function from backup script
This PS removes some unused CLI options and functions from the backup
script.

Change-Id: Ie7abb3bda0689afa0d128552a85c985e1653552f
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-07 19:45:11 +00:00
Pete Birley
75b823e875 MariaDB: Clean up values file and exporter start script
This PS cleans up the default values file, and also allows some
aspects of the mysql exporter's operation to be configured.

Change-Id: I577e3237ca0bfe3665e7a57cf2a9364baea7c24a
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-07 15:13:05 +00:00
Pete Birley
abc4af9920 MariaDB: Fix backup job init container
This PS fixes the backup job to have an appropriate init container
and service account.

Change-Id: I93d7ba93c9846508262951efba0d6034f6341ae8
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-07 15:12:55 +00:00
Pete Birley
0a0e1302c2 MariaDB: Catch when mysqld process has exited immediately
This PS updates the logic terminating mysqld to catch when it has
exited prior to waiting for it to do so.

Change-Id: Iefea71b7c49e5cfc01bdf8b80644990d78f2e910
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-07 15:12:25 +00:00
Zuul
1a81952929 Merge "MariaDB: add basic sanity test" 2019-04-07 08:20:21 +00:00
Zuul
3d058cad54 Merge "Ceph charts: Add missing templates, update dependency values" 2019-04-07 08:20:20 +00:00
Zuul
068333527d Merge "kubeadmaio:Option to change calico prometheus port" 2019-04-07 08:07:33 +00:00
Madhukar Nayakbomman
ee37a5a17f kubeadmaio:Option to change calico prometheus port
Adding optional calico.prometheus_port option to kubeadm-aio vars.yaml file

Change-Id: I94918624a1b547c89cbdfc67cc92fca4d6f285f4
2019-04-07 06:43:30 +00:00
Steve Wilkerson
7f04846c52 Ceph charts: Add missing templates, update dependency values
This addresses slight issues with the ceph-osd, ceph-provisioners,
and ceph-rgw charts. Those issues include:
- Remove duplicate test: key in ceph-osd dependencies
- Add missing image repo sync job to ceph-provisioner and rgw
- Use correct job name for image repo sync dependencies in charts
- Remove incorrect keystone service dependency for ceph-rgw, as
  the keystone jobs are dependent on the keystone service

This also updates the ceph-rgw chart to use dynamic dependencies
based on whether keystone auth or s3 auth is used

Change-Id: Id3b3f289bdd4ca4d1b2e9b6267b12427e422a08d
2019-04-07 06:42:29 +00:00
Pete Birley
137b60e599 MariaDB: add basic sanity test
This PS adds a basic sanity test to the mariadb chart, using
mysqlslap.

Change-Id: I7450ea8a66364d123022bc773ee90047f9e69b1c
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-06 13:18:41 -04:00
Pete Birley
3478106e56 Mariadb: Add security policy functions
This PS adds security policy functions to mariadb.

Change-Id: Ic0f035e0281281fb3f2977ea130385f65c9a04e4
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-06 03:16:43 +00:00
Zuul
63b61b86eb Merge "[Calico] Using booleans where expected in values (not strings)" 2019-04-05 06:35:04 +00:00
Zuul
b5fe23872e Merge "Fixes the Apparmor gate for libvirt and memcached" 2019-04-05 01:54:17 +00:00
Zuul
62b065cd9f Merge "Readiness/Liveness probe for libvirt" 2019-04-05 00:55:38 +00:00
Randeep Jalli
3aa89c55f3 Fixes the Apparmor gate for libvirt and memcached
This updates the apparmor job to only use the docker default
profile for memcached, as the custom apparmor profiles used didnt
allow for a successful deployment. This also updates the libvirt
overrides, as the current change to use daemonset-overrides
required updating the container name.

Co-authored-by: wilkers.steve@gmail.com
Co-authored-by: ld366r@att.com

Change-Id: I00cb4c62a38e0e1178e45b4e34c946b3b53da6d5
2019-04-04 21:20:20 +00:00
Koffi Nogbe
3a686f854a Fix mysqldump default option
* Remove --skip-opt from the default option because it is not
    porting auto_increment option to the dump

Change-Id: I45f38b303be893803dde244921f50f5dcb1d865d
2019-04-04 12:01:10 +00:00
Zuul
aae64213c9 Merge "Libvirt: support per node overrides" 2019-04-04 08:11:31 +00:00
Chris Wedgwood
f343944f45 [Calico] Using booleans where expected in values (not strings)
The string "false" isn't boolean false.

Where possible use booleans in the values so constructs like:

   {{ if not .Values.some.thing }}
   # some thing is not set
   {{ end }}

work as expected.

In the places it's expanded and passed into the pod environment
variables it is converted to a string; we update those all the same so
that template logic will work.

Change-Id: I6142b9d514b2b21381dbf0de2f1351f5ab94e696
2019-04-04 07:26:58 +00:00
Hyunkook Cho
c7a6a96080 Ceph: fix overriding ceph monitor hosts value
all other charts that related with ceph have the logic
to override the ceph monitor hosts.
but storage class chart only has no logic to override the value.
to use external ceph, it must be able to set manually the ceph host.

Change-Id: Ib788e339606a2f7336a688aa276082503a18b04f
Signed-off-by: Hyunkook Cho <hk0713.cho@samsung.com>
2019-04-04 14:52:52 +09:00
Pete Birley
db209e0bb5 MariaDB: update password cleanly
This PS updates the password update logic to operate cleanly under all
senarios.

Change-Id: I675a344b00984c63cec34919f84a5e9dd8aa5b4e
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-03 18:06:58 +00:00
Pete Birley
8863bcfc11 Mariadb: move to mariabackup as wsrep sst method
This PS moves mariadb to use mariabackup as the wsrep sst method.

Change-Id: Icc1c27d72a3bee5aaa091cdf3ca6cff0c5509f30
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-02 09:57:46 -05:00
Zuul
15a0cd7c2b Merge "Improves ceph-provisioner storageclasses" 2019-04-02 05:37:26 +00:00
Zuul
76e4021648 Merge "Mariadb: Add logging output to wsrep-recover on startup" 2019-04-02 01:32:01 +00:00
Zuul
c6151fbb90 Merge "Add mariadb backup capability to mariadb chart" 2019-04-02 00:04:19 +00:00
RAHUL KHIYANI
f667804430 elasticsearch-exporter: Add security context for exporter pod/container
This adds the security context snippet for the elasticsearch
prometheus exporter container to set allowPrivilegeEscalation to false
and readOnlyRootFilesystem to true

Change-Id: Ia80aa9cfc837073fae0a884de5245764147d7ded
2019-04-01 22:56:56 +00:00
Zuul
73dadd8899 Merge "Elasticsearch: Add job to wait for Elasticsearch cluster formation" 2019-04-01 22:42:50 +00:00
Zuul
16172016fb Merge "Mariadb: Disable wsrep during setting of password" 2019-04-01 21:56:01 +00:00
Zuul
cd37034586 Merge "Consolidate apparmor check jobs" 2019-04-01 21:49:02 +00:00
Zuul
6452a14111 Merge "[ceph-osd] Fix ceph osd init script to handle udev" 2019-04-01 21:49:00 +00:00
Zuul
68b329294d Merge "Add postgresql backup capability to postgresql chart" 2019-04-01 20:12:57 +00:00
Steve Wilkerson
25932c97f0 Consolidate apparmor check jobs
There was an additional job added for checking libvirt's apparmor
profiles separately from the standard apparmor job that existed
previously. This adds the libvirt deployment to the previously
existing apparmor job and removes the apparmor-libvirt job.

Change-Id: I76b00f1e5dca4236f62150e4ac48b0777a05b29f
2019-04-01 14:32:38 -05:00