379 Commits

Author SHA1 Message Date
Zuul
060f0a7242 Merge "Add ldap support to nagios" 2018-05-15 16:26:03 +00:00
Steve Wilkerson
db89ab8204 Add ldap support to nagios
This adds an apache reverse proxy to the nagios chart, similar
to elasticsearch and kibana. It also adds authentication to
nagios via ldap

Change-Id: I7b17703b5d4c1e041691ffceb984a9f5951cbeb9
2018-05-15 09:21:18 -05:00
Zuul
fbf2464042 Merge "Add ldap support to grafana, update version, add helm tests" 2018-05-15 07:41:37 +00:00
Zuul
8e892f37a7 Merge "Openstack-Exporter: Remove personal image reference" 2018-05-15 03:53:17 +00:00
Zuul
bb4d5930db Merge "Helm-Toolkit: Update chart metadata and clean top level directory" 2018-05-15 03:53:16 +00:00
Zuul
956fa604d3 Merge "Add ldap support in elasticsearch/kibana apache proxies" 2018-05-15 03:53:15 +00:00
Zuul
36c2c9754a Merge "LDAP: Move ldap chart to openstack-helm-infra" 2018-05-15 03:53:14 +00:00
Zuul
088a7c0ce3 Merge "node-exporter: use endpoints section and lookups to set port" 2018-05-15 03:53:13 +00:00
Steve Wilkerson
e081c19fe8 Add ldap support to grafana, update version, add helm tests
This adds ldap support to the grafana chart. This required updating
the version of Grafana to 5.0, as this version allows for using
configuration files to bootstrap the datasources and dashboards
instead of using the grafana http api. This was a necessary change
as using ldap for grafana presented issues trying to create the
datasource via the http api

This also adds a basic helm test for grafana. This test simply
verifies whether the prometheus datasource configured exists and
whether the number of dashboards reported by the admin api matches
the number of dashboards expected

Change-Id: I2e987cb425adba9f909722ffdb25b83f82710c4d
2018-05-15 01:42:04 +00:00
Steve Wilkerson
5150686400 Openstack-Exporter: Remove personal image reference
This changes the prometheus-openstack-exporter image to point to
a new image in quay.io/attcomdev rather than a personal image
repository

Change-Id: Ibf4fb74b38842d8cd52df7d0c9871aa58366b827
2018-05-15 01:31:49 +00:00
Zuul
4ed0daf4bc Merge "Update prometheus rule for terminated containers in pods" 2018-05-15 00:35:03 +00:00
Steve Wilkerson
1c01274207 Update prometheus rule for terminated containers in pods
This updates the prometheus rule for checking for terminated
containers in pods. The previous rule checked for any terminations,
which raised alarms due to completed containers in jobs
being included, which isn't desired behavior. This changes the
expression to check for any containers that have terminated with
a status other than completed

Change-Id: I88e533a56f81f81bd1a81420ecfb7d43ac9e2d0b
2018-05-14 17:27:48 -05:00
Zuul
b5c63ea4be Merge "Gate: place role default vars within the role" 2018-05-14 18:27:59 +00:00
Zuul
f47814a0de Merge "Gate: Disable local nameserver" 2018-05-14 15:53:19 +00:00
Zuul
d11f339776 Merge "fluent-logging: yaml indentation fixes" 2018-05-14 13:55:17 +00:00
Steve Wilkerson
3c692abd6e Add ldap support in elasticsearch/kibana apache proxies
This adds required configuration for enabling LDAP through
the apache proxy in the elasticsearch and kibana charts by
default

Change-Id: Iaff8f328ff50944ddad94ec86b1134ca73750176
2018-05-14 13:53:30 +00:00
Steve Wilkerson
85208fe98a LDAP: Move ldap chart to openstack-helm-infra
This moves the ldap chart to openstack-helm-infra from
openstack-helm, allowing for ldap to provide an authentication
mechanism for components of the LMA stack, and can still be used for
keystone in openstack-helm, as openstack-helm-infra is a required
project

Change-Id: I211bc47c7a3ae875614102c8f64daa1099f702e8
2018-05-14 08:53:00 -05:00
Pete Birley
559910e358 Gate: Disable local nameserver
disable the local nameserver as it interferes with the k8s
dns-service and other local resolvers used for development use.

Change-Id: I32c8e752675b037610f77c8baee1c1636d5a032e
Signed-off-by: Pete Birley <pete@port.direct>
2018-05-14 01:38:38 -05:00
Pete Birley
be3f300623 Gate: place role default vars within the role
This PS places the role default vars within the appropriate role,
in addition it exposes kubeadm's selfhosted param and deploys the
kubeadm binary to master nodes.

This PS exposes the selfhosted param, and deploys kubeadm to master
nodes.

Change-Id: I5ad1b593a711ffe353b012394d54044dede0691d
2018-05-14 03:28:31 +00:00
Zuul
12965b1615 Merge "Gate: Dont deploy pip dist package if already installed" 2018-05-13 17:56:53 +00:00
Pete Birley
903ab24b34 Gate: Dont deploy pip dist package if already installed
This PS stops the gate playbook trying to deploy pip via dist
packages if its already deployed.

Change-Id: I8c4f41ad1253c03d523646a6df696e8b115cf528
2018-05-13 15:53:07 +00:00
Pete Birley
80db87033b Gate: stop pulling default images
This PS stops pulling the charts default images, as the make file
target cannot target over-rides - resulting in longer gate runs with
twice as many images pulled than required in some cases.

Change-Id: I04c1d43d6ac9d2f509604709139583b085b406e3
See: https://review.openstack.org/#/c/566738/
2018-05-13 09:40:05 -05:00
Pete Birley
9e0a4fab18 Helm-Toolkit: Update chart metadata and clean top level directory
This PS updates the chart metadata in Helm-Toolkit and also cleans
the top level directory of the chart.

Change-Id: I5319a8970bbdec2e1b0318e687d32d3840a14c50
Depends-On: Ic9610bb2ed07697352bfd5849c717f6e576e3d6c
2018-05-13 08:31:30 -05:00
Zuul
af37e0eb79 Merge "Prometheus: Remove namespace selector for alertmanager discovery" 2018-05-13 00:55:14 +00:00
Pete Birley
0aace1705f Helm-Toolkit: Resolve final deltas between OSH and OSH-Infra
This PS removes the remaining deltas between OSH and OSH-Infra

Change-Id: Ia322b7b62a5b755674d1a244748266e36edcfb8c
2018-05-12 12:48:50 -05:00
Pete Birley
dd92edfb58 Gate: use infra mirror when in infra for kubeadm aio image
This PS uses the infra mirrors in the kubeadm aio build when
running the gate in openstack-infra.

Change-Id: Id9a4bf2b13051dfcf5aea688511da24cd245de9c
2018-05-11 16:43:22 -05:00
Steve Wilkerson
173c4a73ac node-exporter: use endpoints section and lookups to set port
This PS moves node-exporter to use the endpoints section and
lookups to set the ports it serves on.

Change-Id: Id6d71b12e531375e792384ac4410bce74170d033
2018-05-11 20:28:40 +00:00
Chris Wedgwood
227adebe63 fluent-logging: yaml indentation fixes
Change-Id: I46c476714dcd1e9dd6ef9ed82908df5001d1382b
2018-05-11 08:48:21 +00:00
Zuul
0b3307769e Merge "OSH-infra multinode gate rework" 2018-05-10 19:49:42 +00:00
Zuul
f86fa5ae6c Merge "Single node dev deploy gate for osh-infra" 2018-05-10 18:55:04 +00:00
Steve Wilkerson
b492ee54c3 OSH-infra multinode gate rework
This moves to using bash scripts for deploying the charts for the
multinode gates in osh-infra as opposed to using the ansible
chart builder

Change-Id: I2951ccf57250a5e6e272872f2d6f7a81bd11f184
2018-05-10 00:06:04 +00:00
Zuul
c568e226b1 Merge "calico: upgrade to release 2.6.9, update etcd" 2018-05-09 22:55:35 +00:00
Steve Wilkerson
db643c1cdd Single node dev deploy gate for osh-infra
This adds a gate for a single node development deployment for
all charts in openstack-helm-infra

Change-Id: I42e8daf41a7eec428ec3d269adbb5c416d092818
2018-05-09 21:56:06 +00:00
portdirect
0d969910af Kube: Kubernetes v1.10.2 support
This Ps adds support for kubernetes v1.10.2

Change-Id: Ic1db020cc86fa9db78f3f3cfcda92e3291a889a8
2018-05-09 14:22:45 -05:00
Chris Wedgwood
d0f13ceb47 calico: upgrade to release 2.6.9, update etcd
* upgrade to calico 2.6.9 compontents
 * bump etcd minor version

Change-Id: If62a687a12b411e4e81de5d0da5792e55bd1769c
2018-05-08 17:36:32 +00:00
Steve Wilkerson
bf314daad5 Prometheus: Remove namespace selector for alertmanager discovery
This ps removes the namespace selector for discovering alertmanager
instances, as it's not required

Change-Id: Ie4dc40f761096d497293d6d98b2bbb906d382101
2018-05-08 00:24:04 +00:00
Zuul
158b07037c Merge "calico: yaml indentation fixes" 2018-04-28 17:41:38 +00:00
Zuul
9b4252c0f3 Merge "prometheus-alertmanager: yaml indentation fixes" 2018-04-28 17:41:30 +00:00
Sean Eagan
f402171e42 Move to v0.3.1 of kubernetes-entrypoint
Move to v0.3.1 of kubernetes-entrypoint which has 2 breaking changes to
pod dependencies, and also adds support for depending on jobs via
labels.

Change-Id: I2bafc2153ddd46b3833b253a2e7950bccbccf8ed
2018-04-25 12:38:44 -05:00
Zuul
3fe018d7d3 Merge "Update htk-manifest with entrypoint updates" 2018-04-23 22:23:34 +00:00
Zuul
4584b1ab44 Merge "Kubernetes: enable mount propagation" 2018-04-23 00:11:33 +00:00
Zuul
cc06b57b42 Merge "Nagios chart modifications to use prometheus alert metric for monitoring" 2018-04-22 23:25:24 +00:00
Pete Birley
b9edac6148 Kubernetes: enable mount propagation
This PS enables the mount propogation feature gate.

Change-Id: I7a37f45ff6061b144c6f04233712cd84fccb3e83
2018-04-22 15:35:40 -05:00
Pete Birley
39ab1c3b5d Gate: Improve centos support
This PS updates the CentOS Gate.

Change-Id: Ic29b9e5949fb3fb3433802f7933208f3cabfef72
2018-04-20 11:28:36 -05:00
Zuul
330f1787a4 Merge "Grafana: Update dashboards" 2018-04-20 15:00:49 +00:00
Zuul
68ad0da16b Merge "Prometheus: Update Alertmanager discovery, fix rules entry" 2018-04-20 14:58:59 +00:00
Zuul
d669b35be7 Merge "Alert rules in prometheus to support nagios based monitoring via alert metric queries" 2018-04-20 14:54:57 +00:00
Steve Wilkerson
64d8c738d0 Update htk-manifest with entrypoint updates
This updates the htk-manifests with the updates required to use
the updated dependency checking for dynamic dependencies

Change-Id: I696459ca8b29a80a3096a9d33c1a68b1543534c9
2018-04-19 21:55:44 +00:00
Zuul
f059e9a6df Merge "Update curator auth config and actions" 2018-04-19 21:35:08 +00:00
Steve Wilkerson
e0c4469fdf Prometheus: Update Alertmanager discovery, fix rules entry
Updates the service discovery mechanism used by Prometheus to
identify Alertmanager instances to push alerts to. It moves to
use the 'application' label to identify Alertmanager pods instead of
searching for pods by the label 'name', as the previous definition
was resulting in empty results for Alertmanager targets

This also fixes the name of the prometheus label used to track
alerts for kube-controller-manager, as it was defined incorrect
previously

Change-Id: I1fb194550baf803435722e3a01892e49b44259d1
2018-04-19 21:10:29 +00:00