This adds test specific timeout to all LMA components in
Armada. This also removes test enabled true because
Armada enables tests by default
Change-Id: I893342b36ba27cbe7d3ce8767f73795e84a11732
This fixes the ceph deployment in the apparmor job as the previous
overrides weren't entirely correct. This also reorders the
deployment steps in the apparmor job to enforce the sequential
naming scheme used
Change-Id: I161bae649d4ff67307abeadc12b3c7d321af31c7
This updates the airship-divingbell repository defined in the
single node check job to use the correct repository namespace.
This also updates the divingbell check job to use the standard
osh-infra-gate-runner playbook as well as the minikube based
kubernetes deployment
Change-Id: Iff53279b3e09058deb323d092955cbf87230b5e5
This PS adds the security context macros to the grafana chart,
and moves the default to read-only-rootfs for all containers
Change-Id: Ie79e3bfc6af07b16cd53eddae17eceac3d9f8613
This PS updates the create-mysql-user.sh to display the error
if the exporter user was not created successfully.
Change-Id: I03505b5fb569cda199c2803086b77206b810ea3f
This updates the ceph-rgw chart to include the pod
security context on the pod template
This also adds the container security context
Change-Id: Ic75a1decfe156e1e8aa2ebe38238f6b77abb71f8
This PS remvoes the stable helm repo, if present, to improve the
build time of patches.
Change-Id: Id6ec86e5ff426994b12adf4ca8e80eda2e52f147
Signed-off-by: Pete Birley <pete@port.direct>
This adds '|| true' to the curl command for gathering metrics from
prometheus exporters in the postrun job. After the move to
minikube for single node jobs, the headless services for the
kubernetes components no longer work as intended. The addition of
'|| true' allows the post run job to continue through the list
of services tied to the prometheus exporters without the task
failing outright
Change-Id: I56f0f56b799c3df9b2bd66a2c2044d71473606e3
This updates the registry chart to include the pod
security context on the pod template
This also adds the container security context
Change-Id: I36b6a2cf291dda2f991843c07ba116f3bf936d03
This PS adds the security context macros to the ceph-client chart,
and moves the default to read-only-rootfs for all containers.
Change-Id: I2fe03f31cc59e1cda2bf0396ae6e3aca5c440a16
Signed-off-by: Pete Birley <pete@port.direct>
This PS updates the ceph charts to make /etc/ceph an emptydir
uniformly across all charts, both ensuring no default config is loaded,
and also permitting read-only filesystems to back the containers.
Additionally /run is uniformly applied across all long running pods
as a memory backed emptydir.
Change-Id: I00d1b15758b7eb4476fb950ddcb38db9a5149ad0
Signed-off-by: Pete Birley <pete@port.direct>
This PS fixes the use of the security context macros for the
calico chart.
Change-Id: I2ed8a5e994726b625d76a2c308895441c7d174a9
Signed-off-by: Pete Birley <pete@port.direct>