3380 Commits

Author SHA1 Message Date
aw4825
ff2d317064 Removed additional checks from Elasicsearch Helm test
This test (create and remove test index) already validates that elasticsearch is working correctly. Removed additional check for repo verification for external service like S3 as this seems out of scope since this can be configured differently and causes test to fail.

Change-Id: Ic9328b204c82bdf0e328370d7060a265210c9e8a
2021-06-16 13:34:02 -05:00
Parsons, Cliff (cp769u)
d9404f89c2 Enable Ceph CSI Provisioner to Stand Alone
The current implementation of the Ceph CSI provisioner is tied too
closely with the older Ceph RBD provisioner, which doesn't let the
deployer deploy Ceph CSI provisioner without the old RBD provisioner.

This patchset will decouple them such that they can be deployed
independently from one another.

A few other changes are needed as well:
1) The deployment/gate scripts are updated so that the old RBD and
   CSI RBD provisioners are separately enabled/disabled as needed.
   The original RBD provisioner is now deprecated.
2) Ceph-mon chart is updated because it had some RBD storageclass
   data in values.yaml that is not needed for ceph-mon deployment.
3) Fixed a couple of bugs in job-cephfs-client-key.yaml where RBD
   parameters were being used instead of cephfs parameters.

Change-Id: Icb5f78dcefa51990baf1b6d92411eb641c2ea9e2
2021-06-15 14:48:09 +00:00
Zuul
bd17d4b849 Merge "Add manual mode to the created backup file name" 2021-06-11 17:06:25 +00:00
Gayathri Devi Kathiri
6d4dcc2474 Add manual mode to the created backup file name
This PS helps us understand the mode of backup taken
from the created backup file name.

Supporting PS: https://review.opendev.org/c/airship/porthole/+/793591

Change-Id: I96c8b856fc309381f8d956eaae248bfc3443d900
2021-06-11 14:10:41 +00:00
Haider, Nafiz (nh532m)
5c8bd68e76 rabbitmq: Add TLS support to helm test
Add http and https toggling to helm test for TLS

Change-Id: Ia01fc793d090a7d1cb97e2fd7dacaaa6edbad8d0
2021-06-10 21:13:09 +00:00
jinyuanliu
2e80509e0f Uplift ingress to 0.42.0
- Uplifts the image to nginx 0.42.0 to address CVEs
- Adds labels needed for nginx 0.42.0
- Updates release notes for ingress

Change-Id: I133d6d30d4a68628ee516f5896780cc8096ffd1f
2021-06-09 07:48:54 +00:00
Gupta, Sangeet (sg774j)
e1990e399f rabbitmq: Set separate for HTTPS
Additionally, add TLS to prometheus exporter.

Change-Id: I6b46d2274a57d07c9967321abaa1077a1e8b4da2
2021-06-09 03:50:06 +00:00
Zuul
c8dbd3d47d Merge "Prepending library/ to docker official images" 2021-06-09 03:17:21 +00:00
Zuul
2b20674cad Merge "docs: Update Freenode to OFTC" 2021-06-04 17:08:36 +00:00
Thiago Brito
5a0ba49d50 Prepending library/ to docker official images
This will ease mirroring capabilities for the docker official images.

Signed-off-by: Thiago Brito <thiago.brito@windriver.com>
Change-Id: I0f9177b0b83e4fad599ae0c3f3820202bf1d450d
2021-06-02 15:04:38 -03:00
Zuul
facd41d0f7 Merge "rabbitmq: Make helm test work with TLS" 2021-06-02 16:50:23 +00:00
jinyuanliu
a152194ee7 docs: Update Freenode to OFTC
http://lists.openstack.org/pipermail/openstack-discuss/2021-May/022780.html
Change-Id: I7a956b0136083eefee14a2b751f8b44aa50b6ab9
2021-06-02 01:52:39 +00:00
Sangeet Gupta
2a11071e8b rabbitmq: Make helm test work with TLS
Update helm test pod and script to use TLS certificates.

Change-Id: Ic599014227ad63303bdc2758862f02dcefec66c7
2021-06-01 17:11:56 +00:00
Parsons, Cliff (cp769u)
17d9fe4de9 Refactor Ceph OSD Init Scripts - Second PS
1) Removed some remaining unsupported ceph-disk related code.
2) Refactored the code that determines when a disk should be
   zapped. Now there will be only one place where disk_zap is
   called.
3) Refactored the code that determines when LVM prepare should
   be called.
4) Improved the logging within the OSD init files

Change-Id: I194c82985f1f71b30d172f9e41438fa814500601
2021-05-27 22:34:54 +00:00
Stephen Taylor
948e07e151 [ceph-rgw] Add placement target delete support to RGW
A new "delete" value has been added to the ceph-rgw placement
target spec to allow existing placement targets to be deleted in a
brownfield deployment. For deployments where a deleted placement
target does not exist, the placement target will be created and
deleted in a single step.

Change-Id: I34e6d97543b63848b267332556b62d50d1865f49
2021-05-25 19:49:27 +00:00
Zuul
5b2e007d7a Merge "feat(tls): Enable TLS for OpenStack RabbitMQ" 2021-05-25 16:31:30 +00:00
Zuul
379ea64572 Merge "[ceph-client] Add pool delete support for Ceph pools" 2021-05-25 14:22:57 +00:00
Zuul
72b836b3ba Merge "Remove panko residue" 2021-05-25 02:26:46 +00:00
Zuul
0189967a25 Merge "Unpin cmd2 package in pip" 2021-05-24 22:47:13 +00:00
Zuul
0ec5521c49 Merge "Update all jobs to at least Train" 2021-05-24 22:42:31 +00:00
Stephen Taylor
bcc31f9821 [ceph-client] Add pool delete support for Ceph pools
Two new values, "delete" and "delete_all_pool_data," have been
added to the Ceph pool spec to allow existing pools to be deleted
in a brownfield deployment. For deployments where a pool does not
exist, either for greenfield or because it has been deleted
previously, the pool will be created and then deleted in a single
step.

Change-Id: Ic22acf02ae2e02e03b834e187d8a6a1fa58249e7
2021-05-24 19:25:18 +00:00
Radhika Pai
38e9e187dd Change image key name for blackbox exporter
This ps change the key name for the blackbox exporter so that
it is consistent with the naming convention of other prometheus
exporters.

Co-authored-by: Chi Lo <cl566n@att.com>

Change-Id: Ia190aa6730fab99d7fb14c53b538c72a1bc698ce
2021-05-24 10:25:01 -07:00
Haider, Nafiz (nh532m)
2dc83fdde7 feat(tls): Enable TLS for OpenStack RabbitMQ
Enable TLS for Openstack RabbitMQ upstream

Co-authored-by: Sangeet Gupta <sg774j@att.com>

Change-Id: I7c08d41b212bc5095facf5f5823521fbfa4d3c47
2021-05-21 12:36:23 +00:00
Zuul
9111ae750e Merge "Update Grafana version and Selenium script" 2021-05-19 15:44:11 +00:00
Pai, Radhika
bfeb4255a0 Update Grafana version and Selenium script
This ps updates the version to 7.4.5
The css element in GUI has changed in the new Grafana version , so updated
 the selenium script to find the right element.

Change-Id: I972fddf73719fb5bef821679a5ab07491edf55ff
2021-05-18 15:01:16 -05:00
jinyuanliu
7baceae82f Remove panko residue
About panko chart,It's been removed.

Change-Id: I781f42f11e1bfc26537d393c527e34c66d29d0cf
2021-05-18 11:01:40 +08:00
Zuul
bbe6c506af Merge "fix(yaml): corrects Charts.yaml reference" 2021-05-17 19:24:36 +00:00
Zuul
136c449730 Merge "Remove env variable from s3 bucket job" 2021-05-17 19:24:32 +00:00
Tin
ef542612eb fix(yaml): corrects Charts.yaml reference
This patch set fixes a wrong source reference in Charts.yaml
in the k8s-keystone-webhook chart.

Change-Id: I51b3b0bec6641a92ccc1b9002d8daef128963c8c
Signed-off-by: Tin <tin@irrational.io>
2021-05-17 02:09:37 -05:00
Lo, Chi (cl566n)
f7fde88b6e Remove env variable from s3 bucket job
Remove the TLS_OPTION env from helm-toolkit s3-bucket job. There
can be different option for tls connection, depending on whether
the rgw server is local or remote. This change allows the
create-s3-bucket script to customize its connection argument
which can be pulled from values.yaml.

Change-Id: I2a34c1698e02cd71905bc6ef66f4aefcd5e25e44
2021-05-14 15:12:15 -07:00
Zuul
6c861be272 Merge "Remove deprecated svc annotation tolerate-unready-endpoints" 2021-05-13 02:47:13 +00:00
Zuul
6b42fd5bf4 Merge "Secure ingress path for Grafana and Kibana" 2021-05-12 20:23:31 +00:00
Zuul
dd39a0f7e0 Merge "[ceph-client] Add pool rename support for Ceph pools" 2021-05-12 18:28:17 +00:00
Lo, Chi (cl566n)
181cbf5599 Secure ingress path for Grafana and Kibana
The change enables TLS for the ingress path of
Grafana and Kibana.

Change-Id: I1bca5a3d78421873bff275d315ec0cca6682a498
2021-05-12 08:50:28 -07:00
Zuul
5ea515c650 Merge "Deploy newer ansible version" 2021-05-12 09:54:31 +00:00
Stephen Taylor
9f3b9f4f56 [ceph-client] Add pool rename support for Ceph pools
A new value "rename" has been added to the Ceph pool spec to allow
pools to be renamed in a brownfield deployment. For greenfield the
pool will be created and renamed in a single deployment step, and
for a brownfield deployment in which the pool has already been
renamed previously no changes will be made to pool names.

Change-Id: I3fba88d2f94e1c7102af91f18343346a72872fde
2021-05-11 14:56:06 -06:00
Parsons, Cliff (cp769u)
d4f253ef9f Make Ceph pool init job consistent with helm test
The current pool init job only allows the finding of PGs in the
"peering" or "activating" (or active) states, but it should also
allow the other possible states that can occur while the PG
autoscaler is running ("unknown" and "creating" and "recover").
The helm test is already allowing these states, so the pool init
job is being changed to also allow them to be consistent.

Change-Id: Ib2c19a459c6a30988e3348f8d073413ed687f98b
2021-05-11 15:38:18 +00:00
Samuel Liu
0f1974f1c0 Remove deprecated svc annotation tolerate-unready-endpoints
Since k8s v1.11+, the annotation `service.alpha.kubernetes.io/tolerate-unready-endpoints` is deprecated.  we should use Service.spec.publishNotReadyAddresses instead.

Change-Id: Ic4f82b8e78770ff29637937c4bcb9af71b53f8d3
2021-05-11 07:10:10 +00:00
Zuul
6dd39da6ad Merge "Prevent mariadb from split brain while cluster is in reboot state" 2021-05-07 19:37:56 +00:00
Roy Tang
5a8aabaee3 Prevent mariadb from split brain while cluster is in reboot state
The current start logic when existing cluster state is reboot can
lead to a split brain condition under certain circumstances.  This
patchset adds some additional step to ensure cluster is set to
live state once leader node is ready to start, instead of relying
on slave nodes to handle.  Also add some simple retry when there
is collision detected while trying to write to configmap.

The existing hair-trigger that will put the cluster state from
"live" into "reboot" can use some fine tuning, but updating it
properly should require additional investigation and testing,
hence should be done as a separate activity outside the scope
of this patchset.

Change-Id: Ieb2861d6fbc435e24e20d13c7b358c751890b4c4
2021-05-05 17:33:20 -04:00
Chinasubbareddy Mallavarapu
4eee89ccba [ceph-mon] Fix python3 issue for util scripts
This is to update python3 for checkObjectReplication.py script
since python2 got removed from ceph images.

Change-Id: I006a4becaeefb2a0cbef6f5d1fb56c7fc40b0170
2021-05-05 14:17:45 +00:00
Zuul
31932af08c Merge "Remove tiller residue" 2021-05-05 06:04:45 +00:00
Zuul
0362534328 Merge "Enable TLS for Elasticsearch" 2021-05-04 21:31:57 +00:00
jinyuanliu
65a3a6d9f3 Remove tiller residue
About tiller chart,It's been removed,remove releasenote now.

Change-Id: I6fd40d7037923130e124f654bb68982a9e6623b3
2021-05-04 15:11:16 +08:00
Zuul
b5c4bfb8e7 Merge "chore(tiller): removes tiller chart" 2021-05-04 03:32:35 +00:00
Lo, Chi (cl566n)
fd4bf57211 Enable TLS for Elasticsearch
The change enables:

(1) TLS for the Elasticsearch transport networking layer. The
    transport networking layer is used for internal communication
    between nodes in a cluster.

(2) TLS path between Elasticsearch and Ceph-rgw host.

Change-Id: Ifb6cb5db19bc5db2c8cb914f6a5887cf3d0f9434
2021-05-03 19:39:32 -07:00
Gage Hugo
724c6e126b Deploy newer ansible version
We previously pinned the version of ansible that was ran at the gate
due to issues that are no longer impacting us. This change updates
the version of ansible that is deployed in the gate to something
more recent.

Change-Id: I47773eb385ef1b290d1548e8512fda1fec3cac60
2021-05-03 22:26:25 +00:00
Gage Hugo
62ef04afb1 Unpin cmd2 package in pip
The cmd2 package was pinned in order to maintain compatability,
however quite a bit of time has passed since doing so. This change
unpins cmd2 to use the latest version.

Change-Id: I2b9c8d4c1da91b55301d818861d29cccb64b28cd
2021-05-03 16:25:59 -05:00
yangyawei
49b19be33e setup.cfg: Replace dashes with underscores
Setuptools v54.1.0 introduces a warning that the use of dash-separated
options in 'setup.cfg' will not be supported in a future version [1].
Get ahead of the issue by replacing the dashes with underscores. Without
this, we see 'UserWarning' messages like the following on new enough
versions of setuptools:

  UserWarning: Usage of dash-separated 'description-file' will not be
  supported in future versions. Please use the underscore name
  'description_file' instead

[1] https://github.com/pypa/setuptools/commit/a2e9ae4cb

Change-Id: I238b4e0ca237bca97236004856596002d088220c
2021-05-03 09:08:01 +08:00
Gage Hugo
2cc86d4bed Update all jobs to at least Train
With the removal of official support of all openstack releases
older than T, this change updates each job to at least use the
Train release.

Change-Id: I6b41d79495a74b1072995ae5036f56bfbf585c25
2021-04-30 14:44:26 -05:00