21 Commits

Author SHA1 Message Date
Roy Tang (rt7380)
85bd731562 Expose Anti-Affinity Weight Setting
This ps exposes the anti-affinity weight value, including
default, that will be consumed by the updated htk function.

Change-Id: Id8eb303674764ef8b0664f62040723aaf77e0a54
2019-05-14 17:04:52 -05:00
Meg Heisler
e1f2a3cf78 Fix broken network policy check/gate
This adds a basic egress policy to the charts run by the
network-policy check. A change was recently merged requiring
the eggress tag to be in the chart but did not add it, this
addresses that

Change-Id: I60669c9351db7854cba8c69723eb783a966d2a56
2019-05-10 05:55:22 +00:00
Zuul
d738cd5e91 Merge "Mariadb: Disable monitoring by default" 2019-04-16 21:26:40 +00:00
Steve Wilkerson
380bc3a892 Mariadb: Disable monitoring by default
This moves the mariadb chart back to disabling the prometheus
exporter by default

Change-Id: I04a10e9733f98387f0502ed76fa926bacaedb7e4
2019-04-09 13:29:57 -05:00
Steve Wilkerson
a63f3b3662 MariaDB: Add network policy template for mysql exporter
This adds the network policy template and overrides for the mysql
prometheus exporter.

Change-Id: I83b526d11fe25f45b02a7e797b785b8ad59c7848
2019-04-09 12:16:22 -05:00
Zuul
c77dc230f4 Merge "Fix mysqldump default option" 2019-04-09 03:49:38 +00:00
Pete Birley
75b823e875 MariaDB: Clean up values file and exporter start script
This PS cleans up the default values file, and also allows some
aspects of the mysql exporter's operation to be configured.

Change-Id: I577e3237ca0bfe3665e7a57cf2a9364baea7c24a
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-07 15:13:05 +00:00
Pete Birley
137b60e599 MariaDB: add basic sanity test
This PS adds a basic sanity test to the mariadb chart, using
mysqlslap.

Change-Id: I7450ea8a66364d123022bc773ee90047f9e69b1c
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-06 13:18:41 -04:00
Pete Birley
3478106e56 Mariadb: Add security policy functions
This PS adds security policy functions to mariadb.

Change-Id: Ic0f035e0281281fb3f2977ea130385f65c9a04e4
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-06 03:16:43 +00:00
Koffi Nogbe
3a686f854a Fix mysqldump default option
* Remove --skip-opt from the default option because it is not
    porting auto_increment option to the dump

Change-Id: I45f38b303be893803dde244921f50f5dcb1d865d
2019-04-04 12:01:10 +00:00
Pete Birley
8863bcfc11 Mariadb: move to mariabackup as wsrep sst method
This PS moves mariadb to use mariabackup as the wsrep sst method.

Change-Id: Icc1c27d72a3bee5aaa091cdf3ca6cff0c5509f30
Signed-off-by: Pete Birley <pete@port.direct>
2019-04-02 09:57:46 -05:00
Koffi Nogbe
2379b94b3d Add mariadb backup capability to mariadb chart
* backup script for mariadb
 * restore script for mariadb
 * cronjob to control backup automation for mariadb
 * add parameters to values.yaml

Change-Id: Ib0b6744f519ea1919507df0c2a50b45b27ac86ab
2019-03-30 22:34:14 +00:00
Gupta, Sangeet (sg774j)
c7b1f8b50d MARIADB: Job failure policy
Added backoffLimit to exporter-create-sql-user job so that it
keeps retrying to restart the pod incase of an error. Also added
activeDeadlineSeconds for the pod created by this job to terminate
if it does not become ready in one hour.

Change-Id: Ib6214a887f959fed84108884c8d286624d2f164f
2019-03-18 12:40:43 +00:00
Steve Wilkerson
4d170bea32 MariaDB: Remove unused exporter password credentials
This removes auth credentials from the mariadb exporter endpoint,
as the credentials used for the actual user are consumed from
the oslo_db endpoint instead.

Change-Id: I1419f50b7e0059763588028b55c982ad83446a33
2019-02-02 10:55:00 -06:00
Steve Wilkerson
530e765815 Mariadb: Add security context for mysql exporter pod/container
This adds a security context to the mysql prometheus exporter pod,
which changes the user from root to the nobody user (uid 99 here)
instead

This also adds the container security context to explicitly set
allowPrivilegeEscalation to false

Change-Id: I5ddebb059e3c31c231fdc4c24190a65f23e37785
2019-01-03 16:15:47 -06:00
Pete Birley
0bf3674539 Revert "Add Egress Helm-toolkit function & enforce the nework policy at OSH-INFRA"
This reverts commit 8d33a2911cda0c9e88406b9eeacbd8dfa70286f2.

Change-Id: Ic861b9bf9b337449b47a3558da8355e7a5bcacee
2018-12-16 04:21:46 +00:00
Mike Pham
8d33a2911c Add Egress Helm-toolkit function & enforce the nework policy at OSH-INFRA
This PS implements the helm toolkit function to generate the
Egress in kubernetes network policy manifest based on overrideable values.
It also enbale the K8s network policy at Osh-infra gate.

Change-Id: Icbe2a18c98dba795d15398dcdcac64228f6a7b4c
2018-12-14 16:32:40 -05:00
Pete Birley
f6e84fe15f MariaDB: Galera cluster refactor
This PS updates the MariaDB chart to better support clustering,
using a configmap to track cluster state.

Change-Id: Ifd9c3d63353a9b587384b6f13c0863ecc4fbd956
Signed-off-by: Pete Birley <pete@port.direct>
2018-10-25 06:21:01 +00:00
Chris Wedgwood
8dad346f3f [MariaDB] Bump to version 10.2.18 to avoid shutdown hangs
We see sporadic shutdown hangs that look to be the issue described at
https://jira.mariadb.org/browse/MDEV-15554

Upgrade minor version to address this.

Change-Id: Idf8403b44e871b5a32173bd153a8367519b239ec
2018-10-16 21:30:22 +00:00
Tin Lam
92e68d33ea Add network policy toolkit function
This patch set implements the helm toolkit function to generate a
kubernetes network policy manifest based on overrideable values.
This also adds a chart that shuts down all the ingress and egress
traffics in the namespace. This can be used to ensure the
whitelisted network policy works as intended.

Additionally, implementation is done for some infrastructure charts.

Change-Id: I78e87ef3276e948ae4dd2eb462b4b8012251c8c8
Co-Authored-By: Mike Pham <tp6510@att.com>
Signed-off-by: Tin Lam <tin@irrational.io>
2018-10-15 13:50:50 +00:00
Steve Wilkerson
93630ac6e3 MariaDB: Move chart to openstack-helm-infra
This moves the mariadb chart to openstack-helm-infra as part of
the effort to move charts to the appropriate repositories

Change-Id: Ife56e28de46c536108cebb4f4cdf6bad2a415289
Story: 2002204
Task: 21725
2018-09-04 18:57:53 -05:00