1795 Commits

Author SHA1 Message Date
caoyuan
040edeb79a Replace git.openstack.org URLs with opendev.org URLs
Change-Id: I0e3af4a3385f5b2a7705bc19b775863b16c2e08e
2019-05-31 01:52:10 +00:00
Steve Wilkerson
b0706544f7 Elasticsearch: kill process after data node drain
This updates the Elasticsearch entrypoint override for the data
nodes to include a signal to kill the process after the trap to
drain each data node completes

Change-Id: Iccd4342fe16d06787cb24342d9a57e4de12e6980
2019-05-30 15:12:37 -05:00
Zuul
c34dbeeec8 Merge "mariadb: fix hostpath values" 2019-05-30 19:46:15 +00:00
Zuul
f353fc4ab9 Merge "Elasticsearch: Add data node specific entrypoint override" 2019-05-30 19:24:40 +00:00
Zuul
6febe7333c Merge "Elasticsearch: Update client and data pod deps" 2019-05-30 18:52:51 +00:00
Zuul
62576654a6 Merge "Fluentd: Use OSH Fluentd image with systemd plugin" 2019-05-30 17:47:41 +00:00
Steve Wilkerson
d334c5b68a Elasticsearch: Update client and data pod deps
This updates the Elasticsearch client and data pod dependencies
to allow for sequential bring up of the cluster components. As
we want the order to be master->client->data, we add the discovery
service endpoint as a dependency for the client pods and add both
the discovery and client service endpoints as dependencies for
the data pods

Change-Id: Iec6d6f259dc8b7b4f2309b492409cc0e5feab669
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-05-30 15:28:59 +00:00
Steve Wilkerson
1b5cb4bea2 Fluentd: Use OSH Fluentd image with systemd plugin
This updates the default fluentd image to use the fluentd image
built with the systemd input plugin from the openstack-helm-images
repository

Change-Id: I7c75cd19d62f3dbc3fa4708642119f1781e58677
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-05-30 15:28:37 +00:00
Steve Wilkerson
0a8b710083 Elasticsearch: Add job history to Curator, update schedule key
This updates the Elastic Curator cron job to include configuration
for successful and failed job history limits, similar to the other
cron jobs we deploy. This also moves the key for configuring the
cron schedule from under .Values.conf.curator to a new top level
jobs key to maintain consistency

This also fixes an indentation issue with the deployment overrides
for Curator as well as adds the overrides for the Armada job

Change-Id: I9c720df9677215bdd2bf18be77959bd5f671c0ca
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-05-30 15:28:30 +00:00
Steve Wilkerson
91178c31bf Elasticsearch: Add data node specific entrypoint override
This updates the Elasticsearch chart to include a specific start
script for the Elasticsearch data nodes that includes a trap on
signals that removes a data node from allocation eligible nodes
before shutting down.  This results in all shards being moved from
a node on shut down to alleviate issues with planned down nodes,
such as during upgrade scenarios

Change-Id: I22f4957f90e4113831a8ddf48691cb14f811c1e5
2019-05-30 10:25:03 -05:00
RAHUL KHIYANI
789fa7a4e5 Ceph-client: Fix security context for pod/container
This changes the  user from root to the nobody user instead
in ceph-client chart wherever needed

Change-Id: I4c56b97f85093bbbaaef617f1981f67215a8bc00
2019-05-29 15:32:28 +00:00
Steve Wilkerson
8cb4051fc8 Elasticsearch: Fix typos in cluster wait script
This fixes typos in the cluster wait script to ensure the messages
reflect the types of nodes being checked

Change-Id: I5964b5517b3099fbfe8d574b2ca869d366c9bb17
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-05-29 09:58:44 -05:00
Itxaka
ce086f7e41
mariadb: fix hostpath values
Use the correct declaration of the hostpath

Change-Id: I7661083ad24abfb8469700ab2039b4b7be5dd681
2019-05-29 14:06:21 +02:00
Doug Aaser
9efb353b83 Patroni inclusion work for HA Postgres
This patchset aims to add HA Clustering support for Postgres. HA Clustering
provides automatic failover in the event of the database going down in addition
to keeping replicas of the database for rebuilding in the event of a node
going down. To achieve this clustering we use
[Patroni](https://github.com/zalando/patroni) which offers HA clustering
support for Postgres.

Patroni is a daemon that runs in the background and keeps track of which
node in your cluster is currently the leader node and routes all traffic
on the Postgresql endpoint to that node. If the leader node goes down,
Patroni holds an election to chose a new leader and updates the endpoint
to route traffic accordingly. All communication between nodes is done by
a Patroni created endpoint, seperate from the externally facing Postgres
endpoint.

Note that, although the postgresql helm chart can be upgraded from
non-patroni to patroni clustering, the previous `postgresql`
endpoints object (which is not directly managed by helm) must be
deleted via an out-of-band mechanism so that it may be replaced by the
patroni-managed endpoints.  If Postgres itself is leveraged for the
deployment process, this must be done with careful timing.  Note that
the old endpoints had a port named "db", and the new endpoints has
a port named "postgresql".

- Picking up patchset: https://review.openstack.org/#/c/591663

Co-authored-by: Tony Sorrentino <as1413@att.com>
Co-authored-by: Randeep Jalli <rj2083@att.com>
Co-authored-by: Pete Birley <pete@port.direct>
Co-authored-by: Matt McEuen <mm9745@att.com>

Change-Id: I721b745017dc1ea7ae05dfd9f8d5dd08d0965985
2019-05-28 19:13:13 +00:00
Zuul
630efb7fb0 Merge "Fluentd: Support Daemonset deployment" 2019-05-28 17:50:43 +00:00
Zuul
0513501201 Merge "Fix python template" 2019-05-28 17:39:25 +00:00
Steve Wilkerson
bdaf866a4e Fluentd: Support Daemonset deployment
This adds required changes to the Fluentd chart to allow for
deploying Fluentd as either a deployment or a daemonset. This
follows the pattern laid out by the ingress chart. This also
updates the single and multinode jobs to deploy fluentd as both
a daemonset and a deployment for validation

Change-Id: I84353a2daa2ce56ff59882a8d33203286ed27e06
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-05-28 08:23:44 -05:00
Jean-Philippe Evrard
ed200cb3b0 Wait for pods for openstack-support scenario
The wait for pods is not consistently used in the
openstack-support scenario.

This is a problem, as some helm charts deploys are
basically masking issues that can arise.

This should fix it.

Change-Id: Ib3e8f16bea701bf20375d4deec7c7869e7bf85c2
2019-05-28 07:51:34 +00:00
Zuul
fd2eb31920 Merge "fix typo errors" 2019-05-27 17:05:26 +00:00
Tin Lam
6bae1b020d Fix python template
This patch set removes an unused import that is not python3 compatible.

Change-Id: I360989c8eb23065d8e655d4583eb97338244412d
Signed-off-by: Tin Lam <tin@irrational.io>
2019-05-26 21:43:19 +00:00
Zuul
5cb47aed80 Merge "Separate fluentbit and fluentd charts" 2019-05-24 17:34:27 +00:00
Zuul
a12892f724 Merge "Ceph-rgw: Fix securityContext" 2019-05-24 15:44:00 +00:00
Tin Lam
752bbf48c4 Migrate ubuntu jobs from Xenial to Bionic
This patch set is based on [0] that also fixed up a handful of Bionic-
specific changes required for the gates to pass.

[0] https://review.openstack.org/#/c/649698/

Co-Authored-By: ghanshyam <gmann@ghanshyammann.com>

Change-Id: I217a27c53eec2a51ddbea7226a23042558c5946b
2019-05-24 13:52:08 +00:00
Steve Wilkerson
abb5e0f713 Separate fluentbit and fluentd charts
This begins to split the fluent-logging chart into two separate
charts, one for fluentbit and one for fluentd. This is to help
isolate each chart and its dependencies better, and to treat each
service as its own entity.

This also moves the job for creating Elasticsearch templates to
the Elasticsearch chart, as the elasticsearch chart should have
ownership of creating the templates for its indices.

This also performs some general cleanup of values keys that are
not currently used

Change-Id: I827277d5faa62b8b59c5960330703d23c297ca47
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-05-24 06:31:09 -05:00
Zuul
1a3788ddf1 Merge "CephFs-provisioner: fix securitycontext in the pod" 2019-05-24 03:08:04 +00:00
Zuul
ff2d62c9bf Merge "Fluent-logging: Remove utils for generating configuration files" 2019-05-24 03:08:03 +00:00
Zuul
2de8acf4a4 Merge "Fluentd: Update ClusterRole object" 2019-05-24 03:08:01 +00:00
Zuul
96af0f1567 Merge "Elasticsearch: Remove LoadBalancer type service" 2019-05-24 00:04:52 +00:00
Zuul
31f840b52b Merge "Add statefulset update strategy to elasticsearch data statefulset" 2019-05-24 00:04:50 +00:00
RAHUL KHIYANI
56ff59a0ea Ceph-rgw: Fix securityContext
Change-Id: I3ff9e4567cf223d1c6823b00086b4635b424b148
allowPrivilegeEscalation: true to allowPrivilegeEscalation: false
2019-05-23 23:06:11 +00:00
Zuul
f4e096ced1 Merge "Fluent-logging: Fix read-only-fs" 2019-05-23 22:06:48 +00:00
Steve Wilkerson
36d03133f8 Add statefulset update strategy to elasticsearch data statefulset
This adds the helm-toolkit function for defining the update
strategy for the elasticsearch-data statefulset and sets the chart
default to RollingUpdate

Change-Id: Ia10ea7bf000474e597bdb36778118a96d85b93c1
2019-05-23 22:05:06 +00:00
Steve Wilkerson
e2c9c367fa Fluentd: Update ClusterRole object
This updates the ClusterRole object for fluentd by removing a
duplicate rules: key and also adds 'get' to the list of verbs for
the "" apiGroups (as it's required for the kubernetes metadata
plugin)

Change-Id: Ia901d9fe9a0784038f0f882297c64afcce58ca7e
2019-05-23 22:04:26 +00:00
Chinasubbareddy Mallavarapu
cb767a5694 CephFs-provisioner: fix securitycontext in the pod
This is to update correct user id in security context for
cephfs provisoner pod as there is  no user with 99 exist
in the container.

Change-Id: I1bbe46df555b35b8afe636327fa83015fd784db0
2019-05-23 22:03:41 +00:00
Zuul
038a6e58ae Merge "CephFs-provisioner: fix cephfs storageclass" 2019-05-23 22:02:58 +00:00
Zuul
66f62aff40 Merge "Elasticsearch: Use openstackhelm elasticsearch-s3 image as default" 2019-05-23 22:02:56 +00:00
Zuul
c9b55fefac Merge "Fix helm-toolkit snippet for statefulset updates" 2019-05-23 22:02:55 +00:00
Steve Wilkerson
b44d99b36a Fluent-logging: Remove utils for generating configuration files
This removes the utilities for generating the fluentd, fluentbit,
and parser configuration files from yaml and moves to instead
consume the configuration files as strings from the values.yaml.

This allows for easier creation and maintenance of configuration
files for fluentd and fluentbit, as the utilities became unwieldy
with complex configuration files.

This necessitated the removal of the core test executed by the
charts helm tests, but this would be required as we move to split
the charts regardless

Change-Id: Ied4a76bbdf58b54a6d702db04a7120b64f54dcac
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-05-23 13:06:19 -05:00
Steve Wilkerson
65f60a3893 Elasticsearch: Use openstackhelm elasticsearch-s3 image as default
This updates the Elasticsearch chart to use the elasticsearch-s3
image built from the openstack-helm-images Dockerfile instead of
using the previous image from a personal repository

Change-Id: I4d6b18aea11920de33ce1f4b63d39c18cd2b98d3
2019-05-23 12:55:04 -05:00
Chinasubbareddy Mallavarapu
53bdbf00ed CephFs-provisioner: fix cephfs storageclass
This is to remove invalid key "userSecretName" for
cephfs storageclass as we are having toruble to provision
a pvc with cephfs storageclass with "userSecretName" key .

Failed to provision volume with StorageClass
"cephfs": invalid option "userSecretName"

Change-Id: Ide52987c9f8ef8fc2327bf30747395e70dc05f99
2019-05-23 11:41:44 -05:00
Zuul
85c03c422e Merge "Add docker-default (enforce) AppArmor profile to openvswitch" 2019-05-23 15:05:53 +00:00
Zuul
8731166dbf Merge "Mariadb: Correct parameter name" 2019-05-23 14:19:14 +00:00
Zuul
c3acf282a3 Merge "Point to OSH-images images" 2019-05-23 14:19:12 +00:00
Jaesang Lee
9ddc98746c rabbitmq: set hostPath for rabbitmq-data
In an Edge environment without a distributed storage environment, it
should be able to store rabbitmq data in the local path as well.

This patch added an option to use it in a more diverse environment.

Change-Id: Ia3c0dfaa58c237e424197f1406bd66fb991bea18
Story: 2005753
Task: 33455
2019-05-23 01:04:54 +00:00
sg774j
ac640f273a Mariadb: Correct parameter name
Changed use_local_path_for_single_pod to use_local_path_for_single_pod_cluster
in values.yaml. It was a bug

Change-Id: I88c3fe6c2bbab87baec3ec7d1d94501d6fd741eb
2019-05-22 17:33:43 +00:00
Zuul
c01098f396 Merge "Fetch Total_OSD value from ceph-client/values.yaml" 2019-05-22 17:23:49 +00:00
Zuul
9144fdb562 Merge "mysql: set hostpath for mysql-data" 2019-05-21 22:15:58 +00:00
Venkata, Krishna (kv988c)
1ad5857957 Fetch Total_OSD value from
ceph-client/values.yaml

Change-Id: I6af79af0627f85550655f5066dd6278bf0b5365a
2019-05-21 17:15:48 -05:00
Steve Wilkerson
9cefc2c334 Elasticsearch: Remove LoadBalancer type service
This fixes the elasticsearch-logging service by removing the
LoadBalancer type configuration from the service template. This
was mistakenly added in a previous change

Change-Id: Id2f866147c2dcccc10c83bd54094d54cf3bd227b
2019-05-21 12:59:20 -05:00
Itxaka
42d6c2321d
mysql: set hostpath for mysql-data
There is currently an issue with deploying single
pod mysql clusters in which restarting or killing
the pod will result in a crashloopbackoff.
The mysql data is indeed lost and the start script
(thinking the cluster was alive before
due to the grastate configmap) tries to restore
the cluster instead of bootstrapping it.
Due to this, if the mysql pod is killed or restarted
in the CI, we will lose all the mysql data, will not
recover, and this results in a broken environment.

When volume.use_local_path_for_single_pod.enabled value
is set to true, which we will apply on single node/single
pod testing, this patch will deploy a local volume
for mysql at the location specified under
volume.use_local_path_for_single_pod.host_path
The data will be kept intact in case
there is a pod restart, as it can read the data again,
and recover itself.

When it is false, which is the default for non-CI,
nothing changes, and an empty dir is used. This
data WILL be lost upon restart, so it is advised
to use volumes instead for production purposes,
by setting Values.volume.enabled to true.

task: 28729

Change-Id: I6ec0bd1087eb06b92ced7dc56ff5b6a156aad433
2019-05-21 19:41:13 +02:00