This PS adds a util to return a list of unique hosts for an endpoint,
with the fqdn value returned as the 1st item in the list.
Change-Id: Idaa63fad908f04a2d233e29092f6df30edd55bdb
Signed-off-by: Pete Birley <pete@port.direct>
This is to make sure configmap and job names will not get conflict
if we are trying to activate any nameapce for two diffrent
ceph cluster's client keys
Change-Id: I8360f642a6d25f2af0d7aaea686adefef838821a
This adds an ingress to the Elasticsearch chart, allowing for the
exposure of the Elasticsearch cluster externally if required.
This also removes the node ports from the data and discovery
services, as these ports should not be used beyond service
discovery by the elasticsearch nodes. It moves the node port for
the client service under the network.elasticsearch key to match
the network tree for the other services
Change-Id: Ia989eff87b8c9f112c697ae309bbb971dc699aa5
This PS updates the certificate generation util to return the expiry
time in UTC.
Change-Id: Ic4e6dc6589d937cb8883f9cfcf4bf8b8c56a9628
Signed-off-by: Pete Birley <pete@port.direct>
This updates the endpoints in the apache configuration for
Prometheus to correctly define the file used for http basic auth
to validate the admin user. The Prometheus endpoints restricted to
the admin user specified file for the authbasicprovider, but did
not provide the file used for validating the user. This adds the
file correctly
Change-Id: I8561281236fb1efa2e51af342e30314aae8e5285
This begins to drop metrics from Prometheus scrape configurations.
The metrics dropped are metrics not currently used by any service
that interacts with Prometheus and are not used in any alerting
rules by default. Dropping these metrics reduces the resource use
by Prometheus, as it reduces the total number of time series data
ingested and analyzed by Prometheus
Change-Id: Ia09ddd482da0119167a19e7e4b092879b672c2ec
This PS moves the Etcd chart to OSH-Infra
Story: 2002204
Task: 21732
Change-Id: I571df1239d5f30d8358662d61d2bbbb910659c5b
Signed-off-by: Pete Birley <pete@port.direct>
This PS updates the nagios chart to use the public endpoint for
ldap in the apache config.
Change-Id: Ia7c1881a15fda3100fb006e9cf1d06d22dcd6a8d
Signed-off-by: Pete Birley <pete@port.direct>
This PS adds a function to generate tls certificates from a
CA. It also adds a script to generate a snakeoil ca for dev
and future gating work.
Change-Id: Ic94a9ab5fa3ebb912b507008a6b2f78e16dade67
Signed-off-by: Pete Birley <pete@port.direct>
This adds a ceph developer gate to openstack-helm-infra, which
depends on ceph moving to openstack-helm-infra. This also replaces
the NFS backed storage for the multinode gate with ceph instead
Change-Id: I11268463aa037a2e037217a2dbc89c7432c0d277
This continues the work of moving infrastructure related services
out of openstack-helm, by moving the ceph charts to openstack
helm infra instead.
Change-Id: I306ccd9d494f72a7946a7850f96d5c22f36eb8a0
This patch fixes the bug tracker link in the readme. It is set to
depend on a job definition change in project-config so we can use this
patch to test the new release jobs.
Change-Id: I904be466d69b9ede27950781139d50dcb614384f
This updates the osh-infra charts to use a secret for their
configuration files instead of a configmap, allowing for the
storage of sensitive information
Change-Id: Ia32587162288df0b297c45fd43b55cef381cb064
Helm now tries to update the stable repo when running helm init
by default. This ps adds the flag to prevent this, which is required
when running in airgapped, and some corporate, environments.
This PS adds a previously misssed instance.
Change-Id: I9095863d46e320b6ea486d3837e6aa3c4298046e
Signed-off-by: Pete Birley <pete@port.direct>
This PS bumps the k8s version to that of the current release.
Change-Id: Ife6edac83f6e7639d6142d64aff458450a2e58ff
Signed-off-by: Pete Birley <pete@port.direct>
This PS restores voting to the keystone gate.
Depends-On: https://review.openstack.org/#/c/590018
Change-Id: I62eab2629ca1ff1ae906368dd0556dc0f5235a32
Signed-off-by: Pete Birley <pete@port.direct>
This PS updates helm toolkit, and effected charts in
openstack-helm-infra to use Secrets rather than configmaps for
application configuration, as they in many cases contain sensitive data.
Change-Id: Idd17812437465368e92c9fec0d5b634bbf6dc23a
Signed-off-by: Pete Birley <pete@port.direct>
Helm now tries to update the stable repo when running helm init
by default. This ps adds the flag to prevent this, which is required
when running in airgapped, and some corporate, environments.
Change-Id: I38c487f88d17e9429c30cb03bf2d0f3652f1db99
Signed-off-by: Pete Birley <pete@port.direct>
This PS moves to use the Helm 2.10 release, which brings in a version
of sprig that supports TLS certificate creation from defined CAs.
Change-Id: I80233f8f31727c80bcd667cfa0d851488da39588
Signed-off-by: Pete Birley <pete@port.direct>
This is a mechanically generated patch to switch the documentation
jobs to use the new PTI versions of the jobs as part of the
python3-first goal.
See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html
Change-Id: I5dbb420dfc8231c676ed096bda2ddf6448e3ee0e
Story: #2002586
Task: #24318
This is a mechanically generated patch to complete step 1 of moving
the zuul job settings out of project-config and into each project
repository.
Because there will be a separate patch on each branch, the branch
specifiers for branch-specific jobs have been removed.
Because this patch is generated by a script, there may be some
cosmetic changes to the layout of the YAML file(s) as the contents are
normalized.
See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html
Change-Id: I81e455d1c7d9927d83708932a1ed010ffcc3dcc7
Story: #2002586
Task: #24318
This removes the min_block_duration and max_block_duration flags
from the Prometheus chart, as the suggested best practice is to
use the defaults (2h min, 10% of retention time as max).
This also updates the scrape target configuration for cadvisor to
match the upstream example endpoint for kubernetes versions 1.7.3
and later
Change-Id: I200969d6c4da9d17d0a7d3a34a114ccc5f5ee70f
This PS adds releasenotes to EXCLUDES in the Makefile so that
it is not treated as a chart. This change is a part of [0],
required to make that patchset run in the gates.
[0] Ib9253611df08257f2b418a0d9e5e817a232c011b
Change-Id: I335a08a0add647b17d9438b0c561f556b6130e66
Needed-By: Ib9253611df08257f2b418a0d9e5e817a232c011b
This updates the grafana dashboards to use a default refresh
value of 5m to prevent dashboards with intensive queries (like the
container dashboard) from submitting frequent, expensive requests
to Prometheus
This also removes the override to disable the ingress service for
grafana in the developer deployment script, as it was overlooked
when enabling ingresses after the ingress chart was introduced
Change-Id: I0958a3978cec25a1350172cbe75996f1346858c5
This updates Fluentd to use the stable v1.2 debian fluentd
image instead of the kolla image. This images comes bundled
with the elasticsearch plugin, and provides more
flexibility in configuring the buffer behavior of the output
plugins
Change-Id: Id446ef1e050f5d9c005c94dae661cf9ae88fffea
This updates the Prometheus version to 2.3.2, which includes a fix
for memory leak issues with the kubernetes client and also adds a
dashboard for evaluating prometheus rule evaluation performance
Change-Id: I7b9e7bee114fa149db3733c0dacfefae36be7fa8
