This change updates Rook to the 1.13.3 release. It also increases
the memory limit for ceph-mon pods deployed by Rook to prevent
pod restarts due to liveness probe failures that sometimes result
from probes causing ceph-mon pods to hit their memory limit.
Change-Id: Ib7d28fd866a51cbc5ad0d7320ae2ef4a831276aa
The current version of the exporter is outdated, switch to the upstream
+ rename --es.snapshots to --collector.snapshots (v1.7.0) and
--es.cluster_settings to --collector.clustersettings (v1.6.0)
Change-Id: I4b496d859a4764fbec3271817391667a53286acd
This PS adds mariadb-server-primary service that is getting created
and automatically updated based on the leader election process in
start.py entrypoint script.
Change-Id: I1d8a8db0ce8102e5e23f7efdeedd139726ffff28
Signed-off-by: Sergiy Markin <smarkin@mirantis.com>
Due to CVE-2022-4886 the default pathType for an ingress should be
either "Exact" or "Prefix". This allows for more strict path validation by
the admission controller. This PS changes the default pathType to Prefix.
This value can be overridden.
In a separate PS I will add the pathType parameter to the ingressOpts
for all helm charts that create an ingress.
See:
https://github.com/kubernetes/ingress-nginx/issues/10570
Change-Id: I8f1df594f0c86f2de6cdd7cf2ee56637bd508565
We are going to use containerized Openstack client
in test scripts. Adding zuul to the docker group
allows running docker command directly not using sudo.
Change-Id: Iee77e7f2b8801743f95535d31d0b909dcea50bf3
This PS fixed some imcompatibilities of inherited mariadb config with
docker-entrypoint.sh script that is now used to perform initial mariadb
nodes setup and mariadb-upgrade at startup.
Also added x509 requirement for root and audit users
connections.
Change-Id: Ic5ad2e692b64927fc73962fe0cc250a9d682114c
The names of a few configuration variables have changed in version 1.9.
EnableRealIp to EnableRealIP
HttpAccessLogPath to HTTPAccessLogPath
whitelist to allowlist
Whitelist to Allowlist
Additionally,
ajp_temp_path
is no longer valid.
Change-Id: I2ebb658bd237216c43306dab6cd7f7a1ca6388ac
This PS enables auto-upgrade feature from official mariadb docker
entrypoint script.
Also switching mariadb image to the official from docker.io/mariadb
repo and adding temp volime mount to mariadb-server pods created by
mariadb-operator.
Change-Id: Ie3a02e546fd2a56948177b97c009eab35b42776a
This PS adds a possibility to limit (to throttle) the number of
simultaneously uploaded backups while keeping the logic on the client
side using flag files on remote side. The main idea is to have an
ability to limit number of simultaneous remote backups upload sessions.
Change-Id: I5464004d4febfbe20df9cd41ca62ceb9fd6f0c0d
The default rabbitmq image disables metrics collection via the management
api. This is implemented by adding a file named:
/etc/rabbitmq/conf.d/management_agent.disable_metrics_collector.conf
with the contents:
management_agent.disable_metrics_collector = true
The prometheus exporter currently used by osh requires this value to be
false.
This change was introduced when rabbit introduced the integrated
prometheus exporter:
https://github.com/docker-library/rabbitmq/issues/419
Change-Id: I9a94f49a7827bb4725ed3fd98404e637bfefa086
This PS removes mariadb-verify-server sidecar container from
mariadb-backup cronjob in order to make backup process more resilient.
Change-Id: I2517c2de435ead34397ca0483610f511c8035bdf
This PS is to update es curator for elasticsearch v8. Curator 5.x
is not compatible with es v8.
Changes are needed for config.yml:
https://github.com/elastic/curator#new-client-configuration
No changes are required for the actions file.
Change-Id: I6968e22c7ae5f630e1342f47feee0c2c494b767f
For TLS test jobs on Ubuntu Jammy when we run
dnsmasq on the master node needed for testing
we get the error:
"failed to create inotify: Too many open files"
By default the number of inotify instances on Jammy
is 128. We increase this up to 256.
Change-Id: I07c8a0f909608b6e44040ffeefc6ab576236c93f
The deploy-env playbook can fail with an error stating that
registry_namespaces is not defined in some cases. This change moves
the initialization of registry_namespaces so that buildset_registry
is not required for it to be set when other conditions are not met.
Change-Id: I160e7d479008fd3afd460382691673b92bd042c9
Some es curator images do not use /usr/bin/curator for the executable. This PS
makes the path configurable via values.yaml.
Change-Id: I640e0f4928683810ef0b4a6d4dbac9bdf865aa2a
When using Rook for managing Ceph clusters we have
to provision a minimal set of assets (keys, endpoints, etc.)
to make Openstack-Helm charts work with these Ceph clusters.
Rook provides CRDs that can be used for managing Ceph assets
like pools/keyrings/buckets etc. but Openstack-Helm can not
utilize these CRDs. To support these CRDs in OSH would
require having lots of conditionals in OSH templates since
we still want OSH to work with OSH ceph-* charts.
Change-Id: If7fe29052640e48c37b653e13a74d95e360a6d16
This PS adds staggered backups possibility by adding anti-affinity rules
to backups cronjobs that can be followed across several namespaces to
decrease load on remote backup destination server making sure that at
every moment in time there is only one backup upload is in progress.
Change-Id: If49791f866a73a08fb98fa0e0b4854042d079c66
This PS adds mariadb-cluster chart based on mariadb-operator. Also for
some backward compartibility this PS adds mariadb-backup chart and
prometheus-mysql-exporter chart as a separate ones.
Change-Id: I3f652375cce2e3b45e095e08d2e6f4ae73b8d8f0
The PR synchronized this script with that
used in the openstack-helm repo.
Let's use the same script in both repos.
The related PR for the openstack-helm repo
is coming.
Change-Id: I5cfaad8ebfd08790ecabb3e8fa480a7bf2bb7e1e
We don't need this for tests and it is better to
keep the test env minimal since the test hardware
is limited.
Change-Id: I0b3f663408c1ef57ad25a4d031b706cb6abc87a9
