3671 Commits

Author SHA1 Message Date
Zuul
1e56dd59ea Merge "Add libvirt exporter as a sidecar in the libvirt chart" 2022-05-12 20:49:25 +00:00
Zuul
40847ca4a6 Merge "Migrate CronJob resources to batch/v1 and PodDisruptionBudget resources to policy/v1" 2022-05-12 20:43:31 +00:00
Zuul
5706d6e960 Merge "fix helm-release-status role to use helm3 commands" 2022-05-12 04:08:01 +00:00
Zuul
eb0a997388 Merge "Update ubuntu nodesets to focal" 2022-05-11 17:42:29 +00:00
Zuul
8d27996cc9 Merge "Add clear-firewall role to bandit playbook" 2022-05-11 17:42:26 +00:00
Zuul
f4405d4f1b Merge "[ceph-osd] Remove ceph-mon dependency in ceph-osd liveness probe" 2022-05-11 16:23:15 +00:00
Schubert Anselme
753a32c33d
Migrate CronJob resources to batch/v1 and PodDisruptionBudget resources to policy/v1
This change updates the following charts to migrate CronJob resources to the batch/v1 API version, available since v1.21. [0]
and to migrate PodDisruptionBudget to the policy/v1 API version, also available since v1.21. [1]

This also uplift ingress controller to 1.1.3

- ceph-client (CronJob)
- cert-rotation (CronJob)
- elasticsearch (CronJob)
- mariadb (CronJob & PodDisruptionBudget)
- postgresql (CronJob)

0: https://kubernetes.io/docs/reference/using-api/deprecation-guide/#cronjob-v125
1: https://kubernetes.io/docs/reference/using-api/deprecation-guide/#poddisruptionbudget-v125

Change-Id: Ia6189b98a86b3f7575dc4678bb3a0cce69562c93
2022-05-10 15:12:53 -04:00
Zuul
1eeb05397e Merge "Remove gnocchi chart" 2022-05-10 18:20:25 +00:00
root
58becf2886 Add libvirt exporter as a sidecar in the libvirt chart
Users can enable the libvirt exporter sidecar by set
values.sidecars.libvirt_exporter as true.

Change-Id: I7451aa278982bced3178ac3e001eaad3b63d005d
2022-05-11 02:51:45 +10:00
Dustin Specker
367bed952f fix helm-release-status role to use helm3 commands
Helm3 requires specifying a namespace to retrieve status and values for
a given release.

Before this role would not retrieve any values or statuses. Now values
and statuses are retrieved in saved in Zuul archive correctly.

Change-Id: If8cf28349b0c14ba6e1de74d49e46ab4a61b93c7
2022-05-10 11:17:53 -05:00
Dustin Specker
980d92e6b4 pin containerd to 1.5.11-1
containerd 1.6.4-1 changes something about cgroups.procs file
(need to investigate) and this causes libvirt's
readiness probes to fail with an error like:

Readiness probe failed: OCI runtime exec failed: exec failed: unable to
start container process: error adding pid 7366 to cgroups: failed to
write 7366: open
/sys/fs/cgroup/unified/kubepods.slice/kubepods-besteffort.slice/kubepods-besteffort-podc2658f11_e579_435c_aab8_d7359f88968f.slice/docker-8cb51ac90cc54e6333028634c4a16592c093ceb0944964e344dcfce9e93f3ed3.scope/cgroup.procs:
no such file or directory: unknown

Change-Id: Icd860b4360d8547480780b271954a20e79d5a4cd
2022-05-06 16:14:42 -05:00
Stephen Taylor
9a37183b26 [ceph-osd] Remove ceph-mon dependency in ceph-osd liveness probe
It is possible for misbehaving ceph-mon pods to cause the ceph-osd
liveness probe to fail for healthy ceph-osd pods, which can cause
healthy pods to get restarted unnecessarily. This change removes
the ceph-mon query from the ceph-osd liveness probe so the probe
is only dependent on ceph-osd state.

Change-Id: I9e1846cfdc5783dbb261583e04ea19df81d143f4
2022-05-06 10:15:45 -06:00
Zuul
8e27278d68 Merge "[ceph-osd] Remove udev interactions from osd-init" 2022-05-03 23:01:52 +00:00
Gage Hugo
6be6d638b3 Update ubuntu nodesets to focal
The openstack-single-node nodeset still is using ubuntu-bionic,
which is nearly 4 years old now. This change updates it to use
the newer ubuntu focal release.

Depends-on: https://review.opendev.org/c/openstack/openstack-helm-infra/+/839996
Depends-on: https://review.opendev.org/c/openstack/openstack-helm-infra/+/840370

Change-Id: Ia43cb31e13bc059541116064aa2092526186b831
2022-05-03 19:57:15 +00:00
Gage Hugo
690258b221 Add clear-firewall role to bandit playbook
This change adds the clear-firewall role to the osh-infra-bandit
playbook to resolve an issue with coredns not coming up when
this job is ran on an ubuntu focal node.

Change-Id: I189ceff30271f3a478aff697b84709b19d0b09fc
2022-05-03 14:55:46 -05:00
Gage Hugo
4dafe7e254 Remove gnocchi chart
As part of the discussions from the last several PTGs, the topic
of removing un-maintained charts was brought up as an action item.

Since gnocchi hasn't seen much maintenance outside of general
infrastructure maintenance and no one has stepped up with any
interest in maintaining it, this change removes the gnocchi
chart from openstack-helm-infra.

Change-Id: I9c68457df1243370ef606924b4f776870baedd07
2022-05-03 14:51:59 -05:00
Vladimir Sigunov (vs422h)
89d290d3da [Database] Remote backup should keep given number of backup days
Fixes minor issue with naming of variables which prevents the script to
be compliant the backup retention policy.

Change-Id: Ic241310a66af92ee423f5c762c413af7d6d53f0b
2022-05-03 13:51:41 -04:00
Zuul
e568acf53d Merge "Update default image value in shaker" 2022-05-03 15:26:28 +00:00
Zuul
a4b3a63253 Merge "Update default image values for mariadb" 2022-05-03 15:26:01 +00:00
Zuul
437d79878f Merge "Update default image value for prometheus" 2022-05-03 15:23:32 +00:00
Stephen Taylor
e02dc3da44 [ceph-osd] Remove udev interactions from osd-init
There are bugs with containerizing certain udev operations in some
udev versions. The osd-init container can hang in these
circumstances, so the osd-init scripts are modified not to use
these problematic operations.

Change-Id: I6b39321b849f5fbf1b6f2097c6c57ffaebe68121
2022-04-29 14:44:32 -06:00
Gage Hugo
d99955ccff Update default image value in shaker
This change updates the default image value in the shaker chart
from newton to wallaby.

Change-Id: Icf638a0d896fc77aaf43f4d82ed2bd82aef13328
2022-04-28 17:23:26 +00:00
Gage Hugo
78c3c80c25 Update image default value for fluentd chart
This change updates the default image value where openstack is
used to Wallaby from newton in the fluentd chart.

Change-Id: I794062bee9e5d316e1c754544c0970da93e46dbf
2022-04-28 17:23:10 +00:00
Gage Hugo
711d5706dd Update default image value for prometheus
This change updates the default image value in the prometheus
chart from newton to wallaby for the helm_test image.

Change-Id: I0f70734a8455661f7705baeed3cafbaf529c56a8
2022-04-28 17:23:04 +00:00
Gage Hugo
20d7d55f33 Update default image values for mariadb
This change updates the default image values in the mariadb chart
up to using Wallaby for the ones that use openstack images.

Change-Id: Id28da22932362c0400766a564b382ddbcada8c61
2022-04-28 17:22:09 +00:00
Zuul
0dc859cbcb Merge "Update default image values for ceph-rgw" 2022-04-28 15:16:50 +00:00
Zuul
a502896488 Merge "Remove unused overrides and update default image" 2022-04-28 01:12:20 +00:00
Zuul
9b58842420 Merge "Update several default ubuntu release defaults" 2022-04-28 01:12:17 +00:00
Zuul
177917c271 Merge "Update kibana image default values" 2022-04-28 01:10:17 +00:00
Zuul
bae0f66b22 Merge "Update powerdns default image values" 2022-04-28 01:02:42 +00:00
Zuul
9fa5f287f8 Merge "Update default image value in webhook chart" 2022-04-28 01:01:36 +00:00
Gage Hugo
09d8d190ef Update default image value in elasticsearch
This change updates the default image value in the elasticsearch
chart from newton to wallaby for the one image that utilizes a
heat image.

Change-Id: Ia94cfb62a6602dcaf465c2c314ee75d24cff4286
2022-04-27 12:39:48 -05:00
Gage Hugo
2717f0ce23 Update default image value in webhook chart
This change updates the default image value in the webhook chart
from newton to wallaby.

Change-Id: I712e0b7de4483474ebdec0997d5d6e24e02e8a44
2022-04-27 12:38:04 -05:00
Gage Hugo
d8fd92bd5c Update powerdns default image values
This change updates the default image values for the powerdns chart
from queens to wallaby where it uses the heat image.

Change-Id: I060436fca42870bcd61f4972303d3b6970128875
2022-04-27 12:21:09 -05:00
Gage Hugo
34b3a013e4 Update kibana image default values
This change updates the default image values for the kibana chart
to move the heat images from newton to wallaby.

Change-Id: Ic991664c2f18354fae3f8b21aee028bad4716987
2022-04-27 12:19:16 -05:00
Gage Hugo
4c077707fc Update default image values for ceph-rgw
This change updates the default image values for several images
in the ceph-rgw chart to newer openstack and ubuntu releases.

Change-Id: Ia11d69bd8f0b4259f6ee68b167a7344ab86d0584
2022-04-27 11:35:01 -05:00
Gage Hugo
d200c97464 Update several default ubuntu release defaults
Several roles and scripts in the osh-infra repo have defaults for
ubuntu that are still on xenial when we mostly run bionic or newer.

This change updates these references to default to focal.

Change-Id: I84bca2d685cf1c67b10eee3bb7c05deb2cc4670b
2022-04-27 11:29:27 -05:00
Gage Hugo
668de27da3 Remove unused overrides and update default image
This change updates the default libvirt image value and removes
several unused values overrides for the libvirt chart.

Change-Id: I0a0b81de017f33c2cabf5311f5288c8f46191d8b
2022-04-27 11:25:07 -05:00
Phil Sphicas
dbf841c09c Annotate ES master/data sts with S3 secret hash
To ensure that a Helm upgrade with changed S3 credentials results in a
restart of the elasticsearch-master and elasticsearch-data pods, add an
annotation with the hash of the S3 secret.

Change-Id: Id30e5749a378167b9c2c14a155bc6ca236d78516
2022-04-27 08:37:06 -07:00
Mosher, Jaymes (jm616v)
92977da6b8 [cert-rotatation] Also check initContainers for mounted certs
rotate-certs.sh script currently only checks if a certificate is
mounted in containers.  This updates it to also consider
initContainers when restarting resources.

Change-Id: I5d48c5bbd671c9f74b72ef4ecca36777c735c398
2022-04-15 01:24:27 -06:00
Sigunov, Vladimir (vs422h)
f900462c33 [CEPH] Endpoints discovery
Allows to discover monitor endpoints for multiple RGWs instances
deployed in different namespaces.

Change-Id: Ia4a9a4b011951cec9f88ede41ba0286863fde86e
2022-04-14 12:07:07 -04:00
ju217q
37ac688842 [RabbitMQ] Fixed guest account removal
Fixed condition where node names were blank under certain conditions
and account would not get removed

Change-Id: Idf895eb649a439844b9a90fdcb57f5f022717079
2022-04-12 08:28:16 -04:00
Zuul
30c3a2e033 Merge "[RabbitMQ] Remove guest admin account" 2022-04-12 08:58:28 +00:00
ju217q
79327b693e [RabbitMQ] Remove guest admin account
Added removal of guest user account for security and best practices.

Change-Id: I5ae1c184c0cf092e4300d081d8a1cb3c7418a935
2022-04-11 19:51:15 +00:00
Zuul
4a453608a7 Merge "Remove keystone-auth job" 2022-04-08 07:28:24 +00:00
Zuul
93d93a68bc Merge "Remove tiller chart" 2022-04-06 21:47:09 +00:00
Zuul
3e74872360 Merge "[ceph-osd] Allow for unconditional OSD restart" 2022-04-06 17:15:14 +00:00
Stephen Taylor
76fb2562c6 [ceph-osd] Allow for unconditional OSD restart
This change allows OSDs to be restarted unconditionally by the
ceph-osd chart. This can be useful in upgrade scenarios where
ceph-osd pods are unhealthy during the upgrade.

Change-Id: I6de98db2b4eb1d76411e1dbffa65c263de3aecee
2022-04-05 10:40:28 -06:00
Gage Hugo
fe3e47aff0 Update Makefile for helm v3 scripts
With the removal of helm v2, the Makefile still points to the old
playbooks that try to deploy helm v2. Since we have moved to using
shell scripts to deploy helm v3, this change updates the Makefile
to point to the new scripts.

Change-Id: I6e363f3ce92a228da1301a45c754e68a859325ea
2022-04-04 20:37:07 +00:00
Zuul
50063c809c Merge "Use python3 when present" 2022-04-04 18:02:50 +00:00