1715 Commits

Author SHA1 Message Date
Alexander Noskov
e315c90de3 Trivial typo fixes
Change-Id: I255f76aa4ff253452d39d89850dfd75488dc6b38
2019-06-24 06:31:31 +00:00
Zuul
3d3f74de69 Merge "[Ceph] Update helm tests for ceph-provisioners" 2019-06-23 04:34:38 +00:00
Zuul
65f78190ba Merge "Add zuul-jobs roles to job job that uses them" 2019-06-22 12:19:09 +00:00
Zuul
49bb4ed703 Merge "add docker-default apparmor profile for prometheus-alertmanager Add in prometheus-alertmanager gate script as a script" 2019-06-22 12:01:01 +00:00
Kostiantyn Kalynovskyi
0e0858a7c7 Add zuul-jobs roles to job job that uses them
Job openstack-helm-infra uses role named "start-zuul-console" that is part
of another project named "zuul/zuul-jobs". If this job is
ever used by another project as "parent job", it would fail, because
wouldn't find the role in any of the default pathes. This patch adds the
roles from zuul/zuul-jobs project, to the job that uses these roles from
the project

Change-Id: Ib3b7e0e43008b7a4f394b49b75529bfde9780d2f
2019-06-22 10:13:45 +00:00
Randeep Jalli
1c4084bdc0 add docker-default apparmor profile for prometheus-alertmanager
Add in prometheus-alertmanager gate script as a script

Change-Id: I3c10f9a9d4403fd91da292a50d204f73a9295611
2019-06-22 10:13:18 +00:00
Hussey, Scott (sh8121)
9b00075a72 (helm-toolkit) Optionally b64 encode TLS keys
- When using the TLS certificate generation macro, optionally
  support base64 encoding values for direct inclusion in a Kubernetes
  secret. The default is to maintain current behavior for backward
  compatibility.

Change-Id: Ib62af4e5738cbc853a18e0d2a14c6103784e7370
2019-06-22 10:12:49 +00:00
Zuul
736995c1d2 Merge "Fix indentations" 2019-06-22 01:26:32 +00:00
Zuul
4b609516f2 Merge "[Ceph] Implement pool quotas on pools as they are created/managed" 2019-06-21 19:59:24 +00:00
Zuul
c893836808 Merge "[Ceph] Modify CRUSH map for changes to existing deployments" 2019-06-21 19:45:16 +00:00
Kabanov, Dmitrii (dk370c)
e580e0204b [Ceph] Update helm tests for ceph-provisioners
The changes allow to provide more information in case of failure.

Change-Id: Ie03cafac33ef9b2cf457e0d483d838170eadaef4
2019-06-20 11:19:51 -07:00
Taylor, Stephen (st053q)
d74b579f1d [Ceph] Implement pool quotas on pools as they are created/managed
This patch set implements pool quotas on each pool in the Ceph
cluster by obtaining the total capacity of the cluster in bytes,
multiplying that by the defined percentage of total data expected
to reside in each pool and by the cluster quota, and setting a
byte quota on each pool that is equal to its expected percentage
of the total cluster quota.

Change-Id: I1686822a74c984e99e9347f55b98219c47decec1
2019-06-20 10:16:47 -05:00
Taylor, Stephen (st053q@att.com)
810026f342 [Ceph] Modify CRUSH map for changes to existing deployments
This adds the ability for the ceph-osd osd-directory.sh script to
handle existing deployments that place data in hosts via CRUSH and
modify those deployments to place data in racks instead. The
existing data remains intact but is redistributed across the new
rack-level failure domains by updating the CRUSH map and assigning
new rules to existing pools.

Change-Id: Ida79f876d0cae3d99e796e4de1aac55a7978986c
2019-06-20 10:14:30 -05:00
Hussey, Scott (sh8121)
3844f4af77 (postgresql) Support update strategy snippet
- Add support for the update strategy helm-toolkit snippet

Change-Id: I7abedec017cb043a38f4e176028d76fdc505de12
2019-06-20 13:15:53 +00:00
Venkata, Krishna (kv988c)
50889f8643 Fix indentations
Found incorrect indentations in YAML. This
PS redresses the indentation issue.

Change-Id: Id8d00e07a209a0fd1c98823deb59dc15a87ba16d
2019-06-19 17:11:37 -05:00
Zuul
eefcf33f61 Merge "[Ceph]: Remove duplicate values" 2019-06-19 20:39:48 +00:00
Zuul
1ee8f34084 Merge "Ingress: add keepalived-router-id for keeplived vip" 2019-06-19 19:50:02 +00:00
Zuul
fed00f9e04 Merge "Add openstack-exporter to aio-monitoring & openstack-support jobs" 2019-06-19 18:21:52 +00:00
SIRI KIM
9022c9237d Ingress: add keepalived-router-id for keeplived vip
When there are multiple keepalived instances in same network space,
equal keepalived router-ids cause conflict (now default router-id number
is 100). So we have to specify keepalived's router_id for VRRP peering.
This commit make keepalived route-id configurable, so that we can
prevent keepalived conflict caused by default keepalived router-id.

Change-Id: Ia92a8b64205ab52ad15237e9fdeaacb61aae6400
2019-06-19 18:06:04 +00:00
Zuul
843db92744 Merge "Change the expression of defined alert in prometheus to avoid unnecessary errors" 2019-06-19 16:55:46 +00:00
Venkata, Krishna (kv988c)
d1964b7b38 [Ceph]: Remove duplicate values
secret_keystone_rgw is defined twice in
same section in lines 548 and 550.

Change-Id: I8f76a6f0f4105d47efbc562d190f2eabf51764c1
2019-06-19 16:45:05 +00:00
Steve Wilkerson
f2db36862c Add openstack-exporter to aio-monitoring & openstack-support jobs
This deploys the openstack-exporter as part of the aio-monitoring
single node and openstack-support jobs, to ensure the exporter is
functional and working as expected

Change-Id: If31046769fd9032647af47ce8fce0cde5b8f7d7d
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-06-19 16:38:10 +00:00
Pete Birley
fc58be6a93 Ingress: Clean prometheus-nginx.socket on startup
This PS cleans the prometheus-nginx.socket on startup of the container,
which is required to allow the container, as opposed to the pod, restart.

Change-Id: I7906e85a200f6fb92467371218b4e5957add39f4
Signed-off-by: Pete Birley <pete@port.direct>
2019-06-19 14:02:56 +00:00
Jean-Philippe Evrard
8ee35e896f Adapt rabbitmq test for py2 and py3 support
This works well for python2, but things will become
messy when py3 will be the default.

This, at the same time, ensures the KeyErrors are
properly logged, with a way to debug them.

Change-Id: If5d8007bece9ccbff481187e757968e7d1b6f651
2019-06-19 03:19:08 +00:00
Zuul
5935a2c040 Merge "Fix indent" 2019-06-19 00:17:02 +00:00
Itxaka
565fb4606b htk: provide default domain env and secrets
We currently do not provide any env or secrets for the
default domain id for keystone

This makes it so we provide both like any other vars

Change-Id: I00c68026af25d8c5af37fcb3a6e1bb0e2da13e1e
2019-06-18 21:51:24 +00:00
Zuul
0f7ced71dc Merge "RabbitMQ: Allow clients to directly connect to servers" 2019-06-18 21:46:13 +00:00
Zuul
79582a1ba5 Merge "Elasticsearch: Allow override of job back off limits and deadlines" 2019-06-18 21:18:47 +00:00
Zuul
80d7e932e4 Merge "Switch from default values being populated for upgrade strategy for ceph components" 2019-06-18 21:18:15 +00:00
Hemant
b9a9ee323b Change the expression of defined alert in prometheus to avoid unnecessary errors
There were some false alerts about volume_claim_capacity_high_utilization
due to wrong formula used to determine the percentage of used capacity.

Change-Id: I24afed7946f915e5e13f0ba759eca252c2598af9
2019-06-18 20:19:29 +00:00
Pete Birley
0925f50e2a RabbitMQ: Allow clients to directly connect to servers
This PS updates the rabbitmq chart, to allow clients to connect directly
to backend servers, and also introduces a htk function to produce
the appropriate transport_url used by oslo.messaging to take advantage
of this functionaility.

Change-Id: I5150a64bd29fa062e30496c1f2127de138322863
Signed-off-by: Pete Birley <pete@port.direct>
2019-06-18 15:10:26 +00:00
Zuul
b2f47aabb1 Merge "rabbitmq: set hostPath for rabbitmq-data" 2019-06-18 14:46:15 +00:00
Venkata, Krishna (kv988c)
ed574f456f Switch from default values being populated
for upgrade strategy for ceph components

This PS uses HelmToolKit function to add
upgrade strategy parameters to ceph Components

Change-Id: I54e71d2a52bd639b3e93fc899c1bf2cd075b5396
2019-06-18 01:42:38 +00:00
Tin Lam
afb4c3afab Fix indent
While reviewing [0], found incorrect indentations in YAML.
This patch set redresses the indentation problems.

[0] https://review.opendev.org/#/c/665524/2/ceph-osd/templates/daemonset-osd.yaml

Change-Id: I22e84f5d87aec90ad787a61b152062452867bc17
Signed-off-by: Tin Lam <tin@irrational.io>
2019-06-18 00:49:20 +00:00
Pete Birley
146d3d5976 Ceph: fix schema error in OSD chart
This PS fixes:
 Error: error validating "": error validating data: ValidationError(DaemonSet.spec.template.spec.initContainers[3].volumeMounts[10]): unknown field "ReadOnly" in io.k8s.api.core.v1.VolumeMount

Change-Id: I62f99c2f6209fc9bc72dad19e39acb5beed4519b
Signed-off-by: Pete Birley <pete@port.direct>
2019-06-15 21:40:09 +00:00
Zuul
1f1482bcb7 Merge "Ingress: Fix security context for pod/container" 2019-06-15 01:09:31 +00:00
Zuul
8957db85db Merge "Rabbitmq: Add pod/container security context" 2019-06-15 00:03:48 +00:00
Alexander Noskov
d9b939979d Ingress: Fix security context for pod/container
During armada bootstrap, ingress pod tries to execute chroot [0]
inside root directory on host machine to load dummy kernel module
and getting permission denied error.

[0] https://opendev.org/openstack/openstack-helm-infra/src/branch/master/ingress/templates/bin/_ingress-vip-routed.sh.tpl#L22

Change-Id: Icf7e29e95e0c3cf2bf71a22711a03218390c90cb
2019-06-14 17:24:42 +00:00
Steve Wilkerson
b4b1dd9528 Add missing affinity keys to chart pod specs
This adds the affinity key to the pod spec for the grafana,
nagios, kube-state-metrics, and openstack-exporter charts as it
was previously missed

Change-Id: Ifefa88d7f33607b4d595effa5fbf72f3387e5081
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-06-13 19:15:42 +00:00
Renis Makadia
c7f5c9979c Add helm tests for Ceph Provisioners chart
- Adding helm tests for Ceph provisioner chart
- Helm test should only executed when deploying chart with
client_secrets: true.

Co-Authored-By: Chinasubbareddy Mallavarapu <cr3938@att.com>

Change-Id: I33421249246dfaf6ea4f835e76a74813dfb3b595
2019-06-12 12:32:30 -05:00
Zuul
4a4456bace Merge "Enable hugepage support in HTK resources snippet" 2019-06-11 23:41:57 +00:00
RAHUL KHIYANI
7f47169f80 Rabbitmq: Add pod/container security context
This updates the rabbitmq chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem to true

Change-Id: I68aa4b49bf6301e1b1004a526151fa0ab4b197b4
2019-06-10 18:50:59 +00:00
Zuul
0714b9d7ae Merge "Nagios: Use helm-toolkit template renderer for config files" 2019-06-10 16:09:53 +00:00
Chinasubbareddy Mallavarapu
9e653096e1 [ceph-client] update dependncy for test pod
This is to update test pod dependency  since its getting started
right after mgr service availbe and mgr pods are in init state and
waiting for rbd-pool job.

Change-Id: Iaf9af3ffcf1f4940c1b661a853df0ec4edd99d39
2019-06-06 16:50:06 -05:00
Zuul
09ae22d849 Merge "Nagios: Add Selenium tests via helm test pod" 2019-06-06 21:23:25 +00:00
Zuul
e2cd5d99f9 Merge "[ceph-client] Handle pool min_size during ceph cluster expansion" 2019-06-06 20:45:48 +00:00
Steve Wilkerson
40769d5a60 Nagios: Add Selenium tests via helm test pod
This adds selenium tests for the Nagios chart via a helm test
pod to help ensure the Nagios deployment is functional and
accessible

Change-Id: I44f30fbac274546abadba0290de029ed2b9d1958
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-06-06 19:35:59 +00:00
Steve Wilkerson
d72299db4b Nagios: Use helm-toolkit template renderer for config files
This updates the Nagios chart to use the helm-toolkit template
renderer snippet for generating the Nagios configuration files.
This was done to make the exposure of the configuration files
simpler for those who are more familiar with traditional Nagios
configuration files, as well as allowing for values overrides for
adding custom host names or custom object definitions to nagios
objects (as Nagios doesn't easily allow for this via environment
accessible macros).

Change-Id: I84d5c83d84d6438af5f3ab57997e80e8b1fc8312
Signed-off-by: Steve Wilkerson <sw5822@att.com>
2019-06-06 19:35:32 +00:00
Zuul
d23e847e1f Merge "Uplift nfs-provisioner" 2019-06-06 19:28:51 +00:00
Zuul
a3f4337952 Merge "Ceph-client: Fix security context for pod/container" 2019-06-06 18:47:30 +00:00