3824 Commits

Author SHA1 Message Date
Thales Elero Cervi
b65ac7e129 Restore ServiceAccount to openvswitch pod
This change includes back the the helm-toolkit snippet:
kubernetes_pod_rbac_serviceaccount to the openvswitch Daemonset
definition, since it is responsible for creating the POD's
ServiceAccount which contains imagePullSecrets that enable the POD to
retrieve images from private registries.

Originally openvswitch chart had two daemonset definitions: for the
db and for the server, but recently both were merged into a single
daemonset [1] and the template inclusion was dropped during this merge

[1] 73e2b3322d

Signed-off-by: Thales Elero Cervi <thaleselero.cervi@windriver.com>
Change-Id: I8e8e165956db2714563733a78baf156ab20b696a
2023-08-08 09:15:33 -03:00
Mohammed Naser
ec29020b32 feat(ovn): enable ha for OVN control plane
This is a really big refactor which implements and adds OVN HA
for the control plane which can enable production deployments.

Depends-On: https://review.opendev.org/c/openstack/openstack-helm-images/+/889181
Change-Id: Idce896148b33a87467cd5656918c5c7377a29504
2023-08-08 10:50:23 +03:00
Zuul
4ee839a6e4 Merge "Fix OVN system-id check" 2023-08-07 06:07:39 +00:00
Sadegh Hayeri
80cf20c586 Fix OVN system-id check
Change-Id: I8a161893fb84b32f550a99d139f7a57c98b21c12
2023-07-30 11:59:41 +03:30
root
1ab2bcfd3a Fix dependency resolver
There is a condition check for dependencyKey when dependencyMixinParam
is a string value, but not when a slice value.
It requires to add an empty section in dependencies.dynamic.targeted
even if there is no dynamic dependency requirements.
This patch adds a condition check to avoid the dummy values.

Change-Id: I1db9156741959acb074d86a3ae900e8be31170f7
2023-07-29 02:28:24 +10:00
astebenkova
027bcefbd4 [chromedriver] Fix package installation
This commit alllows us to switch to JSON endpoints for chromedriver
since upstream changed the way of installation for version 115 or newer:
https://chromedriver.chromium.org/downloads#h.p_ID_32
https://github.com/GoogleChromeLabs/chrome-for-testing#json-api-endpoints

Change-Id: I4a432ec36fe9e3f794cc6b7788bbdc04db3c8cf6
2023-07-20 13:35:46 +03:00
Zuul
2542db1647 Merge "Disable libvirt cgroup functionality for cgroup v2" 2023-07-13 00:00:53 +00:00
Zuul
c08a6535a7 Merge "Add OVN bridge-mapping" 2023-07-13 00:00:51 +00:00
Sadegh Hayeri
8c41205b58 Add OVN bridge-mapping
Change-Id: I84c38c7210217718339c0b1ef059bbad9854b2cc
2023-07-09 08:27:47 +03:30
Zuul
b455921233 Merge "Fix rabbitmq in ipv6 disabled env" 2023-07-09 01:04:32 +00:00
Zuul
6104ab7a73 Merge "[ceph-osd] Extend the ceph-osd post-apply job PG wait" 2023-07-08 20:40:31 +00:00
ricolin
ee4d3ac71c Make sure ovs ctl file exist before chown
This propose to make sure the exist of
`/run/openvswitch/ovs-vswitchd.${PID}.ctl`
before we do chown command with it.

Change-Id: Icdcfa5684c2a5e610805f6dec9391a4947b213d4
2023-07-09 00:55:54 +08:00
Sadegh Hayeri
4fc46f1808 Disable libvirt cgroup functionality for cgroup v2
Change-Id: I5a9f1828d7c2f36e14de89323868c4a1dbebba64
2023-07-08 10:18:58 +03:30
Stephen Taylor
8d6cc364b7 [ceph-osd] Extend the ceph-osd post-apply job PG wait
In some cases, especially for disruptive OSD restarts on upgrade,
PGs can take longer than the allowed ~30 seconds to get into a
peering state. In these cases, the post-apply job fails prematurely
instead of allowing time for the OSDs and PGs to recover. This
change extends that timeout to ~10 minutes instead to allow the PGs
plenty of recovery time.

The only negative effect of this change is that a legitimate
failure where the PGs can't recover will take 10 minutes to fail
the post-apply job instead of 30 seconds.

Change-Id: I9c22bb692385dbb7bc2816233c83c7472e071dd4
2023-07-07 08:42:30 -06:00
Sadegh Hayeri
1dd1989fff Fix rabbitmq in ipv6 disabled env
Change-Id: I680edbc03167dac3b4656ee7f88bfac02a390aa1
2023-07-05 22:48:04 +03:00
astebenkova
6b6ca9e26c [osh-selenium] Migrate deprecated functions
There are some leftovers from the following commit:
https://review.opendev.org/c/openstack/openstack-helm-infra/+/883894

Change-Id: If167646b088b361d49d33400abab131c79afedc9
2023-06-30 16:44:09 +03:00
ricolin
e9a8166725 Add buffer to wait for ovs pid file
This fixes for cases file not yet generated from start(), but already
required on poststart() in openvswitch-vswitchd.sh.

Add wait condition until file exists.

Change-Id: Iae041046fd6e7e7f991b4cd1aa101c97bcaa150c
2023-06-29 16:37:47 +08:00
Vladimir Kozhukalov
3d8935a536 Use --ignore-installed while install pip packages for dev env
story: 2010785
task: 48210
There were a bunch of stories like this 2010785 and in most
cases users face the conflict of pip and apt package
management systems. We can either use --ignore-installed
or use python virtualenv. The second option does not contradict
to the first one.

Change-Id: I345e887b3f35f1d1d6c86cc40a29ff0b1920a1f1
2023-06-15 06:27:22 +03:00
Zuul
beea0d5811 Merge "Fix grafana job deployment condition" 2023-06-11 02:19:58 +00:00
Zuul
b6b3db8812 Merge "Remove PodSecurityPolicy" 2023-06-09 17:24:15 +00:00
Samuel Liu
664f4c9dfb Remove PodSecurityPolicy
PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25.[1]

In Kubernetes 1.21, PodSecurityPolicy is deprecated. As with all Kubernetes feature deprecations, PodSecurityPolicy will continue to be available and fully-functional for several more releases. PodSecurityPolicy, previously in the beta stage, is planned for removal in Kubernetes 1.25.[2]

[1] https://kubernetes.io/docs/concepts/security/pod-security-policy/
[2] https://kubernetes.io/blog/2021/04/08/kubernetes-1-21-release-announcement/#podsecuritypolicy-deprecation

Change-Id: Ic060d925b6e97e5651e74a1a1161906aef740a8c
2023-06-08 21:53:29 +03:00
Vladimir Kozhukalov
2e59208351 Fix grafana job deployment condition
The run migrator job should be deployed
if .Values.manifests.job_run_migrator is true

story: 2010696
task: 47809
Change-Id: I5717d8c6c2de270268a0e14ee4b8abb7969b07bb
2023-06-08 16:02:36 +03:00
Samuel Liu
0053fc5737 replace scheduler.alpha.kubernetes.io/critical-pod with priorityClassName
this feature was deprecated in 1.13. Now it`s not work.[1]

"scheduler.alpha.kubernetes.io/critical-pod annotation is removed. Pod priority (spec.priorityClassName) should be used instead to mark pods as critical. Action required!"[2]

[1]https://github.com/kubernetes/kubernetes/issues/79548
[2]https://github.com/kubernetes/kubernetes/pull/79554

Change-Id: I5913030634fe3f53b11ddb9bbe40d665f45a1254
2023-06-06 10:53:59 +08:00
Stephen Taylor
bf95238dc1 [helm] Upgrade Helm to version 3.12.0
Helm version 3 is needed for upcoming features, notably the
rook-helm charts to manage Ceph via Rook require Helm v3. This
change updates Helm in openstack-helm-infra to 3.12.0.

Change-Id: I13b1671121658b1390d89beabacfd15a24b19afe
2023-06-01 08:22:31 -06:00
Zuul
b9954058bc Merge "[osh-selenium] Upgrade image to latest-ubuntu_focal" 2023-05-25 02:48:48 +00:00
Zuul
97ca7839a2 Merge "Update calico to v3.25.1" 2023-05-23 20:35:32 +00:00
Anselme, Schubert (sa246v)
e74e94a19a
Update calico to v3.25.1
Change-Id: I1c475266584316d550924fa53badf43463f4d0bd
Signed-off-by: Anselme, Schubert (sa246v) <sa246v@att.com>
2023-05-23 15:13:30 +00:00
astebenkova
92d16f3a29 [osh-selenium] Upgrade image to latest-ubuntu_focal
+ migrate all Python tests to use Selenium v4 (bionic image had v3 installed):
https://www.selenium.dev/documentation/webdriver/getting_started/upgrade_to_selenium_4/
+ amend selenium role in order to install ChromeDriver compatible with Google Chrome:
https://chromedriver.chromium.org/downloads/version-selection
+ run selenium tests AFTER the charts are deployed

Change-Id: I46200b7dc173bd0e1e6bf3545d9a26c252a21927
2023-05-23 18:09:16 +03:00
Vladimir Kozhukalov
ebbf659e35 Revert "Update kubernetes to 1.27.1"
This reverts commit 8e96a91ffae745b952c053923aa177e615b49b74.

Reason for revert: The change broke the compute-kit tests.
The deployment of all Openstack components is successful but then when we create networks and a VM, neutron-dhcp-agent crashes. It is still not clear why it happens. Let's revert this change and figure out what is going on.

Change-Id: I07082511cd168560c8fe8dce3421e37fc402a1ae
2023-05-23 09:20:47 +00:00
SPEARS, DUSTIN (ds443n)
8e96a91ffa Update kubernetes to 1.27.1
Update mini-kube to 1.30.1
Update crictl to 1.27.0

Change-Id: I528bad131cac4922b5663a8f7522657d26d1e020
2023-05-18 16:08:01 -04:00
Stephen Taylor
9c5e5102f6 [ceph-client] Strip any errors preceding pool properties JSON
Sometimes errors appear in the 'ceph osd pool get' output before
the JSON string. The returned string is saved and is assumed to
contain only the JSON string with the pool properties. When errors
appear in the string, pool properties are not read properly, which
can cause pools to be misconfigured. This change filters that
output so only the expected JSON string is returned. It can then be
parsed correctly.

Change-Id: I83347cc32da7e7af160b5cacc2a99de74eebebc7
2023-05-10 22:41:22 +00:00
Stephen Taylor
45b492bcf7 [ceph] Update Ceph to 17.2.6
This change updates the openstack-helm-infra charts to use 17.2.6
Quincy images based on Focal.

See https://review.opendev.org/c/openstack/openstack-helm-images/+/881217

Change-Id: Ibb89435ae22f6d634846755e8121facd13d5d331
2023-05-09 12:25:07 +00:00
Zuul
3b95618f47 Merge "Add pdf-docs tox env" 2023-05-08 23:26:40 +00:00
Samuel Liu
8db130372d Migrated CronJob resource to batch/v1 API version
Migrate manifests and API clients to use the batch/v1 API version, available since v1.21.
The batch/v1beta1 API version of CronJob is no longer served as of v1.25.

ref: https://kubernetes.io/docs/reference/using-api/deprecation-guide/#cronjob-v125

Change-Id: I4b80b6a85be5f117d8513710c6a248639ea81edf
2023-05-02 11:46:36 +03:00
Zuul
3e28b8b3ca Merge "Upgrade openvswitch image to latest-ubuntu_focal to fix qos issue" 2023-04-28 18:05:58 +00:00
Vladimir Kozhukalov
e2d550972a Add pdf-docs tox env
Story: 2006104
Task: 35275
Change-Id: Ieadbb40bcd7fbdd6d37e78eb174fdb99ad7312a8
2023-04-27 11:13:29 +03:00
Samuel Liu
1a4046f9b1 Migrated pdb resource to policy/v1 API version
The policy/v1beta1 API version of PodDisruptionBudget is no longer served as of v1.25.

ref: https://kubernetes.io/docs/reference/using-api/deprecation-guide/#poddisruptionbudget-v125
Change-Id: Ib9edd7f159aedf1f2f054bcb9f2281389ba206b5
2023-04-25 17:16:44 +08:00
lvdongbing
34b3b4f1f4 Upgrade openvswitch image to latest-ubuntu_focal to fix qos issue
Closes-Bug: #2017383
Change-Id: I21c0260fa90ecdc1cc52469fea508f1f0bac5692
2023-04-23 02:26:56 +00:00
dbcocle-ts
7b8d459d14 Fix ovn db persistence issue
Change ovn db volume default mount to '/var/lib/ovn', as ovn(sb or nb)
default use this directory.

Closes-Bug: #2016844

Change-Id: I017781bd4df836949396c34f8ef5e6bd0f07efab
2023-04-19 01:41:08 +00:00
Zuul
766c5803b9 Merge "Update kubernetes cgroup value for libvirt" 2023-04-13 17:37:35 +00:00
Vladimir Kozhukalov
97ce6d7d8e Update kubernetes registry to registry.k8s.io
See this link for details
https://kubernetes.io/blog/2023/03/10/image-registry-redirect/

Change-Id: Ifc8b64825751933def16a1784fae987a1d7250ad
2023-04-11 04:54:26 +03:00
Ruslan Aliev
c4a9e8b03d Add configurable liveness probe for elasticsearch client
Signed-off-by: Ruslan Aliev <raliev@mirantis.com>
Change-Id: I46e1382123ce4497e3f8e414a83fe0861f0cf43b
2023-04-07 15:12:34 -05:00
Vladimir Kozhukalov
d67ce6740b Update kubernetes cgroup value for libvirt
The reason for this PR is that in most cases
we utilize systemd cgroup driver nowadays.
So it worth it to set kubepods.slice cgroup root
by default.

https: //github.com/kubernetes/kubernetes/blob/release-1.26/pkg/kubelet/cm/cgroup_manager_linux.go#L77-L81
Change-Id: I0cad148eb827439815c7e5bad1d6b6108cd1ab8d
2023-03-31 04:28:55 +03:00
Zuul
35bad7ea02 Merge "Update create db user queries" 2023-03-30 23:57:17 +00:00
Stephen Taylor
1cf87254e8 [ceph-client] Allow pg_num_min to be overridden per pool
This change allows the target pg_num_min value (global for all
pools) to be overridden on a per-pool basis by specifying a
pg_num_min value in an individual pool's values. A global value for
all pools may not suffice in all cases.

Change-Id: I42c55606d48975b40bbab9501289a7a59c15683f
2023-03-30 15:40:33 +00:00
Jose Bautista
1775e1bea6 Update create db user queries
Using GRANT to create users was deprecated in 5.7. The current
query to create user fails with new versions of mysql.

Change-Id: If991778763dc0961508e8466244955fd71b47591
2023-03-31 01:47:47 +11:00
Sergiy Markin
e6dfa15c26 Upgrade of Kubernetes
This PS upgrades the following components:
- minikube to 1.29.0
- kubernetes to 1.26.3
- calico to 3.25
- coredns to 1.9.4

Also this PS adds cri-dockerd required for kubernetes newer than 1.24
and adds recirsive response to coredns.

Change-Id: Ie8aa43642de5dfa69ed72fadbfd943b578a80a74
2023-03-30 00:37:51 +00:00
Zuul
7c1b49a341 Merge "[ceph] Document the use of mon_allow_pool_size_one" 2023-03-24 04:53:24 +00:00
Samuel Liu
6034a00bf7 Replace node-role.kubernetes.io/master with control-plane
The master label is no longer present on kubeadm control plane nodes(v1.24). For new clusters, the label 'node-role.kubernetes.io/master' will no longer be added to control plane nodes, only the label 'node-role.kubernetes.io/control-plane' will be added. For more information, refer to KEP-2067[https://github.com/kubernetes/enhancements/tree/master/keps/sig-cluster-lifecycle/kubeadm/2067-rename-master-label-taint]: Rename the kubeadm "master" label and taint.

the kubernetes pr: https://github.com/kubernetes/kubernetes/pull/107533

Change-Id: I3056b642db0a1799089998e3c020b4203c9a93ab
2023-03-20 13:38:07 +08:00
Sadegh Hayeri
6c5206a01c Add ovn
Change-Id: I2b1457042afcbe1375b771161acfa929a91e6813
2023-03-17 22:11:55 +03:00