This also changes the group wrs_protected to sys_protected
to de-brand the user and group names.
Depends-On: I887464a20fc17d66529caea03be2b445156f9426
Change-Id: Ic2ea06d3ac15c31854a604af5f4cecf9094fcaea
Story: 2004716
Task: 28748
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Update the helm-upload script to require specifying a specific helm
repository to use with it's operations.
Change-Id: I4b1a3615a6bd5d0bdd834a1cdf27c05d5a1057a0
Story: 2005424
Task: 30645
Signed-off-by: Robert Church <robert.church@windriver.com>
This updates the helm-upload to stop syncing charts to standby
controller as charts are changed to store in drbd fs.
Story: 2004520
Task: 28343
Depends-On: https://review.openstack.org/#/c/630763/
Change-Id: I12f17fae6124650d878ba7a560f94b7a8ed36e56
Signed-off-by: Angie Wang <angie.wang@windriver.com>
This commit upversions helm from v2.11.0 to v2.12.1.
This is necessary as support for kubernetes v1.12 support is only
introduced in helm v2.12.
Story: 2004520
Task: 28777
Depends-on: I2501cd1174f85810892e51ac8a44746302eeb120
Change-Id: I605f1ba2c7fda52d9e0bf84b6132314efad15b24
Signed-off-by: Joseph Richard <joseph.richard@windriver.com>
Point the spec and data file to the newer version.
Reset the TIS patch version from 3 to 1
Story: 2002843
Task: 26751
Depends-On: Ic6a75a2c89d6992433fe78407ff4464da339e776
Change-Id: I5afb5847204c62214689f9e246a4c9c0ddaf02b7
Signed-off-by: Al Bailey <Al.Bailey@windriver.com>
There's a lot going on here but conceptually we're just enabling a
local helm repo along with a helper script to install helm charts into
the repo.
The first item is to configure lighttpd to serve up helm charts as
static information (so no proxying) at http://127.0.0.1/helm_charts".
This is fairly straightforward, but the files are served out of
/www which isn't a replicated filesystem and which is owned by the www
user.
The helm puppet manifest is modified to create the "helm_charts"
directory for the webserver, to generate the initial index file,
and to tell helm to add the new repo for the "wrsroot" user. The
various commands are run as specific users with specific environment
variables, this is key to making everything work as planned.
To allow the wrsroot user to upload charts into /www the helm-upload
script will re-run itself as the www user. /etc/sudoers.d is modified
to allow this without asking for a password. The upload script will
copy the specified charts in to /www/pages/helm_charts, and will then
regenerate the index.yaml file. The upload script will then try to
sync the files over to the other node. To enable this without
prompting for a password we modify /etc/rsyncd.conf to allow
passwordless syncing into /www/helm_charts.
In a future commit we'll need to sync charts with the other
controller when booting up, and also configure the local starlingx
helm repo on the second controller.
Change-Id: I86a7795decb7833cb22c04e34e298c8d24ed7fa3
Signed-off-by: David Sullivan <david.sullivan@windriver.com>
Story: 2002876
Task: 22831
Depends-On: https://review.openstack.org/596802
This update removes the tiller-2.9.1-docker-image.tgz tarball from
the helm package until it can be properly gernerated within the
build framework.
Story: 2002876
Task: 22831
Change-Id: Ie54187b0462be22af5e8935fd4fd25c6ff913332
Signed-off-by: Jack Ding <jack.ding@windriver.com>
