495 Commits

Author SHA1 Message Date
Davlet Panech
afc2fe2a4c debian: make all packages arch-independent
All debian packages in this repo are architecture-independent (ie don't
include any arch-specific binaries). Declare them as such in debian
control files. This is inline with their centos versions.

TESTS
====================================
Rebuild packages in debian

Story: 2009897
Task: 45278

Signed-off-by: Davlet Panech <davlet.panech@windriver.com>
Change-Id: I25a41dc96565caa62767ab3c302967cec3b96fb5
2022-05-04 22:26:05 -04:00
Davlet Panech
78d407c12f neutron: remove duplicate image from chart
Remove duplicate entry "neutron_openvswitch_agent" from
openstack-neutron chart. Otherwise YAML in manifest is not strictly
valid and some parsers can't load it properly.

Story: 2009897
Task: 45277

Signed-off-by: Davlet Panech <davlet.panech@windriver.com>
Change-Id: If134561cc966a0ca28bfdf1d607cfb44bbed95c5
2022-05-04 21:41:28 -04:00
Arthur Luz de Avila
fff6c25952 Decrease terminationGracePeriodSeconds on glance-api
The glance-api pod has a terminationGracePeriodSeconds
of 600s(10min) and the others services has 30s. This high
terminationGracePeriodSeconds may cause timeout in some
cases and there is no reason for this high
terminationGracePeriodSeconds.
The terminationGracePeriodSeconds has been introduced on
https://review.opendev.org/c/openstack/openstack-helm/+/469974
but there is no explanation why it is too high.
the Glance don't gracefully terminate due to a authenticate
with kube-apiserver  with the error: "Unable to authenticate
the request" err="[invalid bearer token, Token has been invalidated]"
Looking after it I saw that it can be a timing error between the
communication of the kube-apiserver and the glance-api when is in
terminating state. Normally, the glance api terminate gracefully
before 30sec, but if the error of Unable to authenticate appear, it
kill faster to keep the things working like the other services does.

Test Plan:
PASS: Build on centOS
PASS: Build on Debian
PASS: Apply chart

Story: 2009959
Task: 44927

Signed-off-by: Arthur Luz de Avila <arthur.luzdeavila@windriver.com>
Change-Id: Id4ef301c9ee1fce9f78ee09b3ce7f896d59a5a96
2022-04-08 13:15:42 -03:00
Zuul
b3092e6c21 Merge "Bump Rabbitmq version to 3.9.0" 2022-03-29 13:09:44 +00:00
Arthur Luz de Avila
e1edf583e0 Bump Rabbitmq version to 3.9.0
As Rabbitmq 3.7.x is in EOL this PR bump the version to 3.9.0

TEST PLAN:

PASS: Build chart with change

Test - Create Instance from Image, from Volume and fromSnapshot
PASS: Create Flavors For Instances
PASS: Create Images For Instances
PASS: Create Volume For Instances
PASS: Create Networks For Instances
PASS: Launch Instances
PASS: Suspend Resume Instances
PASS: Set Error Active Flags Instances
PASS: Pause Unpause Instances
PASS: Stop Start Instances
PASS: Lock Unlock Instances
PASS: Reboot Instances
PASS: Rebuild Instances
PASS: Resize Instances
PASS: Set Unset Properties Instances

Test - Create Instance from Heat Template
PASS: Create Flavors for Instance
PASS: Create Images for Instances
PASS: Create Networks for Instance
PASS: Create Instance Trough Stack

Test - Measurements for Metric
PASS: Create Image For Metrics
PASS: Update Image Name
PASS: Update Image Disk Ram Size

Story: 2009944
Task: 44856

Signed-off-by: Arthur Luz de Avila <arthur.luzdeavila@windriver.com>
Change-Id: I3dea6378ce16fe401035a5ddbbe42f8b84920b2c
2022-03-29 11:14:56 +00:00
Zuul
a5420b6d5d Merge "Fixing cloudformation overrides" 2022-03-28 22:49:31 +00:00
Thiago Brito
02e769a833 Fixing cloudformation overrides
The cloudformation secrets overrides were misplaced inside the
orchestration key.

Reference:
https://github.com/openstack/openstack-helm/blob/master/heat/values.yaml#L803

Story: 2009891
Task: 44673

Signed-off-by: Thiago Brito <thiago.brito@windriver.com>
Change-Id: I05126f1f47dd9152cb2b2102018c50f5640c31ce
2022-03-21 11:06:29 -03:00
Zuul
9b4cc7ce60 Merge "Evaluate lifecycle reapply for https configuration" 2022-03-21 13:38:59 +00:00
Maik Catrinque
65abd8df6a Evaluate lifecycle reapply for https configuration
Ensure that https configuration overrides are only applied when
https_enabled=True and openstack certificates are installed.

Test plan:

PASS: Host-unlock on system with https_enabled=False and
no certificates triggers a reapply.
PASS: Setting https_enabled=True doesn't trigger reapply
if there are no certificates installed.
PASS: Host-unlock on system with https_enabled=True and
no certificates doesn't trigger a reapply.
PASS: Setting https_enabled=False triggers reapply independent
of certificates installed.
PASS: Setting https_enabled=True triggers reapply if
certificates are installed.

Regression:
PASS: OpenStack can be built successfully
PASS: OpenStack can be applied successfully

Signed-off-by: Maik Catrinque
<maik.wandercatrinqueandrade@windriver.com>
Co-authored-by: Rafael Falcão <Rafael.VieiraFalcao@windriver.com>
Change-Id: I0768cb9c062a3e98c4fdadfc70940582cbeb65d3
2022-03-18 18:11:52 -03:00
Zuul
53f7d158b8 Merge "Change ceph-helper-config to a version compatible with Nautilus" 2022-03-16 13:55:46 +00:00
Thiago Brito
ff526496d1 Auto-configure https through system overrides
This commit gives the application plugins the ability to generate the
TLS overrides so users doesn't have to enable the certificates using
helm overrides.

I also included some overrides/tests in this patch for the telemetry
charts, although they still miss the base functionality to enable tls
on openstack-helm/-infra. This is meant to be used as basis in a
future work to enable those charts on stx-openstack properly.

TEST PLAN
PASS Installed stx-openstack without any https overrides or params
PASS Added certificates, apps remained http
PASS Modified system's https_enabled parameter, app was reapplied
     with https enabled
PASS Set https_enabled=False, app was reapplied without https
PASS Reenabled https, app was reapplied with https
PASS Remove, delete, re-upload and reapply app with certs and https
     already enabled on the platform
PASS Created heat stacks with https enabled

Story: 2009891
Task: 44673
Signed-off-by: Thiago Brito <thiago.brito@windriver.com>
Change-Id: I7fed324c2d2f702cc386864aa61664a8807f9b72
2022-03-14 19:30:55 -03:00
Zuul
1b521dda7d Merge "Adding tolerations to disabled charts" 2022-03-11 18:50:38 +00:00
Thiago Brito
352e34cd2a Fix misconfig causing neutron netns job fail
We should be using the default rootwrap that OSH uses, not overwriting
this with sudo. Using just sudo cause a permission problem running this
script.

Closes-Bug: #1964507
Signed-off-by: Thiago Brito <thiago.brito@windriver.com>
Change-Id: I0b16483504fcc83020e3387b7696b55b618a0942
2022-03-10 19:49:16 +00:00
Thiago Brito
a801776a41 Adding tolerations to disabled charts
On the previous work to add tolerations for the openstack-helm charts,
we missed adding those tolerations to disabled charts like the charts
for the telemetry services, ironic, gnocchi and ceph-rgw. This commit
will fix it.

This is a cherry-pick with minor removals from [1] and [2]and should
be removed from the openstack-armada-app tree on the next osh/osh-i
upversion.

NOTE: Since ironic/gnocchi/ceph-rgw charts are not proven to work with
stx-openstack, we will not validate those on the test plan.

[1] https://review.opendev.org/c/openstack/openstack-helm-infra/+/812753
[2] https://review.opendev.org/c/openstack/openstack-helm/+/812734

TEST PLAN
PASS build stx-openstack and install on SX
PASS enable telemetry charts

REGRESSION PLAN
PASS debian build

LOG: https://paste.opendev.org/show/bV3bgChLHxro3caaRC7q/

Story: 2009232
Task: 44572
Signed-off-by: Thiago Brito <thiago.brito@windriver.com>
Change-Id: I0b35e2cb531cf54fc5a319c35e0a058603790af1
2022-03-10 14:04:42 +00:00
Arthur Luz de Avila
abdf99ad03 Update RabbitMQ probes
The healthcheck used to liveness and readiness probes is considered
intrusive and can produce false positives[0]. It's just returning that
the pod is healthy if it's fully booted and whether the pod is waiting
for a peer to appear to sync tables, it cannot succeed and eventually
enters into a pod restart deadlock.
The command is also deprecated and will be removed in future version.
Updating the probes based on current recommenation from community[1].
Because of that, we change the liveness to check the rabbit connection
to check if the rabbit is connected and running and also changed the
readiness to ping the pod after boot to see if it's ready.

Ref:
[0] https://www.rabbitmq.com/monitoring.html#deprecations
[1] https://www.rabbitmq.com/monitoring.html#health-checks

Test plan:
PASS: Close rabbitmq connection inside pod and verify if Liveness fail
and rebooted the pod.
PASS: Readiness check pod state and verify if can ping it to check if
the pod is health after get up.
PASS: Build on Debian

Story: 2009892
Task: 44674

Signed-off-by: Arthur Luz de Avila <arthur.luzdeavila@windriver.com>
Change-Id: Ib98df7e1135b7b5cee50d63a9ab06eb4a961cd4b
2022-03-10 11:49:25 +00:00
Delfino Curado
cd802b4ad5 Change ceph-helper-config to a version compatible with Nautilus
Use docker.io/openstackhelm/ceph-config-helper:ubuntu_bionic-20201223
instead of docker.io/starlingx/ceph-config-helper:v1.15.0. With this,
we align the ceph client version with the cluster and also go back to
the upstream versions.

Test plan:
Build armada app
Apply OpenStack
After applying, verify that there are 4 new pools created
Inspect pods yaml to check images used

Story: 2009867
Task: 44553

Signed-off-by: Delfino Curado <delfinogomes.curadofilho@windriver.com>
Change-Id: I0210b94d88f59035ffdb11790cf74edf3f39b0b7
2022-03-03 07:37:30 -05:00
Zuul
e1735fe05a Merge "Add method to check if OpenStack is HTTPS ready" 2022-03-01 00:13:28 +00:00
Zuul
a6f16c975d Merge "Add py27 and py36 tox jobs to Zuul" 2022-03-01 00:10:24 +00:00
Gustavo Santos
cbd4ac8f4c Add method to check if OpenStack is HTTPS ready
This change adds a _is_openstack_https_ready function to the
openstack.py plugin. It verifies if the platform has https_enabled set
to true and checks if three certificates are present: openstack,
openstack_ca and ssl_ca. If both conditions are met, it returns True.

Test Plan
PASS: Build OpenStack and verify that the generated tarball contains the
added code.
PASS: Apply the built tarball.

Signed-off-by: Gustavo Santos <gustavofaganello.santos@windriver.com>
Change-Id: I28e4bdb0785ae453830a426a731f14a0b80a0d47
2022-02-25 13:48:22 -03:00
Gustavo Santos
298fc4ae6a Add py27 and py36 tox jobs to Zuul
This change adds the k8sapp-openstack-tox-py27 and
k8sapp-openstack-tox-py36 jobs to Zuul, also adding them to the check
and gate jobs.

That way, both CentOS (py27, py36) and Debian (py39) environments will
be included in the tests ran by Zuul.

Signed-off-by: Gustavo Santos <gustavofaganello.santos@windriver.com>
Change-Id: I0ed931e24db85d668ee26210324c895f3d0ad65e
2022-02-23 12:58:51 -03:00
Thales Elero Cervi
592db6b301 Removing pci-irq-affinity lifecycle hooks
This code is being removed as part of an effort to move the
pci-irq-affinity-agent into a openstack application container, instead
of a platform service.

Since now the service will no longer run on the platform but on a
container instead, there is no need to update the platform service
config file after the application apply and remove actions.

TEST PLAN:
PASS: Successfully build the stx-openstack application
PASS: Successfully apply the stx-openstack application

Story: 2009299
Task: 44569

Signed-off-by: Thales Elero Cervi <thaleselero.cervi@windriver.com>
Change-Id: Ic711a2e9d7c32e6e217de936b5b1c141f85e1128
2022-02-22 17:58:13 -03:00
Lucas Cavalcante
b06eb5f63a Debian reenable opentack-helm/openstack-helm-infra
Change Ifb7946e9a289234047934b52d200b951a59c1a3f was rebased wrong
and intends to use an old method of building openstack-armada-app
openstack-helm and openstack-helm-infrafor debian.

This patch correctly applies the new patch changes.

Test Plan:

PASS: Centos Build (build-pkgs openstack-helm-infra openstack-helm)
PASS: Debian Build (build-pkgs -p openstack-helm-infra
                    build-pkgs -p openstack-helm)

Closes-bug: 1960968
Signed-off-by: Lucas Cavalcante <lucasmedeiros.cavalcante@windriver.com>
Change-Id: Ica08158dbba5a10ec7b6266b6808d22d53244095
2022-02-15 20:18:04 -03:00
Lucas Cavalcante
27c4d562c8 Fixes Application Apply failing when HTTPS enabled
Openstack-helm provides the option to terminate TLS at the services.
However, at Starlingx TLS termination is done at the reverse
proxy (ingress) and therefore is unecessary for the OpenStack itself
be HTTPS and terminate tls a second time. Furthermore,  it is not
possible to have https enabled on openstack services with the
current centos based containers that we have, openstack-helm only
supports tls using debian based containers.

Manually working arroud this creates a cumbersome override file, so
to diminish this overrides this patch 0020 and 0013(osh-i) disables
https at the backend, thus maitaining the same behaviour as stx 5.0

Mariadb and RabbitMQ tls does not seem to be working very well within
Starlingx, so we also disable TLS for them. I am not confident that
current openstack-helm and openstack-helm-infra supports production level
openstack with mariadb in TLS mode. Furthermore, from the way everything
is redirected in StarlingX I do see too many performance and stability
issues using both of them with tls enabled.

Disclaimer I did not test with either only mairiadb tls or
rabbitmq activated, but with both of them on the system is not usable.

Test Plan:

PASS: Openstack is Applied. (https disabled)
PASS: enable https. Opensatck is Applied (WITHOUT service.conf
overrides)

Signed-off-by: Lucas Cavalcante <lucasmedeiros.cavalcante@windriver.com>
Change-Id: Ifb7946e9a289234047934b52d200b951a59c1a3f
Partial-bug: 1960354
Related-to: https://review.opendev.org/c/starlingx/helm-charts/+/828815
2022-02-11 16:59:37 +00:00
Maik Catrinque
9892254209 Enable rabbitmq force_boot command
This change sets the rabbit forceBoot flag to true through
the manifest to enable the force_boot command on the RabbitMQ
start script template. Also, add a new condition to the patch
file to use the force_boot command only on the first RabbitMQ
node to boot.

Test plan:
PASS: Shutdown and start a multi-node RabbitMQ cluster
PASS: Build stx-openstack with the change

Regression:
PASS: OpenStack can be applied successfully
PASS: RabbitMQ nodes can join the RabbitMQ cluster

Story: 2009784
Task: 44290

Relates-to: https://review.opendev.org/c/starlingx/openstack-armada-app/+/826516

Signed-off-by: Maik Catrinque
<maik.wandercatrinqueandrade@windriver.com>
Change-Id: Ibd59526eafe941955e06b3141481eaf7c61a04c0
2022-02-04 16:35:54 -03:00
Heitor Matsui
87d67cc91a Fix pci-irq-affinity-agent health probe imports
In the change I58cefac9076db52333b41633bf2cbaa5441dc98c the
pci-irq-affinity-agent code was refactored, this broke the
health probe declared in the helm charts.

This commit alters the health probe to work with the new
nova_provider functions introduced by the agent refactoring.

Test Plan
PASS: Apply stx-openstack and verify that pci-irq-affinity-agent
      pod is created successfully without health probe failures

Closes-bug: https://bugs.launchpad.net/starlingx/+bug/1959480
Change-Id: I245ea5bf8d9ea37dc6ef9300e9d39db2a3e5d08b
Signed-off-by: Heitor Matsui <HeitorVieira.Matsui@windriver.com>
2022-01-29 08:20:47 -03:00
Zuul
35c1c1d575 Merge "Add force_boot command to rabbit start template" 2022-01-28 13:34:33 +00:00
Zuul
d72108881b Merge "Modify VNC server global bind address to the host cluster IP" 2022-01-27 20:56:41 +00:00
Zuul
5cab9df8c4 Merge "Rename VNC deprecated opts" 2022-01-27 20:52:12 +00:00
Maik Catrinque
5aa2f10f7c Add force_boot command to rabbit start template
Currently, if a multi-node cluster is shut down unexpectedly,
RabbitMQ is not able to boot and sync with the other nodes.

The purpose of this change is to add the patches to enable
the possibility to use the rabbitmqctl force_boot command
to recover RabbitMQ from an unexpected cluster shut down.

Test plan:
PASS: Shutdown and start a multi-node RabbitMQ cluster

Regression:
PASS: OpenStack can be applied successfully
PASS: RabbitMQ nodes can join the RabbitMQ cluster

Story: 2009784
Task: 44290

Ref:
[0] https://www.rabbitmq.com/rabbitmqctl.8.html#force_boot

Signed-off-by: Maik Catrinque
<maik.wandercatrinqueandrade@windriver.com>
Change-Id: Ib9dc89483fc14510f96ce56559cc31bd7b28d6ac
2022-01-26 16:31:39 -03:00
Zuul
abf0e32051 Merge "stx-openstack-helm: remove dl_hook" 2022-01-26 17:20:45 +00:00
Zuul
b9bac0fb7a Merge "openstack-helm-infra: fix wrong md5 checksum" 2022-01-25 22:12:57 +00:00
Iago Estrela
ccca420496 Modify VNC server global bind address to the host cluster IP
VNC server is bound on all interfaces, this can be a security risk.
This change configure VNC to listen on the host cluster address. We
cannot use the loopback address because the VNC server proxy runs
on controllers while the VNC server runs on hypervisors.

Test plan:
PASS: Verify that vncserver_listen was changed to server_listen inside
      nova openstack manifest (system helm-override-show)
PASS: Verify that nova-vnc.ini inside nova pod was overwritten with
         server_listen=cluster_host_ip
PASS: Test live and cold migration with VNC Server binding to host
         cluster ip verify that VM VNC console still works after
         migrate.

Story: 2009783
Task: 44274

Signed-off-by: Iago Estrela <IagoFilipe.EstrelaBarros@windriver.com>
Change-Id: I0d60cfc7ade945734b8cd33dca800090a5d34b1f
2022-01-25 19:00:17 -03:00
Iago Estrela
1623a2bc72 Rename VNC deprecated opts
vncserver_listen and vncserver_proxyclient_address were deprecated,
this change aims to replace them with the versioned name.

Test plan:
PASS: Verify that vncserver_listen was changed to server_listen inside
      nova openstack manifest (system helm-override-show).

Story: 2009783
Task: 44273

Signed-off-by: Iago Estrela <IagoFilipe.EstrelaBarros@windriver.com>
Change-Id: I7bc9087bce8926595fd1f0dbc82d722fd26b45a0
2022-01-25 18:59:45 -03:00
Zuul
b39b32b747 Merge "Providing overrides for newer images on OSH" 2022-01-25 20:39:57 +00:00
Thiago Brito
88e18ec9c9 Providing overrides for newer images on OSH
After the upversion of OSH, we perceived that stx-openstack is still
downloading the images "openstackhelm/nova" and "openstackhelm/heat".
These are default images on the OSH charts and we want to overwrite them
with stx-heat and stx-nova images so we don't bring unnecessary and
probably unsupported images to the StarlingX registry and stx-openstack
charts.

TEST PLAN
PASS Install stx-openstack and made sure no openstackhelm/* images are
     being downloaded.

Log of the image downloading: https://paste.opendev.org/show/812347/

Closes-Bug: #1958677

Signed-off-by: Thiago Brito <thiago.brito@windriver.com>
Change-Id: I365a6f373cced98cb62aa51626a9657abad41b08
2022-01-24 20:46:35 +00:00
Yue Tao
a5ab47c877 openstack-helm-infra: fix wrong md5 checksum
Test Plan:

Pass: successfully build openstack-helm-infra

Story: 2009101
Task: 43801

Signed-off-by: Yue Tao <yue.tao@windriver.com>
Change-Id: Ief4a86bda2ac81412e0dd114ebee7bca1c055be9
2022-01-21 18:49:24 +08:00
Zuul
2a0a6f24a0 Merge "openstack-helm-infra: remove dl_hook" 2022-01-21 00:12:21 +00:00
Yue Tao
e4b0126863 stx-openstack-helm: remove dl_hook
Replace dl_hook with "src_path" and "src_files"

Test Plan:

Pass: successfully build stx-openstack-helm
Pass: No difference comparing with the result of dl_hook

Story: 2009101
Task: 43801

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Change-Id: I477c0b51ed735f9bcab6bf80e96a109f24c96710
2022-01-19 10:48:34 +08:00
Yue Tao
da84f84ecb openstack-helm: remove dl_hook
Add "dl_path" to download the source tarball.

Add "src_files" to copy local files to build directory.

Copy patches to deb_folder/patches, and remove the patching commands
from rules.

Remove dl_hook.

Test Plan:

Pass: successfully build openstack-helm
Pass: No difference comparing with the result of dl_hook

Story: 2009101
Task: 43801

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Change-Id: I5686cdab4869f5627422c8e7f99a0ce1bdeac9a7
2022-01-17 13:41:36 +08:00
Yue Tao
e6fa8c32c9 openstack-helm-infra: remove dl_hook
Add "dl_path" to download the source tarball.

Add "src_files" to copy local files to build directory.

Copy patches to deb_folder/patches, and remove the patching commands
from rules.

Remove dl_hook.

Test Plan:

Pass: successfully build openstack-helm-infra
Pass: No difference comparing with the result of dl_hook

Story: 2009101
Task: 43801

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Change-Id: Id2a74753307b906e6a51f816c4525068abeb9ba4
2022-01-17 13:21:52 +08:00
Zuul
1d2ee5ad30 Merge "Fix nova-compute-ssh" 2022-01-14 12:46:29 +00:00
Lucas Cavalcante
4e3157bf4c Fix nova-compute-ssh
On stx-openstack, we run the nova-compute containers as user 0 (root) to
get privileged access to some of the host resources. During the latest
upversion of openstack-helm, we got in some commits that were
incompatible with our usage of the root user since the keys for ssh
access to a different compute were always placed under the 'nova' user's
folder. This commit fixes that behavior while we don't merge a
definitive fix on openstack-helm and go through a new upversion.

Test Plan:

PASS - nova-compute-ssh starting correctly after change
the sshd->ssh parameter
PASS - migrate/resize vm

Closes-Bug: #1956229

Signed-off-by: Lucas Cavalcante <lucasmedeiros.cavalcante@windriver.com>
Signed-off-by: Hugo Brito <hugo.brito@windriver.com>
Change-Id: Ic90e8e64670b8314b9a2f38b93a59361dcb7ecc9
2022-01-13 22:59:54 -03:00
Heitor Matsui
f555e6929f Adapt pci-irq helm chart for oslo_config
The pci-irq-affinity-agent currently uses two mechanisms to
store its configuration parameters, and this is being unified
in [1] to use only oslo_config. As the agent uses a custom
config file in a path not used by default by oslo_config,
it will be needed to pass this path as argument when running the
application, so this commit changes the helm chart to pass the
agent config file with the "--config-file" argument used by
oslo_config.

[1] https://review.opendev.org/c/starlingx/utilities/+/822540

Test Plan:
PASS: Verify that agent definition is created with the
      argument --config-file
PASS: Verify that the agent command script runs without errors
PASS: Verify that the health probe script runs without errors

Regression:
PASS: Verify that OpenStack applies successfully

Story: 2009299
Task: 44214
Change-Id: Ibd9b8c9537ccd46351a4ec511a36c273ae0536b4
Signed-off-by: Heitor Matsui <HeitorVieira.Matsui@windriver.com>
2022-01-06 11:47:57 -03:00
Zuul
1b67fd1aa8 Merge "Add amqp topic to pci-irq-affinity-agent" 2022-01-04 17:05:43 +00:00
Iago Estrela
07524b60cb Add amqp topic to pci-irq-affinity-agent
Nova has two kinds of RabbitMQ notifications publishers: versioned
and unversioned, this change is needed in order to parameterize the
use of the compatible agent notification listener based on the amqp
topic (notifications or versioned_notifications).

Test plan:
PASS: Apply stx-openstack successfully with versioned_notifications
         and notifications assigned to the topic variable.
PASS: Verify that pci-irq-affinity agent config file was overwritten
         with the topic value.

Story: 2009299
Task: 44237
Relates-To: https://review.opendev.org/c/starlingx/utilities/+/823021

Signed-off-by: Iago Estrela <IagoFilipe.EstrelaBarros@windriver.com>
Change-Id: I4ea3b4eb3c77486bfa84cdc33106484921569275
2022-01-03 16:23:40 -03:00
Zuul
158734e061 Merge "Modify description of IRQ metadata on OpenStack UI" 2021-12-31 16:13:08 +00:00
Maik Catrinque
85398ea6c4 Modify description of IRQ metadata on OpenStack UI
Modify the PCI IRQ Affinity mask metadata description on the
OpenStack UI to provide guidance to the end user on how to
set up the mask.

Test plan:
PASS: PCI IRQ Affinity metadata description is changed on
the Openstack UI

Regression:
PASS: OpenStack can be applied successfully
PASS: metadata is added to the supported metadata list
PASS: user can set/change/delete metadata value

Story: 2009299
Task: 43861
Relates-to: https://review.opendev.org/c/starlingx/openstack-armada-app/+/817168

Signed-off-by: Maik Catrinque <maik.wandercatrinqueandrade@windriver.com>
Change-Id: I4175da9a872f7469b06993ff0da6ac7a3f8dfd19
2021-12-30 14:40:10 -03:00
Zuul
d7d35bd0c6 Merge "Add openstack-compute-node toleration" 2021-12-29 18:24:42 +00:00
Zuul
4c4092117b Merge "Add GaleraDB Secure Replica Traffic" 2021-12-27 22:49:58 +00:00
Lucas Cavalcante
fbf8dd7772 Add GaleraDB Secure Replica Traffic
This sets `wsrep_provider_options` for GaleraDB when TLS is enabled

NOTE: The recommended SST (state snapshot transfer) for mariadb>=10.2
is `mariabackup`. mariabackup ONLY works connecting to localhost
see: fe7e44d8ad/scripts/wsrep_sst_mariabackup.sh (L711)
Therefore, you MUST create a certificate with SAN `localhost` or cert
verification will fail.

Test Plan:

Pass:
      * Apply Openstack
      * Run `SHOW GLOBAL STATUS LIKE 'wsrep_%';` at mariadb
      * assert wsrep_cluster_size is 2
      * assert wsrep_cluster_status is Primary

Closes-Bug: 1955649
Change-Id: I8081ffb4fb1a08f1a05323b3286e9bad23a379af
Signed-off-by: Lucas Cavalcante <lucasmedeiros.cavalcante@windriver.com>
2021-12-27 10:41:44 -03:00