Entrypoint part for service-per-service deployment.
Change-Id: I16e370cbe11c38dc8746a66e43329c26cbc51395
Depends-On: I274826648390b844d240b7ae545c40264f662452
Just two more variables added to rendering scope (prefernce is not to
add os.environ dict entirely).
Change-Id: Ibc6e8b91055f411b058505d14c2d83fbc826cdd4
Depends-On: Iadd0529d166ef1dad1697215bbc181104a7b926e
- Update "address" function to use "tls" config option and set scheme to
'https'. Also we check, that service is in list of services, which support
TLS.
- Updated function for generation Environment, which will be used by
openstackclient. Now 'https' scheme will be used if 'tls' is enabled.
Also was added new variable for storing path for file with CA
certificate.
- Implementation of httpGet was changed to support 'https' endpoints.
Now requests.get method uses 'https' scheme with verify=False, if 'tls'
is enabled.
Change-Id: I88bc21571589dcd4c31bb5ce5015a75676ed2d85
- Replace using global option on etcd tls option
- Update name of config option for generation certs
Change-Id: Ibfbbf0805cee01d924c970d0d7c9d8d356bc6881
With this change CA certificate is saved to /opt/ccp/etc/tls/ca.pem, if that
file does not exist. Should be useful to avoid mounting CA certificate to each
job, pod, etc.
Change-Id: I574d64082e77f49024f49aa7b30c4f2f6cc044ac
Depends-On: Ib4b3ea4da7c1f641b9ab0223226348de5eac94df
Get nodes configs map, check for existing configs for
current node, and if it is, merge it with globals config - variables
for further using in jinja and so on.
Change-Id: I379f4840e6093b7910b5d7dd612de62b1fe0ac2e
Depends-on: I4de6a0fad94d5f83ca486c952d80d1c87c880c0e
Related-bug: #1653077
For SSL-enabled deployments file creation should be first, otherwise
start_script.py won't be able to connect to etcd, since ca.pem is
missing.
This reverts commit 55d77ced5d.
Change-Id: Ic488d837b1dd4f21eae4ad5fe26bfb71b1f8a04d
An exception support allows to use some kind of template-level
validation. Its may be helpful for openstack services configs
files templates.
Usage:
{% raise_exception("exception message") %}
Change-Id: Id7d51916572da8bcb9161739240805f5f7cc80cc
This is needed for ODL integration, where we need to set
a manager for OVS in OVS containers in the form of
tcp:<odl_ip_address>:<tcp_port>
Change-Id: I46d292e45bb7032d67e13522556ad40c544c4ba4
Readiness check should depend on "done" state of
the service launched on the same anode where this check performs.
Change-Id: I848da62d560902c7c0cd44bb319b87ed80168cb5
This option will be used in `address` function and will be
added to internal urls, so that default address will be
changed: service.ccp -> service.ccp.cluster.local
Change-Id: Ic5f1968f81a66c84b8c83148ebf219b679aff61b
Depends-On: Iaa7e1172120506e284a0ae7b3c4539af411c8535
The patch required for https://review.openstack.org/#/c/396337/
Currently jinja can import files only from directory where is
rendering file located, like:
/etc/ccp/files/nova.conf.j2
/etc/ccp/files/ <--- jinja imports allows only from it
To make possible importing files from '/etc/ccp/exports' where is located
generic jinja config templates just use ChoiceLoader
with several FileLoaders.
Change-Id: I429656b7eaf6312ee2d27ccaf0cb8802a234e871
* scheme can be added with with_scheme=True flag
* ingress port will be added to the end of the address
Change-Id: Iea6b885efdbf0d18268b181007a61dff36b904f0
Depends-On: I94efeea5a8a0acb67781d3e5a50b0c99601f7b4e
"address" function extended to support ingress
domains
Change-Id: If39245ddde6faf34cb91e7bb996c497f3685add3
Depends-On: Ic621af6930f078eea17fd83fce26b42cd32ecf01
All containers will set 2 statuses in etcd: global and local
Example of local dependencies definition:
dependencies:
- service:local
Change-Id: I0351ced0b6c52033df4904898731ac960da153ec
Depends-On: I4f1dd5ffe5a3c2e6291721e0343d603259a7f014
The only case where we need it was nodeName parameter
from k8s downward api, now we have "node_name" parameter
available for rendering in all containers
Change-Id: If6d76cd69b0d176842fc659a86971e8584992122