Commit Graph

218 Commits

Author SHA1 Message Date
Gage Hugo 5ad8824fca Retire openstack-helm-addons repository
This change removes the context from the openstack-helm-addons
repository as part of the effort to retire the repo.

Change-Id: I25603f95f54d88293623206b4d56a109d3b3a5c3
2022-07-25 08:49:04 -05:00
Zuul cc264e59f6 Merge "Remove shaker residue" 2021-08-23 17:09:06 +00:00
jh629g 4b3bfbd550 Retire Ranger from OSH-Addons
Ranger is beginning the process
of retirement in openstack, and
will be removed from OSH as a
result.

Change-Id: I4844964c4edbde935de47dad3f689ffa89671ccc
2021-06-29 10:57:08 -05:00
jinyuanliu 770f97d921 Fix problem of lack of matchlabels
The lack of matchlabels will cause install to fail.

Change-Id: I5e1065b41692206018f94de1668cb0ad13d49aee
2021-06-29 03:03:17 +00:00
jinyuanliu 275ff71642 Remove shaker residue
About shaker chart, It's been removed.

Change-Id: I75ecd13540db846dd700ff0b6c611c74f462ad72
2021-06-29 10:35:14 +08:00
Zuul 9ae088ec67 Merge "Remove shaker chart" 2021-06-28 17:33:22 +00:00
Gage Hugo e9a2bf0159 Remove shaker chart
The shaker chart was moved to osh-infra repo, the copy in this
repo can now be deleted.

Change-Id: I2d84f0e40f6fa989b7984802f103dd96f111c7ea
2021-06-28 16:13:10 +00:00
jinyuanliu e678baf6cf docs: Update Freenode to OFTC
http://lists.openstack.org/pipermail/openstack-discuss/2021-May/022780.html
Change-Id: Ifb2f09d82ee02a9a94e46f595d9dfda55e3691d4
2021-06-24 19:46:00 +00:00
Gage Hugo ee0201bd7d Remove sonobuoy chart
This change removes the sonobuoy chart from openstack-helm-addons.

Change-Id: Ic9a48f2082c1aa602d903d22f42c1724fd4aec73
2021-06-24 10:51:18 -05:00
Gage Hugo 0145e0f94f Update releasenotes, linting job, and fix gates
This change updates the releasenotes for each chart to their
latest version.

Also updated the linting job to not ignore releasenotes in
order to fix issues in the future.

Also fixes a rust pip dependency in the jobs causing them to
fail.

Change-Id: Iecb103b153a0ff3f3c90077afe856fc060d5988a
2021-04-15 22:28:41 +00:00
Zuul f28cae9aed Merge "Use TOX_CONSTRAINTS_FILE" 2021-01-29 18:53:57 +00:00
jh629g c7816d8397 Complete removal of SSH data in Ranger
Ranger has not used SSH since the
project finished conversions to
python 3.6. The data below is to be
removed, barring user_home and
retry_limit as they are values
which have been co-opted by other
parts of the ranger/ranger-agent
codebase.

Change-Id: If7cd18ddd6f266d58a10bfabd202f9daa4a518bf
2021-01-28 19:17:40 +00:00
Gage Hugo 3c07f7465c Add reno job to openstack-helm-addons
With OSH now publishing charts regularly with each change, there
needs to be a way to track these changes in order to track the
changes between chart versions.

This proposed change adds in a reno check job to publish notes
based from the changes to each chart by version as a way to
track and document all the changes that get made to OSH
and published to tarballs.o.o.

Change-Id: Id892261b5d3b7f206ba355b55988ffae7606e84d
2021-01-26 23:38:37 +00:00
jh629g c814dd5dc6 Update Ranger Null Values
Further null values found by helm v3
in openstack-helm-deployments must
be turned into empty strings instead

Change-Id: I83be4bbfd87add83a72f655e8b326250ef6383c9
2021-01-14 22:41:47 +00:00
zhangboye e0991bf40c Use TOX_CONSTRAINTS_FILE
UPPER_CONSTRAINTS_FILE is old name and deprecated
This allows to use upper-constraints file as more
readable way instead of UPPER_CONSTRAINTS_FILE=<lower-constraints file>.

Change-Id: I0b96846fdda3e38e33276a63f4235cdfa761cb2a
2020-12-24 14:53:11 +08:00
jh629g 0f44380f08 Update Ranger Secrets for Helm v3
Helm v3 doesnt like null secrets.
Attempting to switch to empty string,
testing for v2 compatibility before
merging for v3 use. Also removed references
to deprecated code cloud repo usage for
storing heat templates.

Change-Id: I3d06c77d02b398253f22b847f68bb359e0c2ec2f
2020-12-18 21:33:01 +00:00
Gage Hugo aea4bcf726 Add helm3 linter for osh-addons
This change adds a simple helm3 linting check job that will
attempt to lint the charts in osh-addons with helm3. It will
be non-voting for now.

A future change will move this to osh-infra and use the job
from there for the other repos.

Change-Id: I716337005f977c6e936ce8c08ec24b20871f8284
2020-12-17 14:31:08 -06:00
jh629g 5d237b4a87 Update Source for Ranger-Agent
Source was set as openstack-helm
rather than openstack-helm-addons,
which is the location that ranger-agent
charts live. This should correct an
issue currently being experienced
in openstack-helm-deployments patchset:
https://review.opendev.org/764492

Change-Id: I0217fde2ee0741b6b40462e30cffc99583d6c2dc
2020-12-10 08:29:02 -06:00
Gage Hugo c89f819ea3 Update default values for overrides
This change updates the values overrides for openstack release
and ubuntu release to train and bionic respectively.

Change-Id: I672f4c83867b6e884ec5ba939512c6186bd080dd
2020-12-08 13:20:57 -06:00
Gage Hugo ce767e8c27 Add chart publish job to addons
This change adds the publish-openstack-helm-charts job to
this repo. Also adds a new makefile target to be utilized
by the chart publishing job.

Depends-On: https://review.opendev.org/765634
Change-Id: Ie40c9d965ae32408c237139657f2860ed2419e0f
2020-12-04 17:38:55 -06:00
Chi Lo fc9b28b3e2 Removed hooks from annotations
The add-region job/pod does not need to tie with the post-install
or post-upgrade hooks. In addition, hook-delete-policy is not needed
since this resource is not created by a hook. Job deletion prior to
upgrade is already being taken care of in values.yaml.

Change-Id: Ib22cce350e82986d0f51c7bca2be0ee5a01c36a9
2020-10-09 14:50:47 +00:00
Chi Lo 7963190677 Reduce resource creation wait time
Change-Id: I8ea7a520e7261fc83afc94bde215f5e6b083c7f6
2020-09-30 17:30:26 +00:00
Andrii Ostapenko b6a94835a3
Change helm-toolkit dependency version to ">= 0.1.0"
Since we introduced chart version check in gates, requirements are not
satisfied with strict check of 0.1.0

Change-Id: I6e0a3b301392e82231a2081859ca4d380a0138d8
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-09-29 13:12:55 -05:00
KHIYANI, RAHUL (rk0850) 5e993fbb20 Add headers to nginx ingress containers
Added X-XSS-Protection header to nginx ingress containers
Enable X-Frame-Options DENY header in nginx

Also Fix chart lint errors

Change-Id: I2b696fffd13518aa9f423f6d8624a279726c60ca
2020-09-24 16:22:39 -05:00
Zuul 237915c779 Merge "Fix chart lint errors" 2020-09-16 22:58:24 +00:00
okozachenko 0945d57d27 Fix chart lint errors
Change-Id: Ifda0b64f7319f0885568a8848ee809af7b581014
2020-09-16 21:07:10 +03:00
Chi Lo 743f15efbc Create region retries when Ranger server not available
Change-Id: Ice06d39e465fa70593920d5bf7b18d1a427dadbf
2020-09-15 22:18:07 +00:00
Chi Lo b5cbc37078 Fix pod not restarted when issue detected
Service pod which fails connection, timed out, or unexpected
error during health probing should return with error status.

Change-Id: I26795a9f421fbdc84e75501b729da043b898c994
2020-09-02 13:58:26 -07:00
Tin Lam c6e0daae8f fix(interface): makes the interface public
Changes the interface from the default (internal) to public.

Change-Id: I0862d7263dcb60b358f865002dc974d55deabee5
Signed-off-by: Tin Lam <tin@irrational.io>
2020-08-18 16:10:54 -05:00
Tin Lam e3ddb0b770 fix(ep): changes keystone endpoint
This patch set updates the endpoint from the internal to the public
endpoints for keystone-related processing.

Change-Id: Id792cba5a7227a63dfbd38035d98110da74efdc9
Signed-off-by: Tin Lam <tin@irrational.io>
2020-08-17 11:37:31 -05:00
Zuul fb48e46ff6 Merge "Enable TLS for Ranger Agent services call to Openstack Services" 2020-08-13 18:58:24 +00:00
Chi Lo 7e211a6366 Enable TLS for Ranger Agent services call to Openstack Services
This patch enables TLS for Ranger Agent services so that internal
call from Ranger Agent services pods to Openstack services such as
keystone, heat, and mariadb utilizes TLS.

Change-Id: I8a548ff435e8b87783a50c5ce82b5931a3d76a22
2020-08-06 23:24:52 +00:00
Gage Hugo 74af2d0d75 Add ensure-pip to osh-gate-runner for addons
This change adds the ensure-pip task to the gate-runner in order
to ensure that the various jobs we run will have pip by default.

Change-Id: I0a045a3e12ede8480d47a79dc60789be4a7054d3
2020-07-28 16:44:45 -05:00
Andrii Ostapenko 5b33307fd5 Explicitly specify a script directory for jobs run
Required to support reusing of a job in another project.

Change-Id: I41eb227ac8025848f3d149662ff3ef53c58ab037
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-21 16:39:22 +00:00
Zuul 86f567543f Merge "Enable templates linting" 2020-07-13 20:33:46 +00:00
DODDA, PRATEEK REDDY cbafbe21e7 Add missing security context to Ranger pods/containers
This updates the Ranger chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true.

Depends-On: https://review.opendev.org/740119/

Change-Id: Ic06caec81015ac04fb162d8c2482da6b2329e204
2020-07-13 17:43:14 +00:00
Andrii Ostapenko 815deeaa2e Enable templates linting
- braces
- brackets
- colons
- commas
- comments
- hyphens
- indentation
- key-duplicates

with corresponding code changes.

Also disable document-(start|end) rule.

* Unrestrict octal values rule since benefits of file modes readability
  exceed possible issues with yaml 1.2 adoption in future k8s versions.
  These issues will be addressed when/if they occur.

Depends-On: https://review.opendev.org/739600
Change-Id: Ide884ed541898db2ba21a863aff0cea9ec3f75dd
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-07-13 17:28:42 +00:00
Zuul f2d430c985 Merge "Add missing security context to Ranger-Agent pods/containers" 2020-07-13 17:27:01 +00:00
Zuul 3862eef51c Merge "Add missing security context to Sonobuoy pods/containers" 2020-07-13 14:55:24 +00:00
DODDA, PRATEEK REDDY 1e7cf7b447 Add missing security context to Ranger-Agent pods/containers
This updates the ranger-agent chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Depends-On: https://review.opendev.org/740119/

Change-Id: I9fe5d96958805ae9634521604845411d904d8458
2020-07-08 23:55:17 +00:00
DODDA, PRATEEK REDDY 44f2de10b1 Add missing security context to Sonobuoy pods/containers
This updates the sonobuoy chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Depends-On: https://review.opendev.org/740119/

Change-Id: I0964c9809402635c9a7049b61fb954a4ebf01bb1
2020-07-08 22:48:26 +00:00
Chinasubbareddy Mallavarapu 806bb7594c [CEPH] Use loopback devices for ceph osds.
- This is to make use of loopback devices for ceph osds since
support for directory backed osds going to depricate.

- Move to bluestore from filestore for ceph-osds.

Change-Id: I49afabdb23355f57a01b209fe9b3383188ab5aaa
2020-07-08 16:23:48 -05:00
diwakar thyagaraj 6dc8ecaa2d [FIX] Fix ranger add-region pod.
Change-Id: I34f8869f2548521468c33a1b99f5bef259ac8117
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-06-26 21:25:33 +00:00
diwakar thyagaraj 5545e6ccda [Fix] Enable Apparmor to missing ranger-agent completed job.
Change-Id: I5b3b0b15eca56816695efe11219f61b05069256f
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-06-26 16:14:53 +00:00
diwakar thyagaraj 7b762a8e23 [FIX] Fix ranger-agent test pod
1)Update ranger-agent SHA to support bionic Images.
 2)Added heat deploy script for ranger deployment.
 3)Created seperate Jobs for ranger and mini-mirror apparmor.

Change-Id: Icecae5bd8f751508ef0417c8cc1a5e3959d44119
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-06-24 15:38:22 +00:00
dt241s@att.com 768722b1cf Enable Apparmor to Components in Addons
1)Added Apparmor Script andimoved apparmor configurations
to values-overrides to enable optional experimental Jobs.

2)Added Apparmor to mini-mirror,ranger,ranger-agent
 and sonobuy Components.

3)Moved apparmot
Change-Id: I9772d8425aa3d46e1fb0e1a6962ea999e77a6655
2020-06-17 19:30:06 +00:00
Zuul ce635602ea Merge "Enable yamllint rules" 2020-06-05 04:10:32 +00:00
Chi Lo 811e28419d Fix typo for location information
Change-Id: If7854028463b555b212a03d670e163eae2184a99
2020-06-04 10:49:42 -07:00
Chi Lo b1450140f1 Retreive Location information from new environment variables
Change-Id: Ifb075af88489ef85e45de001a495723f5443ad94
2020-06-04 16:13:03 +00:00
Andrii Ostapenko 4254e9a3ef Enable yamllint rules
- comments-indentation
- document-end
- document-start
- empty-lines
- new-line-at-end-of-file
- new-lines
- octal-values

Change-Id: I9cf4b60ee920b092c56cc54f331b6130955f93b8
2020-06-01 09:33:01 -05:00