* Update devstack-plugin-container from branch 'master'
to 0e50d17b8d2e80f69f2d2b2189ada08d90f95f60
- Added the correct CentOs 9 stream repo for Cri-o Installation.
In CentOs 9 stream repo added gpgkey url along with baseurl.
Closes-Bug: #2041788
Change-Id: I601eb22df31b33f680996eea98dc8e49d0fbb612
* Update devstack-plugin-container from branch 'master'
to 00523744112bdcd91cbb4e56b9fd054c6b9b60c1
- Failed to launch kubelet after rebooting
The default behavior of crio service is `disable` if you install it with
devstack. So, kubelet cannot launch after rebooting a host because crio
isn't run on the host before. To fix the issue, enable crio in systemctl
while installing kubeadm.
Change-Id: Ic042494d1cd588fb2b06f7e1d5544206b20b5ad6
Signed-off-by: Yasufumi Ogawa <yasufum.o@gmail.com>
* Update devstack-plugin-container from branch 'master'
to f2fd4303cfbc89f43a3b90dcc74cc5e9289b5e52
- Adding cri-o repository for centos system
cri-o repository for centos need to be added in
/etc/yum.repos.d to successfully install cri-o on centos system.
Change-Id: I6b215cb0efb3c53e97a4a6605e94a262c0d04f25
* Update devstack-plugin-container from branch 'master'
to f8e786f0d5b885f003185aba6ad7e81ae3ab6dfa
- Support installing specific version of docker
Change-Id: I12015c28f6f8ffc125097a14514a6a90a20cf35b
* Update devstack-plugin-container from branch 'master'
to bdc0b49ce38d012be3328ddc7c59a7e496b098b4
- Install apparmor tools also for Ubuntu Focal.
k8s gate is still on focal, so patch which unblock the apparmor for
jammy does not affect it. Here is the fix for focal as well.
Change-Id: I2a9bc69a59e7d6d21d61e79115d5a3c726c73ab0
* Update devstack-plugin-container from branch 'master'
to c101497703d6e2a8c75341004cb9bb59dbb4001f
- Bump k8s version.
Kubernetes 1.19 is long gone over a year now. Current minimal supported
version is 1.23.x. It is also last version, which supports docker-shim.
In this patch we propose to bump the version of k8s to 1.23.16 and crio
to 1.23.
Change-Id: I822217e769cc5cd041032fb2302c3a9c130d11ff
* Update devstack-plugin-container from branch 'master'
to f3cbfa21ff17ff9f441e79bb8dbf681a762bcdea
- Change default kubernetes registry to current one.
Last year, kubernetes community has made a move from k8s.gcr.io to
registry.k8s.io. Currently images on k8s.gcr.io has been stopped from
serving therefore, there is a need to migrate to the new one.
Change-Id: I20305b380d26fdaa30632107b29debc519e13e54
* Update devstack-plugin-container from branch 'master'
to 6c468e5293b79e8e75c7810352e46eacd2dd3eb5
- Fix issue with lack of apparmor.
Recently there are failures observed with docker installations. Newest
version (23.x) started to fail to create containers, when there are no
tools for apparmor available, and yet, this feature is enabled on
kernel, which is true in case of Ubuntu Jammy (22.04) stable release.
There are couple[1] of bugs[2] reported to the upstream, and as a
workaround, proposal is to install apparmor.
[1] https://github.com/moby/moby/issues/44900
[2] https://github.com/moby/moby/issues/44970
Change-Id: Ie10de8a8b074daa19ba4a882528e78cd1ee74245
* Update devstack-plugin-container from branch 'master'
to aef3c9209b47c90c02bb3dabdb603202090f4f0d
- Fix the issue with default_sysctls for cri-o.
In earlier version of cri-o (at least that been seen in 1.18) cri-o
packages have default configuration stored as /etc/crio/crio.conf, with
all the default values defined. Setting a value for the key means that
was a need to actually change the default. In version up to 1.23 there
was even no configuration stored at all, but starting from 1.24, all the
default config options has been commented out, and only section names
are not commented.
Similar situation has been detected for registry configuration, but here
it is even more difficult, as in recent version toml format has been
used instead of ini.
With this patch all of the cases has been covered.
Change-Id: Ia1b3dee3979841e798cec11c02ba1412dccef6c2
* Update devstack-plugin-container from branch 'master'
to a7295a5201a1eed61e0544be7392012647f470bc
- Fix to be prompted to add apt repos
Fix devstack installation for crio is prompted while running
apt-add-repository.
Signed-off-by: Yasufumi Ogawa <yasufum.o@gmail.com>
Change-Id: I66d69d5df254af027baf1d359130d4423fe3c4a9
* Update devstack-plugin-container from branch 'master'
to b323f5b71a17ce17de4cff2b01742bf322063d26
- Merge "Docker and kubernetes package installation on CentosStream"
- Docker and kubernetes package installation on CentosStream
Change-Id: Icafab048c43c6591c6cdafb13f34ed1f40258f22
* Update devstack-plugin-container from branch 'master'
to f935202d39e6e1709fecfc2a5ae403ae1665ba59
- Support config pause image for crio
In some places of which network environment was limited, ciro can't
pull images from k8s.gcr.io. This patch add a variable
`CRIO_PAUSE_IMAGE` in order to the developer who located in these
places can set the ciro to pull pause container images from
repository that they can access.
The `CRIO_PAUSE_COMMAND` used to configure crio's `pause_command`
(the pause container's bootstrap command), in order to the developer
can use the special pause image the they customized.
Change-Id: Ib0d4c42870d40ef583546758513a36b906c7663b
* Update devstack-plugin-container from branch 'master'
to 90b4089cda37d16ff3fb008ab26469597c289268
- Support config image repository for kubeadm
In some places of which network environment was limited, kubeadm
can't pull images from k8s.gcr.io. This patch add a variable
`KUBEADMIN_IMAGE_REPOSITORY` in order to the developer who located in
these places can set the kubeadm to pull container images from
repository that they can access.
Change-Id: I14aed50077ef0760635e575770fd2274cb759c53
* Update devstack-plugin-container from branch 'master'
to 47599355271a24d903ff4f70a794b17f97360fec
- Allow ICMP between pods for CRI-O.
By default, CRI-O doesn't allow to have ICMP traffic between the pods
and pods to/from host. It's convenient to have such ability for testing
and debugging purpose.
In this patch there is added appropriate configuration to crio.conf, and
also a setting to disable it if needed.
Change-Id: I1133815d9cbce311313bff7a219a9b3939390660
* Update devstack-plugin-container from branch 'master'
to 718e0e952112fb533ed041ddc4e99127b7a2f02f
- Merge "Provide right path to the runc binary for Ubuntu and CRI-O installation."
- Provide right path to the runc binary for Ubuntu and CRI-O installation.
There are also two new configuration option introduced:
- CNI_PLUGIN_DIR
- CNI_CONF_DIR
which, if defined, are used to configure crio paths for plugins and
networks config.
Change-Id: Ica4277b06740f8dca3ff5be77432cf6ab2f3cdeb
* Update devstack-plugin-container from branch 'master'
to 09ff9080a109be76a6693601aed3c354ab2aedfa
- Bump min tox version to 3.18.0
Let's bump minimal tox version so that we can rename
whitelist_externals option to allowlist_externals one.
https: //tox.wiki/en/latest/changelog.html#v3-18-0-2020-07-23
Change-Id: I0be6023da2c0b720728ce62a0eb91930c7a5cd28
* Update devstack-plugin-container from branch 'master'
to d4de1bb9905aebff7e3620d08aa65dc334d435b8
- Change repos from projectatomic to kubic OBS project.
Since projectatomic Ubuntu builds are deprecated, and advice was to
consult upstream documentation[1], Kubernetes with cri-o now rely on
Kubic project, which (among the others) provides packages for Ubuntu
20.04. Let us switch for those.
[1] https://kubernetes.io/docs/setup/production-environment/container-runtimes/#cri-o
Change-Id: Ib06753d22f8859eefedc031094851b052f4105b6
* Update devstack-plugin-container from branch 'master'
- Migrate devstack-plugin-container jobs to focal
As per victoria cycle testing runtime and community goal[1]
we need to migrate upstream CI/CD to Ubuntu Focal(20.04).
Tempest based jobs will be migrate automatically once devstack
base job start running on Focal(Depends-On). This commit migrates
devstack-plugin-container job to run on focal.
Depends-On: https://review.opendev.org/#/c/734700
[1] https://governance.openstack.org/tc/goals/selected/victoria/migrate-ci-cd-jobs-to-ubuntu-focal.html
Change-Id: I1a3ac070027805691fc1007458ac02567f847ae9
* Update devstack-plugin-container from branch 'master'
- Merge "Configure kata runtime for containerd"
- Configure kata runtime for containerd
Change-Id: I9d9d223effcaa94d0b1b25210a24aaa313353f05
* Update devstack-plugin-container from branch 'master'
- Fix https://review.opendev.org/#/c/705361/
We need to configure CNI plugin first, then configure and restart
containerd. In before, the order is reverse so the CNI config
is not picked.
Change-Id: I1c0e753b19289c339e44f288cae02d7ee2957da6
* Update devstack-plugin-container from branch 'master'
- Support enabling CRI for containerd
Installing docker will install the CRI plugin for containerd.
This commit support enabling the CRI-containerd plugin.
By default, this is disabled.
Change-Id: Ica8d5f91ae77d1d6599bfadc4031552016ad8953
* Update devstack-plugin-container from branch 'master'
- Convert legacy job to zuul v3 native
The CI job configuration was auto-converted from legacy job in before.
This commit convert the job to zuul v3 native format.
Change-Id: I591ca197b6860db31e76fc7af3547ff4a92b2a55
* Update devstack-plugin-container from branch 'master'
- Make the docker job voting
The job install Docker and use basic scenario to verifies if
Docker is working properly. The job is quite stable so far.
This commit changes this job from non-voting to voting.
Change-Id: I7da8471fc9b3b362bf6502f379b60cfeb2a9ad92
* Update devstack-plugin-container from branch 'master'
- Support k8s installation
Add support for installing kubernetes cluster via devstack.
It uses kubeadm to bootstrap the k8s cluster.
Change-Id: I7877ceda08bbdab807116a13d74ff884136dc501
* Update devstack-plugin-container from branch 'master'
- Use opendev repository
Change-Id: Ie2e20d0d185f58e9234d59264ee213e34e7714a1
- OpenDev Migration Patch
This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:
http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.htmlhttp://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html
Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.
* Update devstack-plugin-container from branch 'master'
- Replace openstack.org git:// URLs with https://
This is a mechanically generated change to replace openstack.org
git:// URLs with https:// equivalents.
This is in aid of a planned future move of the git hosting
infrastructure to a self-hosted instance of gitea (https://gitea.io),
which does not support the git wire protocol at this stage.
This update should result in no functional change.
For more information see the thread at
http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html
Change-Id: I22b7533894aae3f217b183a6c8d89221c02dd7aa
* Update devstack-plugin-container from branch 'master'
- Support cri-o in CentOS and Fedora
This commit adds support for installing cri-o as container engine in
CentOS and Fedora. Tested on CentOS 7.6 and Fedora 28.
Change-Id: I0e10e06156e02397b5cd64efe802869d0e96b231
Ashutosh Mishra