* Update openstack-helm-infra from branch 'master'
to efea7f5fd00ecca56b3cf1b3f93a7fea97cd2865
- [chromedriver] Change json api endpoint
Choose a more reliable json file from the upstream to refer to.
"Stable" versions of Chrome and Chromedriver became unsynchronized for some reason.
Change-Id: I1688a867ea1987105e7a79c89ba7ea797819a12f
* Update openstack-helm-infra from branch 'master'
to cdbecfb7f43dc65cc58ddb1a9599e83b906c9f72
- Update test jobs
- Remove openstack-helm-infra-openstack-support* jobs.
Instead of these jobs we run compute-kit, cinder and tls
jobs defined in the openstack-helm repo.
- Remove all experimental jobs since they are outdated and
do not work. We will later add some of the test cases
including apparmor, network policy, tenant Ceph and others.
Change-Id: I8f3379c06b4595ed90de025d32c89de29614057d
* Update openstack-helm-infra from branch 'master'
to 3e3618bbd952eed10b21957149cce9e29a9940b3
- Merge "make ovn db file path as configurable"
- make ovn db file path as configurable
Change-Id: I8b0f5c0bda2f1305e0460adc35e85b130f4cf9ff
* Update openstack-helm-infra from branch 'master'
to 929ebf5200112d011b90415f1d82e4e1677909c5
- add custom job annotations snippet and use it
Add the ability for charts that use helm-toolkit to allow the users to
set custom annotations on jobs. Use the snippet in a generic way in the
job templates provided by helm-toolkit.
Change-Id: I5d60fe849e172c19d865b614c3c44ea618f92f20
Depends-On: I3991d6984563813d5a3a776eabd52e2e89933bd8
Signed-off-by: Doug Goldstein <doug.goldstein@rackspace.com>
* Update openstack-helm-infra from branch 'master'
to 51c7affc72020bac5035476b0f8c36fa098f253e
- Run more test jobs when helm-toolkit updated
Specifically we would like at least the following
deployments to be tested when helm-toolkit is updated
- compute-kit
- cinder
- tls
Change-Id: I3991d6984563813d5a3a776eabd52e2e89933bd8
* Update openstack-helm-infra from branch 'master'
to cfed816a9a1910b334fc4c8c4c7d98b2ed13780e
- Fix coredns resolver
Forward requests for unknown names to 8.8.8.8
NOTE: Temporarily disable DPDK job which turned to
be incompatible with this PR
https://review.opendev.org/c/openstack/openstack-helm/+/914399
It wasn't tested with the DPDK job.
Change-Id: I936fb1032a736f7b09ad50b749d37095cce4c392
* Update openstack-helm-infra from branch 'master'
to 6ca83be78013446540b68fd28d0a75d5b2329f40
- Rename dpdk job name to reflect Openstack version
Change-Id: I9c04a60ae8b7fde35a8a970e3b74bcaad7bd564f
* Update openstack-helm-infra from branch 'master'
to 81828430e50ac8d59ef40373f1c648f08d568ac3
- Bump RabbitMQ version 3.9.0 -> 3.13.0
Also
- Update default Heat image to 2023.2 used for
init and test jobs
- Add overrides for
- yoga-ubuntu_focal
- zed-ubuntu_focal
- zed-ubuntu_jammy
- 2023.1-ubuntu_focal
- 2023.1-ubuntu_jammy
- 2023.2-ubuntu_jammy
Change-Id: I516c655ea1937f9bd1d363ea86d35e05e3d54eed
* Update openstack-helm-infra from branch 'master'
to 10e0a1cd70718f148b017de6ec1ba2c243561a8d
- Merge "Refactor deploy-env role"
- Refactor deploy-env role
- Make it less mixed. Each task file
deploys one feature.
- Deploy Metallb
- Deploy Openstack provider network gateway
Change-Id: I41f0353b286f817cb562b3bd59992e4baa473568
* Update openstack-helm-infra from branch 'master'
to a957d8e12cac28ad16858fa09376b0ea7c9eb7ff
- Merge "Bump containerd sandbox image from 3.6 to 3.9"
- Bump containerd sandbox image from 3.6 to 3.9
Fixes the following kubeadm warning:
W0321 01:33:46.409134 14953 checks.go:835] detected that the
sandbox image "registry.k8s.io/pause:3.6" of the container
runtime is inconsistent with that used by kubeadm.
It is recommended that using "registry.k8s.io/pause:3.9"
as the CRI sandbox image.
Change-Id: I8129a6e9ad3acdf314e2853851cd5274855e3209
* Update openstack-helm-infra from branch 'master'
to 96ee145e14ec7e92a23d872ecd5a3e381a1652c9
- Merge "Update ovn controller init script"
- Update ovn controller init script
- OVN init script must be able to attach an interface
to the provider network bridge and migrate IP from the
interface to the bridge exactly like Neutron OVS agent
init script does it.
- OVN init script sets gateway option to those OVN controller
instances which are running on nodes with l3-agent=enabled
label.
Change-Id: I24345c1f85c1e75af6e804f09d35abf530ddd6b4
* Update openstack-helm-infra from branch 'master'
to 1e84d3f7149e57a3a9d3774badb77b5b391ccea9
- [rook-ceph] Add a script to migrate Ceph clusters to Rook
This change adds a deployment script that can be used to migrate a
Ceph cluster deployed with the legacy openstack-helm-infra Ceph
charts to Rook. This process is disruptive. The Ceph cluster goes
down and comes back up multiple times during the migration, but the
end result is a Rook-deployed Ceph cluster with the original
cluster FSID and all OSD data intact.
Change-Id: Ied8ff94f25cd792a9be9f889bb6fdabc45a57f2e
* Update openstack-helm-infra from branch 'master'
to cbbeebb5a17c3327b984adcec3dbebd2e6b17343
- Fix registry bootstrap values
The quay.io/airshipit/kubernetes-entrypoint:v1.0.0 image format is
deprecated and not supported any more by the docker registry.
This is temporary fix to download the image from third party repo
until we update the quay.io/airshipit/kubernetes-entrypoint:v1.0.0.
The deprecation message is as follows:
[DEPRECATION NOTICE] Docker Image Format v1 and Docker
Image manifest version 2, schema 1 support is disabled
by default and will be removed in an upcoming release.
Suggest the author of quay.io/airshipit/kubernetes-entrypoint:v1.0.0
to upgrade the image to the OCI Format or Docker Image
manifest v2, schema 2. More information at
https://docs.docker.com/go/deprecated-image-specs/
The docker-registry container must start not
earlier than docker-images PVC is bound.
Change-Id: I6bff98aa7d0b23e13a17a038f3039b7956703d40
* Update openstack-helm-infra from branch 'master'
to 4f735b471f455ea7f4fbe6e6171ce4c20a6c16c7
- Fixing rolebindings generation for init container
This part has to use the same configuration
as init container: see line 96
Change-Id: I06c1f3ad586863d4dcfab559d13a592fc576f857
* Update openstack-helm-infra from branch 'master'
to 4df05848f5cbffbefb9c9b7a007eb7d2a4f0a379
- Merge "Update Ceph images to patched 18.2.2 and restore debian-reef repo"
- Update Ceph images to patched 18.2.2 and restore debian-reef repo
This change updates the Ceph images to 18.2.2 images patched with a
fix for https://tracker.ceph.com/issues/63684. It also reverts the
package repository in the deployment scripts to use the debian-reef
directory on download.ceph.com instead of debian-18.2.1. The issue
with the repo that prompted the previous change to debian-18.2.1
has been resolved and the more generic debian-reef directory may
now be used again.
Change-Id: I85be0cfa73f752019fc3689887dbfd36cec3f6b2
* Update openstack-helm-infra from branch 'master'
to 1953f869ad6212b323aeeae09df4dbb25ca7a377
- Include values_overrides for OpenStack components
Fixes issue where override files for OS charts were
missing due to specifying the wrong project directory.
Change-Id: I4af6715a33c7de43068ed76a8115c12a2c0969ed
* Update openstack-helm-infra from branch 'master'
to af916d970ba662067432309519f94214fdbb8046
- Merge "bugfix: updated permissions of ceph user created to allow rbd profile"
- bugfix: updated permissions of ceph user created to allow rbd profile
Change-Id: I9049e4312aa6cb92a832d5100ba1da995233c48e
* Update openstack-helm-infra from branch 'master'
to 1e05f3151d84726f0c9c516dd14364fe88db0fe8
- [ceph-osd] Allow lvcreate to wipe existing LV metadata
In some cases when OSD metadata disks are reused and redeployed,
lvcreate can fail to create a DB or WAL volume because it overlaps
an old, deleted volume on the same disk whose signature still
exists at the offsets that trigger detection and abort the LV
creation process when the user is asked whether or not to wipe to
old signature. Adding a --yes argument to the lvcreate command
automatically answers yes to the wipe question and allows lvcreate
to wipe the old signature.
Change-Id: I0d69bd920c8e62915853ecc3b22825fa98f7edf3
* Update openstack-helm-infra from branch 'master'
to 3a2399c99fd5c800f9cd48e06d4456140371a15e
- Workaround for debian-reef folder issue
This PS changes ceph repo to debian-18.2.1 from
debian-reef due to some issues with debian-reef
folder at https://download.ceph.com/
Change-Id: I31c501541b54d9253c334b56df975bddb13bbaeb
* Update openstack-helm-infra from branch 'master'
to 0e086e4c121d54e17e7205bf49d849eea08acaad
- [mariadb] Switch to ingress-less mariadb
This PS switches mariadb to use primary service by
default instead of ingress based deployment. The
primary service that is getting created and
automatically updated based on the leader election
process in start.py entrypoint script.
Mariadb primary service was introduced by this PS:
https://review.opendev.org/c/openstack/openstack-helm-infra/+/905797
Change-Id: I4992276d0902d277a7a81f2730c22635b15794b0
* Update openstack-helm-infra from branch 'master'
to 2216cbfec415870dde1d42583e1e4bca8d3c2c07
- Add compute-kit job with DPDK enabled
+ add role for enabling hugepages
Change-Id: I89d3c09ea3bedcba6cb51178c8d1ac482a57af01
Depends-On: I2f9d954258451f64eb87d03affc079b71b00f7bd
* Update openstack-helm-infra from branch 'master'
to 683102b7250b53bca65d9a1bcbb7e83fdce73cda
- Merge "[deploy-env] Docker env setup"
- [deploy-env] Docker env setup
This PS adds connection reset for ansible session
letting zuul user to use newly installed docker
environment without sudo
Change-Id: I37a2570f1dd58ec02338e07c32ec15eacbfaf4b6
* Update openstack-helm-infra from branch 'master'
to 8d8c18a8dc64c2cd016afa487a1da2025278a0f9
- Merge "Remove some aio jobs"
- Remove some aio jobs
These two jobs openstack-helm-infra-aio-monitoring and
openstack-helm-infra-aio-logging were only needed for
backward compatibility.
Depends-On: I9c3b8cd18178aa57ce44564490ef1b61f275ae29
Change-Id: I09d0e48128a3fd98fa9148b8e520df75d6e5be50
* Update openstack-helm-infra from branch 'master'
to 4eed2c3486c20a3f05d576e0e39df17b047665b9
- Remove calico chart
Tigera provides tools for managing Calico deployments (helm chart,
operator and even plain kubectl manifest). Also there are plenty of
other networking solutions on the market and it looks like users can choose
on their own the CNI implementation.
There have not been many contributions to this chart for quite some time
and we don't use this chart in any test jobs. In the deploy-env role we use
the upstream Calico manifest.
Change-Id: I6005e85946888c52e0d273c61d38f4787e43c20a
* Update openstack-helm-infra from branch 'master'
to 010c21cfc9108e18f0acd266408d04f2f330ec2c
- Merge "Bump Calico version to v3.27.0"
- Bump Calico version to v3.27.0
Change-Id: I8daa54e70c66cec41733d6b9fd5c9dd4597ff9c1
* Update openstack-helm-infra from branch 'master'
to cf2cdd7821b4c362240e2c2098307b7414271898
- Fix prevent trailing whitespace lint command
Recently we added a jpg file to OSH documentation
but the lint job didn't run due to the job configuration.
But then for the next PR link job did run and failed
due to trailing whitespace in the jpg file.
Change-Id: I9abf8f93a4566411076190965f282375846dc5db
* Update openstack-helm-infra from branch 'master'
to f641f34b00a54b90d5d7bc8267eeb5e8ea20b990
- [ceph] Update Ceph images to Jammy and Reef 18.2.1
This change updates all Ceph images in openstack-helm-infra to
ubuntu_jammy_18.2.1-1-20240130.
Change-Id: I16d9897bc5f8ca410059a5f53cc637eb8033ba47
* Update openstack-helm-infra from branch 'master'
to 2d15cb4fdfe0787cf545b50faa8ab9ad727c8234
- [ceph-rook] Update Rook and increase ceph-mon memory limit
This change updates Rook to the 1.13.3 release. It also increases
the memory limit for ceph-mon pods deployed by Rook to prevent
pod restarts due to liveness probe failures that sometimes result
from probes causing ceph-mon pods to hit their memory limit.
Change-Id: Ib7d28fd866a51cbc5ad0d7320ae2ef4a831276aa
* Update openstack-helm-infra from branch 'master'
to 5baf273c9b3a498577d80ac21e26865967c98a80
- Merge "[mariadb] Add mariadb-server-primary service"
- [mariadb] Add mariadb-server-primary service
This PS adds mariadb-server-primary service that is getting created
and automatically updated based on the leader election process in
start.py entrypoint script.
Change-Id: I1d8a8db0ce8102e5e23f7efdeedd139726ffff28
Signed-off-by: Sergiy Markin <smarkin@mirantis.com>
* Update openstack-helm-infra from branch 'master'
to 98f9438ba78672b4d75b43eb8a8010b34d32e80d
- [elasticsearch-exporter] Update to the latest v1.7.0
The current version of the exporter is outdated, switch to the upstream
+ rename --es.snapshots to --collector.snapshots (v1.7.0) and
--es.cluster_settings to --collector.clustersettings (v1.6.0)
Change-Id: I4b496d859a4764fbec3271817391667a53286acd
* Update openstack-helm-infra from branch 'master'
to d0c93b5648704b9d9999412d932f8329c80362c0
- Merge "Change default ingress path type to prefix"
- Change default ingress path type to prefix
Due to CVE-2022-4886 the default pathType for an ingress should be
either "Exact" or "Prefix". This allows for more strict path validation by
the admission controller. This PS changes the default pathType to Prefix.
This value can be overridden.
In a separate PS I will add the pathType parameter to the ingressOpts
for all helm charts that create an ingress.
See:
https://github.com/kubernetes/ingress-nginx/issues/10570
Change-Id: I8f1df594f0c86f2de6cdd7cf2ee56637bd508565
* Update openstack-helm-infra from branch 'master'
to 2b7563f5de90108960d33d89d098f49282656cfc
- Add zuul user to docker group
We are going to use containerized Openstack client
in test scripts. Adding zuul to the docker group
allows running docker command directly not using sudo.
Change-Id: Iee77e7f2b8801743f95535d31d0b909dcea50bf3
* Update openstack-helm-infra from branch 'master'
to d0b3f1c1d27657838f3851e3a88cd43ae5efce7c
- [mariadb-operator] Fix mariadb TLS
This PS fixed some imcompatibilities of inherited mariadb config with
docker-entrypoint.sh script that is now used to perform initial mariadb
nodes setup and mariadb-upgrade at startup.
Also added x509 requirement for root and audit users
connections.
Change-Id: Ic5ad2e692b64927fc73962fe0cc250a9d682114c
* Update openstack-helm-infra from branch 'master'
to 359ab4b8d77f06b3d769c10e0538e35557a47a96
- Merge "Update template for ingress 1.9"
- Update template for ingress 1.9
The names of a few configuration variables have changed in version 1.9.
EnableRealIp to EnableRealIP
HttpAccessLogPath to HTTPAccessLogPath
whitelist to allowlist
Whitelist to Allowlist
Additionally,
ajp_temp_path
is no longer valid.
Change-Id: I2ebb658bd237216c43306dab6cd7f7a1ca6388ac
* Update openstack-helm-infra from branch 'master'
to 4b6654abf1da9b0247fe7088de75f0bd513364ab
- Merge "[mariadb-operator] Enable auto-upgrade"
- [mariadb-operator] Enable auto-upgrade
This PS enables auto-upgrade feature from official mariadb docker
entrypoint script.
Also switching mariadb image to the official from docker.io/mariadb
repo and adding temp volime mount to mariadb-server pods created by
mariadb-operator.
Change-Id: Ie3a02e546fd2a56948177b97c009eab35b42776a
Vladimir Kozhukalov