Commit Graph

175 Commits

Author SHA1 Message Date
Ayumu Ueha 0c1fe5fd3c Change k8s package repository
Closes-Bug: #2055979
Change-Id: Ib43164901cbc23038eff7c2b110078555d5e4ba3
2024-03-05 13:03:19 +00:00
Zuul 071b5f3236 Merge "Bump kubernetes version to 1.28" 2023-10-11 19:59:07 +00:00
Roman Dobosz eae38b9559 Bump kubernetes version to 1.28
Change-Id: I921b165092c9bf81d7223933c508eda6c9eae935
Depends-On: https://review.opendev.org/c/openstack/kuryr-kubernetes/+/896008
2023-10-11 12:19:30 +02:00
Michał Dulko a3130bf641 Bump jobs base to Ubuntu 22.04 Jammy
DevStack stopped accepting Ubuntu 20.04 Focal, so we need to bump the
version we use to Jammy. This commit does so.

Change-Id: I7b227dfb29b49ff6a561209938a2c263f5dd2f90
2023-09-21 11:02:42 +02:00
Roman Dobosz fa62887fe1 Bump kubernetes to version 1.27.
Change-Id: I7876322b48ca28edf54629dc27551c2dd00f921b
2023-07-24 11:14:17 +02:00
Ayumu Ueha 430ae62e4f Bump Kubernetes and cri-o version to 1.26
Change-Id: I477f1bb1fefd211b4f5e43ec4182967c89d0f106
2023-07-14 11:48:26 +00:00
Roman Dobosz 6b4992e585 Turn on pod security context on master.
Change-Id: If982af87ddd1fe41670a42fe23a8e11490f4a100
2023-03-21 06:58:48 +01:00
Michał Dulko 1168863473 Make Amphora jobs non-voting
For a long time gate jobs with Amphora are unstable due to LBs being
unstable due to Amphora somehow not working as expected. The gates with
OVN Octavia provider are much more stable for the same cases. This
commit makes all the jobs with Amphora non-voting to fight constant
rechecks that we're forced to do.

Change-Id: I94a7403fa1dd038b7f9f8a922a4f635ed5816067
2023-03-17 15:26:32 +01:00
Roman Dobosz 5ba0681e8c Remove network policy tests from zuul.
Network Policy e2e tests are broken for some time now. It doesn't bring
any value to run them at current state. This patch will disable those
tests.

Change-Id: I8ce459edddf6f8307376eae68bbc75d173f0d19a
2023-03-13 14:11:53 +01:00
Roman Dobosz 3f80fc43a3 Use new registry for all the kubernetes images.
Turns out, that all the images has been moved from k8s.gcr.io to
registry.k8s.io, so that there is no need to distinguish between those
two locations for older version of k8s (especially the one which we are
relaying on for docker gate). In this patch we switch over to the
registry.k8s.io for all of the supported kubernetes versions.

To make it work it is also requires to bump kubernetes 1.23 to latest
minor version, otherwise there will be issues with pulling coredns
image.

Change-Id: I7ed0ae76108a409bc72bc61ab7c12164e8277257
Depends-On: https://review.opendev.org/c/openstack/devstack-plugin-container/+/874573
2023-02-21 14:24:09 +01:00
Roman Dobosz 5fb8104abf Bump cri-o version.
We recently bumped Kubernetes version to 1.25.x, but we forgot to do
this on cri-o as well.

Change-Id: If57888d6f48fad904bf4c7cdd5bc6c70233b95be
Depends-On: https://review.opendev.org/c/openstack/devstack-plugin-container/+/866130
2022-12-02 08:56:14 +01:00
Roman Dobosz de73800ae3 Pin docker gate to Kubernetes 1.23
1.23 version of Kubernetes is the last one, which supports
dockershim[1], therefore it needs to be pinned to that version to make
it work with docker. Any upcoming Kubernetes version bump will be
ignored for this particular gate, and it will be removed when Kubernetes
makes it EOL[2].

[1] https://kubernetes.io/blog/2022/02/17/dockershim-faq/
[2] https://kubernetes.io/releases/patch-releases/#1-23

Change-Id: Ia509264ad45ef5321412ba244b160dffc1c5cc60
2022-10-20 09:27:05 +02:00
OpenStack Release Bot 0e44e54c00 Switch to 2023.1 Python3 unit tests and generic template name
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for antelope. Also,
updating the template name to generic one.

See also the PTI in governance [1].

[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html

Change-Id: I86154b8c7db90ac6fd5467c1b0d29c0b84528ee4
2022-09-16 15:17:19 +00:00
Zuul 21f78897b6 Merge "Add tempest test job for annotation project driver" 2022-08-18 12:55:31 +00:00
Zuul e6e91c531e Merge "Clean up unused and duplicated jobs" 2022-07-21 13:11:05 +00:00
Michał Dulko 2f7df16997 Disable linuxbridge on the OVS gates
For some reason linuxbridge was set as mechanism driver in OVS gates.
This commit disables that as linuxbridge became experimental in Neutron
and gates fail.

Change-Id: I2dd5c7f19af73badae49d2509efb0016335e6c9e
2022-07-06 12:55:17 +02:00
Maysa Macedo 6aed6916a2 Clean up unused and duplicated jobs
Change-Id: I2374bad29e19bf4a699b500c058b9f0bd4dc9217
2022-06-27 12:34:25 +02:00
Michał Dulko d65720cf74 Force kvm and host-passthrough for Amphora jobs
We face general instability of the Amphora jobs that we have. A while
ago we've made sure that these jobs are scheduled on the clouds that
support nested virtualization in order to boost performance of the
Amphora LB VMs. Now it turns out we haven't configured DevStack to
actually use kvm instead of qemu, so it's possible that we were still
running these jobs with software virtualization.

This commit attempts to reconfigure DevStack to actually use kvm and
nested virtualization.

Change-Id: I57f70c1cb140d4fa54d13b6c759a0179d8adb7b4
2022-06-14 10:21:24 +02:00
yangjianfeng 2a35ce7d24 Add tempest test job for annotation project driver
Depends-on: https://review.opendev.org/837812
Implements: blueprint specify-project-by-annotation
Change-Id: I42099ad58785c47c7f9814a227b59608d0e98b8f
2022-06-14 10:19:09 +08:00
Ghanshyam Mann 6ac2b4a813 Drop lower-constraints.txt and its testing
As discussed in TC PTG[1] and TC resolution[2], we are
dropping the lower-constraints.txt file and its testing.
We will keep lower bounds in the requirements.txt file but
with a note that these are not tested lower bounds and we
try our best to keep them updated.

[1] https://etherpad.opendev.org/p/tc-zed-ptg#L326
[2] https://governance.openstack.org/tc/resolutions/20220414-drop-lower-constraints.html#proposal

Change-Id: I91c271d46a2b596c1c007b741363ba51f0b1690a
2022-04-30 20:20:07 -05:00
Maysa Macedo ddf79be5d9 Make kuryr-kubernetes-tempest-amphora voting
Make kuryr-kubernetes-tempest-amphora voting since it's
using OVN and OVN is the default SDN now.

Change-Id: Id77c325210cefb2ee2e04936a0e4bbbb001c9d02
2022-04-12 17:06:00 +02:00
Rodolfo Alonso Hernandez 4a8a636613 [OVN] Pin OVS version for OVN v21.06.0
According to [1], the needed version for OVN v21.06.0 is
a4b04276ab5934d087669ff2d191a23931335c87

[1]4b0a02635f

Related-Bug: #1967472
Change-Id: I73a11d4a02c811366c177fa31d02599e247fea3a
2022-03-20 10:08:21 +00:00
Zuul fac000e964 Merge "Add Python3 zed unit tests" 2022-03-17 16:55:32 +00:00
Zuul bb0f4dcc08 Merge "Run *all* Amphora jobs with nested virtualization" 2022-03-17 14:47:08 +00:00
Maysa Macedo aff4b03dcc Bump OVN and OVS versions
There is a issue[1] with the old versions we were using,
let's attempt to bump them.

[1] https://bugs.launchpad.net/neutron/+bug/1964339

Change-Id: I4a9a9f877c2a0aea2bf3e43e179afedb653b8464
2022-03-16 11:59:42 +00:00
OpenStack Release Bot 76a4a6ab6b Add Python3 zed unit tests
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for zed.

See also the PTI in governance [1].

[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html

Change-Id: I4cb3eff6e4f88e92c1cabc563088bea82fa92432
2022-03-11 10:37:30 +00:00
Michał Dulko e8592cd86c Run *all* Amphora jobs with nested virtualization
In I950e81d3f9f23493f26d9f824d3052ed375ae62b I've forced the jobs
explicitly saying "amphora" to run on clouds with nested virtualization
enabled. I however omitted the jobs that are not having "amphora" in the
name - defaults, IPv6 and OVS jobs. This commit fixes this.

Change-Id: I1e70118bb9c7d80e78806c3319c95af7efd01a08
2022-03-10 10:42:34 +01:00
Roman Dobosz 2ac0190bfa Raise kubernetes tests version to 1.22.5 and fix legacy tests.
Also, there is a need to bump golang version to 1.16.x.

Change-Id: I453b04e97b556033e3f30a7406ccb6e4870f2d3c
2022-01-12 14:12:27 +01:00
Zuul 513ada7268 Merge "Switch Amphora jobs to use clouds with nested-virt" 2022-01-04 20:46:47 +00:00
Michał Dulko cbda9b9b1b Switch Amphora jobs to use clouds with nested-virt
Seems like it's now possible to request nodes from a cloud that supports
nested virtualization. This is super cool for jobs using Amphora and
this commit attempts to switch these jobs to use it.

Depends-On: I203773de2b8c0d1b21ef3f722df7ed7da562a892
Change-Id: I950e81d3f9f23493f26d9f824d3052ed375ae62b
2021-12-22 15:36:58 +01:00
Itzik Brown 9a2b6afa6c Set KURYR_CONFIGMAP_MODIFIABLE: false in pools job
We'll skip tests other than test_port_pool

Change-Id: I0a69e0963aaef186238c0e1bd0bdc4430e3e197c
2021-12-14 10:00:40 +02:00
Roman Dobosz 96473406d9 Make gates to use CRI-O on devstack by default.
Also, added gate job for docker backed version.

Change-Id: I6e22d5617038e5c20dcbbca2b110d2a312cedbd3
2021-11-17 11:10:41 +01:00
Roman Dobosz b97b120814 Bump kubernetes version.
Change-Id: I869eb4110fa844552db8ff43951240d899099495
2021-11-17 11:10:41 +01:00
Roman Dobosz fb994ecddb Use CRI-O with kubeadm.
Before switch to kubeadm we used to use manual approach for installing
all the bits with option for switching container runtimes between docker
and cri-o. With this patch we re-gain that ability with simply setting
appropriate container engine variable for devstack-plugin-contaier to
use either CRI-O or default Docker.

Depends-On: https://review.opendev.org/c/openstack/devstack-plugin-container/+/817231
Change-Id: I273888a7428611b40802dc5dd53fcee864ce43da
2021-11-17 11:10:22 +01:00
Zuul 63fa50409a Merge "Remove Amphora job from gate queue" 2021-11-04 20:39:50 +00:00
Michał Dulko 0105d22867 Remove Amphora job from gate queue
Gate queue should not have non-voting jobs, so this commit removes
kuryr-kubernetes-tempest-amphora from gate.

Change-Id: I9fca68c995bfb29aa747b187f1b464351762d2c4
2021-11-04 16:36:31 +01:00
Maysa Macedo 80ab92c5ab Increase tempest timeout
The recent bump of Amphora image makes
the loadbalancer requires more time to
move to running.

Change-Id: I4ed13d2782df17eb518db1031b773288b080be42
2021-11-03 12:52:16 +00:00
Maysa Macedo bb41c3889d Move jobs to use Ubuntu Focal
According to the docs[0] Ubuntu Focal is the
version supported for Xena. This commit
updates the jobs and the Amphora image.

[0] https://governance.openstack.org/tc/reference/runtimes/xena.html
Depends-On: https://review.opendev.org/c/openstack/kuryr-kubernetes/+/812154

Change-Id: I869040d9b05ef3d1cded5f91e1634214b83fd348
2021-10-06 08:32:24 +00:00
Zuul ac822ec0b5 Merge "Switch gates to OVN by default." 2021-09-20 21:31:01 +00:00
Roman Dobosz 2085524f33 Switch gates to OVN by default.
Also, rearrange tests files.

Job hierarchy looks as follows:

- kuryr-kubernetes-base (base tempest job)
  - kuryr-kubernetes-base-ovn (derived from base for neutron OVN)
    - kuryr-kubernetes-tempest-amphora
    - kuryr-kubernetes-octavia-base (ovn-octavia-provider)
      - kuryr-kubernetes-tempest (alias for the parent,
        used in projects kuryr-tempest-plugin and os-vif)
      - kuryr-kubernetes-tempest-ovn-provider-ovn (alias for the parent,
        used in project ovn-octavia-provider)
      - kuryr-kubernetes-tempest-systemd
        - kuryr-kubernetes-tempest-centos-7 (this one is probably
          broken)
      - kuryr-kubernetes-tempest-defaults (default settings for
        kuryr-kubernetes, so OVN + amphora + default set of handlers,
        default subnet and sg drivers)
      - kuryr-kubernetes-tempest-ipv6
      - kuryr-kubernetes-tempest-dual-stack
      - kuryr-kubernetes-tempest-lower-constraints
      - kuryr-kubernetes-tempest-l2
      - kuryr-kubernetes-tempest-pools-namespace
      - kuryr-kubernetes-tempest-crio (currently broken)
      - kuryr-kubernetes-tempest-multinode
        - kuryr-kubernetes-tempest-multinode-ha
  - kuryr-kubernetes-base-ovs (derived from base for neutron OVS)
    - kuryr-kubernetes-octavia-base-ovs (amphora)
      - kuryr-kubernetes-tempest-ipv6-ovs
      - kuryr-kubernetes-tempest-amphora-ovs
      - kuryr-kubernetes-tempest-multinode-ovs
- kuryr-kubernetes-e2e-np (base devstack job)

For convenience, tempest jobs are in two files: one for multinode jobs,
and one for one node jobs. Network policy job is in its own file, since
it have different parent (devstack).

Change-Id: I198f138feb9bd7b6cc659ac8cd788cddd5be9439
2021-09-16 12:23:09 +02:00
Elod Illes b0e1ded370 Add Python3 yoga unit tests
This patch is originally an automatically generated patch to ensure
unit testing is in place for all the of the tested runtimes for the
next given cycle (this time yoga). However there was an error during
the patch generation as a gitignore rule excludes all hidden directory.
This patch is now removes the general hidden directory ignore rule,
too, to avoid such errors in the future.

Change-Id: I3341f08a7f331fb8b97b2d75106eefcec9b2d5d7
2021-09-15 11:24:33 +02:00
Sunday Mgbogu 990ba608d6 Add Octavia Tempest Plugin
Octavia Tempest Plugin is required to call Octavia API on Kuryr-
Tempest-Plugin.

Change-Id: If00c3af9ee8689f05eecf5370758edb50775d381
2021-08-10 12:48:22 +00:00
Roman Dobosz c56e465c7e Fix multinode gate.
Make separate variations for OVN and OVS networking.

Change-Id: I425e7fe1d220b5f760bd5514c853d3e377190d82
2021-07-30 07:57:26 +02:00
Zuul c2a0abadd0 Merge "Enable multinode gate." 2021-05-28 00:09:15 +00:00
XinxinShen 32a1efc05e Switch testing to Xena testing runtime
Upating the tetsing template to Xena testing runtime:
https://governance.openstack.org/tc/reference/runtimes/xena.html

Change-Id: I59fd5f35320a337a9b8eaa519ca3156d5fcdd25b
2021-05-26 10:57:24 +08:00
Roman Dobosz 11a34d0e5d Enable multinode gate.
This patch provides an implementation for joining node to the Kubernetes
cluster by using `kubeadm join` command.

Change-Id: I71d2b99e0c92a12c4e64395f6c4dafa4b69f168f
Depends-On: Ife21874c0a71ba07723094c0f880aabcf5825b77
2021-05-24 13:25:11 +02:00
Roman Dobosz e005247b89 Make containerized deployment as a default.
Currently, by default, kuryr-kubernetes services (controller and CNI
daemon) are suppose to be run as a systemd services. The reality is,
that in most real world deployments we are using containerized services.
In this patch variable KURYR_K8S_CONTAINERIZED_DEPLOYMENT will now have
default value set to True, which means, that without even setting it,
deploying kuryr-kubernetes will be containerized.

Secondly, we agreed[1], that all the gate names should also reflect that
change in their names.

And finally, non working and outdated local.conf samples for
OpenDaylight has to be removed.

Behaviour for sample local.confs wasn't change: using them to spin up
devstack will still use systemd services.

[1] https://etherpad.opendev.org/p/apr2021-ptg-kuryr

Change-Id: I2c13893c80e9e5b3b2ac0cb64dd9bd9a40d99e63
2021-05-24 13:22:54 +02:00
Roman Dobosz c034b0060e Use kubeadm for installing Kubernetes on devstack.
Till now, for installing kuryr-kubernetes and one of the crucial service
- kubernetes, there has been used manual method for installing it in
specified version. Over time it became a burden to follow requirements
and constraints, therefore decision has been made to use recommended way
of installing Kubernetes - kubeadm. In this patch devstack installation
of the kuryr-kubernetes and its dependences has been heavily reworked.

Other than that, OpenShift related functions has been removed, since
they were all outdated and non-working for the long time.

Change-Id: Ife21874c0a71ba07723094c0f880aabcf5825b77
2021-05-21 13:07:21 +02:00
Maysa Macedo 4e7c330d65 Clean up usage of ubuntu bionic on crio job
As Devstack is dropping support for Ubuntu Bionic in favor
of Focal and the bionic node is not needed anymore on the crio
gate with the change os repos to kubic OBS project[1], we can
remove the nodeset definition.

[1] d4de1bb990

Change-Id: I64bcfe8f9c5795f1724aa1e3b7278660f79fa7f6
2021-05-06 15:50:56 +00:00
Lucas Alvares Gomes 849fb30f55 Prepare gate for OVN as default in DevStack
The Neutron community is planning on switching the default network
backend in DevStack to OVN soon and to avoid any gate breakages we need
to explicitly enable ML2/OVS where it makes sense.

This patch is enabling ML2/OVS for the non-OVN jobs in the gate. Prior
to this patch the job were enabling the ML2/OVS services such as q-agt
and q-dhcp but it wasn't setting other required options (e.g Q_AGENT).

Signed-off-by: Lucas Alvares Gomes <lucasagomes@gmail.com>
Change-Id: Iae420403d3d84325830bded8633b2a29430b36bb
2021-04-23 13:10:01 +01:00