Choose a more reliable json file from the upstream to refer to.
"Stable" versions of Chrome and Chromedriver became unsynchronized for some reason.
Change-Id: I1688a867ea1987105e7a79c89ba7ea797819a12f
Forward requests for unknown names to 8.8.8.8
NOTE: Temporarily disable DPDK job which turned to
be incompatible with this PR
https://review.opendev.org/c/openstack/openstack-helm/+/914399
It wasn't tested with the DPDK job.
Change-Id: I936fb1032a736f7b09ad50b749d37095cce4c392
- Make it less mixed. Each task file
deploys one feature.
- Deploy Metallb
- Deploy Openstack provider network gateway
Change-Id: I41f0353b286f817cb562b3bd59992e4baa473568
Fixes the following kubeadm warning:
W0321 01:33:46.409134 14953 checks.go:835] detected that the
sandbox image "registry.k8s.io/pause:3.6" of the container
runtime is inconsistent with that used by kubeadm.
It is recommended that using "registry.k8s.io/pause:3.9"
as the CRI sandbox image.
Change-Id: I8129a6e9ad3acdf314e2853851cd5274855e3209
This change updates the Ceph images to 18.2.2 images patched with a
fix for https://tracker.ceph.com/issues/63684. It also reverts the
package repository in the deployment scripts to use the debian-reef
directory on download.ceph.com instead of debian-18.2.1. The issue
with the repo that prompted the previous change to debian-18.2.1
has been resolved and the more generic debian-reef directory may
now be used again.
Change-Id: I85be0cfa73f752019fc3689887dbfd36cec3f6b2
This PS changes ceph repo to debian-18.2.1 from
debian-reef due to some issues with debian-reef
folder at https://download.ceph.com/
Change-Id: I31c501541b54d9253c334b56df975bddb13bbaeb
This PS adds connection reset for ansible session
letting zuul user to use newly installed docker
environment without sudo
Change-Id: I37a2570f1dd58ec02338e07c32ec15eacbfaf4b6
We are going to use containerized Openstack client
in test scripts. Adding zuul to the docker group
allows running docker command directly not using sudo.
Change-Id: Iee77e7f2b8801743f95535d31d0b909dcea50bf3
For TLS test jobs on Ubuntu Jammy when we run
dnsmasq on the master node needed for testing
we get the error:
"failed to create inotify: Too many open files"
By default the number of inotify instances on Jammy
is 128. We increase this up to 256.
Change-Id: I07c8a0f909608b6e44040ffeefc6ab576236c93f
The deploy-env playbook can fail with an error stating that
registry_namespaces is not defined in some cases. This change moves
the initialization of registry_namespaces so that buildset_registry
is not required for it to be set when other conditions are not met.
Change-Id: I160e7d479008fd3afd460382691673b92bd042c9
When using Rook for managing Ceph we can use
Rook CRDs to create S3 buckets and users.
This PR adds bucket claim template to the
elasticsearch chart. Rook creates a bucket for
a bucket claim and also creates a secret
containing the credentials to get access to this
bucket. So we also add a snippet to expose
these credentials via environment variables to
containers where they are needed.
Change-Id: Ic5cd35a5c64a914af97d2b3cfec21dbe399c0f14
- In case we deploy Ceph on a multi-node env we have
to prepare the loop devices on all nodes. For this
we moved loop devices setup to the deploy-env
Ansible role.
For simplicity we need the same device on all nodes,
so we create a loop device with a big
minor number (/dev/loop100 by default) hoping
that only low minor numbers could be busy.
- For test jobs we don't need to use different devices
for OSD data and metadata. There is no
any benefit from this for the test environment.
So let's keep it simple and put both OSD data and metadata
on the same device.
- On multi-node env Ceph cluster needs cluster members
see each other, so let's use pod network CIDR.
Change-Id: I493b6c31d97ff2fc4992c6bb1994d0c73320cd7b
It used to configure /etc/hosts in two different places.
The buildset registry record was added while configuing
Containerd and then this record was removed while
configuring Kubernetes.
The PR adds the buildset registry record to the /etc/hosts
template and the task is moved to the tasks/main.yaml.
Change-Id: I7d1ae6c7d33a33d8ca80b63ef9d69decb283e0a6
The role tried to include non-existing file
which was forgotten while we moved the role to this repo.
This inclusion is only actual for cases when we
consume images from a buildset registry.
Change-Id: I1510edf7bdc78f9c61f7722e2c7848e152edf892
The motivation is to reduce the code base and get rid
of unnecessary duplications. This PR is moves bandit
tasks from the osh-infra-bandit.yaml playbook
to the osh-bandit role. Then we can use this role for the
same job in OSH.
Change-Id: I9489a8c414e6679186e6c399243a7c0838df812a
This PS mounts extra 80Gb volume if available and mounts it to
/opt/ext_vol. It also alters docker and containerd configs to move their
root folder to that extra volume. This helps zuul gates to succeed when
a node with 40Gb volume is assigned to a zuul gate.
Change-Id: I1c91b13c233bac5ebfe6e3cb16d4288df2c2fe80
This role works both for singlenode and multinode
inventories. The role installs all necessary prerequisites
and deploys K8s with Containerd as a container runtime.
The idea is to use this role to deploy
all test singlenode/multinode environments for all test jobs.
This PR wraps into a role playbooks that
we are currently using for multinode compute-kit tests.
Change-Id: I41bbe80d806e614a155e6775c4505a4d81a086e8
This PS replaces deprecated kubernetes.io/ingress.class annotation with
spec.ingressClassName field that is a reference to an IngressClass
resource that contains additional Ingress configuration, including the
name of the Ingress controller.
https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#deprecating-the-ingress-class-annotation
Change-Id: I9953d966b4f9f7b1692b39f36f434f5055317025
Co-authored-by: Sergiy Markin <smarkin@mirantis.com>
Co-authored-by: Leointii Istomin <listomin@mirantis.com>
Signed-off-by: Anselme, Schubert (sa246v) <sa246v@att.com>
Helm version 3 is needed for upcoming features, notably the
rook-helm charts to manage Ceph via Rook require Helm v3. This
change updates Helm in openstack-helm-infra to 3.12.0.
Change-Id: I13b1671121658b1390d89beabacfd15a24b19afe
As part of the move to helm v3, we migrated how we setup
deploying kubernetes from a series of playbooks to using
a bash script. This had the advantage of being easier to
follow and deploy locally, as well as easier to debug
when an issue arose. While the kubeadm-aio was very useful
in the past to help lower run-times, currently it appears
that optimizations in our jobs have seem to mitigate a lot
of the issues that were lessened with the AIO.
Change-Id: If0c6a97aed4083307a9b6f5beb4ec525e8103e01
Helm3 requires specifying a namespace to retrieve status and values for
a given release.
Before this role would not retrieve any values or statuses. Now values
and statuses are retrieved in saved in Zuul archive correctly.
Change-Id: If8cf28349b0c14ba6e1de74d49e46ab4a61b93c7
Several roles and scripts in the osh-infra repo have defaults for
ubuntu that are still on xenial when we mostly run bionic or newer.
This change updates these references to default to focal.
Change-Id: I84bca2d685cf1c67b10eee3bb7c05deb2cc4670b
Now that openstack-helm has migrated all of its jobs over, we
can now actually delete the tiller chart.
Change-Id: I4a6b201906fb6840222c1b082febedff2e51ce97
Update Kubernetes version to v1.19.15, the latest patch release of the
earliest supported version (as of 2021-09-15).
Change-Id: Ia8f398098dfafa7fc029c982c71bce4a876668de
The corresponding attribute in roles/build-images/defaults/main.yml
is helm_repo instead of google_helm_repo.
Change-Id: Id1be29773224ea496a3550642d7ba194fd1e83c2
The googleapi repo has been causing issues and the latest
one is giving an unauthorized error when trying to download
helm tarball.
This change moves the repo to use the official helm one.
Change-Id: I52607b0ca6d650d5f5e4a95045389970faa08cfb
The version of helm 2 that OSH has been using was older and seems
to have been removed from the googleapi repo that the jobs are
setup to use, this was causing job failures.
This change updates the version to the latest v2 release.
Change-Id: I675f539b24ea9c2355ac9eacc7dd8122c5236e5f
Add openvswitch gate issue with systemd 237-3ubuntu10.43 to
multinode also. Added code from [0].
Additionally, made changes to support 1.18.9 version of kubeadm.
[0] https://review.opendev.org/c/openstack/openstack-helm-infra/+/763619
Change-Id: I2681feb1029e5535f3f278513e8aece821c715f1
Switch from using images from defined in docker_images to provided as
zuul artifacts. Currently to be used in conjunction with [0] in
openstack-helm-images pipelines.
[0] https://review.opendev.org/741551
Change-Id: I43dbd38906e8854c87a361f2e5e479f57850252f
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
Vladimir Kozhukalov