1634 Commits

Author SHA1 Message Date
Zuul
b8a4b6ad73 Merge "Adding secrets/encryption how-to-guide doc" 2021-02-17 20:52:06 +00:00
Alexey Odinokov
1d7f8db802 Adding secrets/encryption how-to-guide doc
Relates-to: #454
Change-Id: I7ab7a0be00e37ef74258b73e4b2477cc6ac35129
2021-02-17 18:37:26 +00:00
Zuul
f50998935e Merge "Integrate clusterctl client into phases" 2021-02-13 06:04:05 +00:00
Zuul
0d4f377c4e Merge "Extend kubeconfig builder" 2021-02-13 05:56:19 +00:00
Zuul
a252b248bc Merge "Adding encryption of k8s secrets and iso users passwords" 2021-02-12 23:11:52 +00:00
Zuul
ea055dc87c Merge "Allow container config to be referenced as objects" 2021-02-12 21:06:53 +00:00
Zuul
69017214aa Merge "Templater config syntax update for env vars" 2021-02-12 19:50:06 +00:00
Zuul
d2e0f5121b Merge "Fix github release trigger" 2021-02-12 19:01:16 +00:00
Zuul
1d1511b3cc Merge "Publish binaries on release" 2021-02-12 19:01:12 +00:00
siraj.yasin
c417060e02 Templater config syntax update for env vars
* Env vars were not replaced in the templater and is always empty string
  in the rendered yamls.
* Updated the correct syntax for using env in templater

Change-Id: I840d7d246d1408addbe9871e1e251e15a35e0305
2021-02-12 15:48:57 +00:00
Alexey Odinokov
b51e7559b6 Adding encryption of k8s secrets and iso users passwords
This patchset introduces a generated with template [1] and encrypted
VariableCatalogue generated-secrets that contains steps to
generate: ephemeral and target CA+admin key/cert and passwords for
users in ephemeral bootstrap iso.

It also introduces the way how these secrets are used in manifests:
They're decrypted by kustomize and incorporated into the folders
`catalogues` in the site, so they can be used by replacement plugin.

This patchset contains modifications in replacement plugin
configurations to put the decrypted values from VariableCatalogue
in place.

Since k8s secrets were substituted with generated values
this patchset removes pre-generated k8s secrets.

[1]
manifests/type/gating/target/generator/secret-template.yaml

Change-Id: I0898c74012833f0e171d36bb8145acf358510b69
2021-02-12 04:07:36 +00:00
Zuul
56cb8cef20 Merge "Allow to get container logs asynchronously" 2021-02-11 21:22:56 +00:00
Sean Eagan
e34f1ea83e Fix github release trigger
The `git.ref` variable includes the `refs/tags/` prefix [0].

[0]: https://docs.github.com/en/actions/reference/context-and-expression-syntax-for-github-actions#github-context

Change-Id: I2880c7cc1463e52cc8ca6605db80b2a46cb5a449
2021-02-11 14:37:40 -06:00
Alexander Hughes
2d523314d8 Bump linter from 1.29 to 1.36
Updating linter to latest version, which also updates
gosec to latest version to keep on top of updated security
checks in source code. Also disable gosec testing for rand.new.

Co-Authored-By: Alexander Hughes <Alexander.Hughes@pm.me>
Co-Authored-By: Sreejith Punnapuzha <Sreejith.Punnapuzha@outlook.com>
Change-Id: I46e71c41597f70150ace6d9611da5a01f93a933d
Signed-off-by: Alexander Hughes <Alexander.Hughes@pm.me>
2021-02-11 12:08:21 +00:00
Zuul
743f652494 Merge "Preparing zuul tests for secrets generation" 2021-02-11 07:22:22 +00:00
Kostiantyn Kalynovskyi
efc4399e17 Allow container config to be referenced as objects
Now GenericContainer input config can be referenced as another
object inside the config bundle (with phase and executor objects).

Change-Id: Iff35e0844b1e9ce4beb72d939e229410208dcb16
2021-02-11 00:39:36 +00:00
Zuul
de970a8adf Merge "Fixed typos in inventory pkg" 2021-02-11 00:02:51 +00:00
Zuul
40f24de8b0 Merge "Added verbose to gate runner playbook" 2021-02-10 22:27:22 +00:00
Zuul
a73ee005ad Merge "Added a warning message that cluster api already initialized" 2021-02-10 22:20:42 +00:00
Alexey Odinokov
a098fb908d Preparing zuul tests for secrets generation
zuul takes playbooks from master
and if it's necessary to add one more step to
that playbooks, it's necessary to add that first
to playbook, merge and only after that merge the step
itself.

Change-Id: I9569e1e7e4b8be216563ee66b6e6adea170f5aa1
2021-02-10 20:34:39 +00:00
Zuul
34b618be9b Merge "Repair validate-site job" 2021-02-10 20:21:37 +00:00
bijayasharma
62272ed900 Added a warning message that cluster api already initialized
* Currently if the cluster init command is run & the cluster-api
  has already been initialized, the command fails.
* So,this commit adds a warning message that cluster-api already initialized.

Signed-off-by: bijayasharma <vetbijaya@gmail.com>
Change-Id: I93cc6b141c15fa4bc5661646ae0cbdf08580cbf9
Relates-To: #450
Closes: #450
2021-02-10 13:05:17 -05:00
siraj.yasin
3e1553684e Added verbose to gate runner playbook
* Add verbose to see little more details on each tasks of play
* Added option to prettyprint verbose in stdout
  ANSIBLE_STDOUT_CALLBACK=debug
* Updated the virsh cleanup sequence.
  The images(.img) within /var/lib/libvirt/images/ were not removed

Change-Id: I0a52aa4ccca41e3f2258420eb2e1173137ca0d06
2021-02-10 16:40:59 +00:00
Kostiantyn Kalynovskyi
9f051e465a Integrate clusterctl client into phases
This will make sure that phases have access to kubeconfgs generated
by cluster-api for the managed clusters.

Change-Id: Iabecced78192969d7a2ee5a48e75fc3adb0af092
2021-02-10 14:53:40 +00:00
Kostiantyn Kalynovskyi
d9f54b4171 Extend kubeconfig builder
Change-Id: I6724112826a4cc59815b7524bd05af01a9a1d01b
2021-02-10 14:52:39 +00:00
bijayasharma
c50286d015 Fixed typos in inventory pkg
Signed-off-by: bijayasharma <vetbijaya@gmail.com>
Change-Id: I8da797a6883df63adf6089743faa757d1099ef82
2021-02-10 13:20:50 +00:00
Zuul
77268cd1d0 Merge "Implement cluster list command" 2021-02-10 07:11:37 +00:00
Zuul
d0a9adc752 Merge "Implement render method for clusterctl executor" 2021-02-10 04:28:14 +00:00
Zuul
bc919145ac Merge "Fix typos in baremetal executor" 2021-02-10 01:58:51 +00:00
Zuul
5647f5381e Merge "Add ability to create bundle from bytes" 2021-02-09 22:46:15 +00:00
Zuul
81b2ac677f Merge "remove redundant ephemeral host patch" 2021-02-09 19:50:08 +00:00
Kostiantyn Kalynovskyi
14026aadfd Allow to get container logs asynchronously
This will make sure that stderr of the generic container in gathered
in a go routine, this way we won't have to wait to see debug messages
from the container until it finishes.

Change-Id: I929719c3369f4f5796d452b5f990bf5f28a4c0d5
2021-02-09 16:37:03 +00:00
Sean Eagan
55aa0837b7 Publish binaries on release
Relates-To: #414
Change-Id: I4a84129e0f04553d27203dc7d945a9893e164108
2021-02-09 14:25:38 +00:00
Ruslan Aliev
54256dbc70 Repair validate-site job
This job doesn't work properly since a lot of changes in the
airshipctl logic were applied. All the issues were addressed.

Change-Id: Iec6fa7e6a3aa1ab46d496a8fd63822df1f8124cc
Signed-off-by: Ruslan Aliev <raliev@mirantis.com>
Relates-To: #19
2021-02-08 23:54:57 -06:00
Ruslan Aliev
7bf93ba699 Implement cluster list command
Required for document validation script.

Change-Id: I555173a445278b31ef51ebf831a79e63446a19bc
Signed-off-by: Ruslan Aliev <raliev@mirantis.com>
2021-02-08 23:54:57 -06:00
Ruslan Aliev
0f44ad9a7c Implement render method for clusterctl executor
Change-Id: If3d66baa8eec27f51705c813f17854ad7ef23a26
Signed-off-by: Ruslan Aliev <raliev@mirantis.com>
2021-02-08 23:53:37 -06:00
Ruslan Aliev
cc25bcf52e Add ability to create bundle from bytes
This patch implements new constructor of document.Bundle type
using raw bytes as source.

Change-Id: Ie7742bcf245083ac988541aa9987448f5827fec3
Signed-off-by: Ruslan Aliev <raliev@mirantis.com>
2021-02-08 23:32:06 -06:00
Zuul
9ab2ed96b7 Merge "Implement airship container type" 2021-02-09 02:50:33 +00:00
Zuul
92cfc8c03f Merge "Extend Generic Container interface" 2021-02-09 02:33:23 +00:00
Zuul
8b19ced1b8 Merge "Extend container interface with mounts get log opts" 2021-02-09 01:11:37 +00:00
Zuul
a435109673 Merge "Add cluster name filter for phase list cmd" 2021-02-09 01:02:37 +00:00
Kostiantyn Kalynovskyi
769e164b59 Implement airship container type
This will enable airship to run containers in privileged mode
as well and to specify commands to be executed.

Change-Id: I663eb55547bb821f26a9071c24d08166a3b3d56b
2021-02-08 17:59:11 +00:00
Zuul
dc521a0455 Merge "Allow privileged mode in docker interface" 2021-02-08 17:41:25 +00:00
Zuul
dddcecaf92 Merge "Change container RunMethod to allow extending" 2021-02-08 17:41:01 +00:00
Kostiantyn Kalynovskyi
d78cbe96a1 Extend Generic Container interface
This also moves KRM related logic from executors package to
container package, and creates ClientV1Alpha1 interface that
would allow us to have versioned clients for generic container
executor.

Change-Id: I4b32fd8dd089b9ccea2ed64a805702e6a8705706
2021-02-08 15:50:20 +00:00
Kostiantyn Kalynovskyi
971c81acdb Extend container interface with mounts get log opts
This commit allows to specify options to get container logs, such
as stderr, stdout and if logs should be followed.

Also extends RunCommandOptions with ability to add mounts in addtion
to binds

Relates-To: #458
Change-Id: I83507f2f7ca6ea596f52f5d3e9f868467458b6a3
2021-02-08 00:11:29 +00:00
Ruslan Aliev
d1c7913ed3 Add cluster name filter for phase list cmd
This patch implements ability to filter phase by given
cluster name.

Change-Id: I4eb95f9f75c57eff4ae8eb41c608c6f6d7fa009c
Signed-off-by: Ruslan Aliev <raliev@mirantis.com>
2021-02-05 17:09:44 -06:00
Kostiantyn Kalynovskyi
ce3dcec6fe remove redundant ephemeral host patch
Change-Id: Ie451d82cf87d72b1c21fbe588b92aec7f017becc
2021-02-05 20:07:43 +00:00
Sirajudeen
a527b7f1f5 Wrap commands using code block in doc
* Wrapped the SOPs export commands in code block
  to avoid any copy paste issues

Change-Id: I0ba17745ab11caedd575970878d6b34225815fd2
2021-02-05 16:05:51 +00:00
Kostiantyn Kalynovskyi
4671ea7f74 Allow privileged mode in docker interface
Change-Id: I12e7a895c5ccd228a3bb1a2ef3588be96893ae36
2021-02-05 04:25:06 +00:00