I'm splitting these changes from [0] for clarity.
This change fixes various indentation errors/ key placements in LMA
functions.
Also fixes a validation error in the test-site's workload
replacements
[0] https://review.opendev.org/c/airship/treasuremap/+/793106
Change-Id: I9f252cf067e30de6e961edaa412ab87a902918de
This change restructures the deployment script directory to support
type-specific deployment scripts. As sub-clusters are added, those
scripts will only be relevant to the multi-tenant type. The distinction
between which scripts should be used for each type will prevent
unexpected deployment errors.
Co-authored-by: Drew Walters <andrew.walters@att.com>
Change-Id: Ic14d4536bc9e593ab81c94b5c1dcec063a93ed18
Change in the vino networking model to accomodate pxe network
(https://review.opendev.org/c/airship/vino/+/793652) has made the iptables
update in the vm-infra-bridge manifesst unnecessary.
This PS removes the iptables related entries.
Change-Id: I0eb530b17302f34c3eaee83ca6fd454c665f7e73
The workload entrypoint does not have an replacements directory, meaning
that each function's replacements must be listed at the site level.
Relying on calling a function's replacements can be unreliable when
making changes at the type level because entrypoints also have to be
updated at the site level. This change adds a replacements entrypoint
for the workload phases so that changes can be made at the type level
without changing each site.
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: I450fb5e57967b1fe0b585f85686b558962338d90
Added sample calico v3 global network policy and hostendpoint for controlling
traffic flow between sub-clusters.
Also, adds Calico hostendpoints with labels for oam, ksn and vm-infra-bridge.
Relates-To: #131
Closes: #131
Change-Id: I1bb0b1e450b9f78fe1ee77abb0ff12eea72873a5
The host-inventory entrypoint of the virtual-network-cloud site is using
the old cleanup method, which has been removed. This change updates it
to use the new cleanup function. This change also re-enables voting for
the virtual-network-cloud deployment job.
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: Ib09125a9c5e7c61f314f1962f89efef51c5ead58
Work on this minio chart has been halted, so we need an alternative
S3 provider in the long term (#111). Removing references to this function
and associated CRs from airship-core deployments and the lma-configs
composite
Also, taking the opportunity to move our cluster flow & output
definitions out of the logging-operator-logging HelmRelease and
into proper CR documents
Relates-To: #111
Relates-To: #150
Change-Id: Id4b4b8d07fb6b38ba033e76a015d8703efca727a
Storage configuration for Rook is currently located within the
airship-core type; however, the multi-tenant type no longer inherits
this configuration from the airship-core type. This change introduces a
new composite, storage-cluster, to share the configuration between both
types.
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: Ib10098b38466725f00d9ec9d48058cd269544a3a
The rook-operator is deployed in the multi-tenant type; however, the
replacements do not accompany the deployment of the rook-operator
function. This change adds the rook-operator replacements to the
multi-tenant initinfra phase so that the replacements are used for the
rook-operator function.
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: Iddb948c120b02b152f752650904ce2ebfc4394f9
With [0] merged, we actually started to use real virtual-network-cloud
manifests in virtual-network-cloud gate instead of default test-site.
[0] https://review.opendev.org/c/airship/airshipctl/+/792836
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
Change-Id: Idb80769ce0a853662d1d2745452cb6409a71322f
This change introduces a function for deploying the community
prometheus-easticsearch-exporter chart, and adds it to our
elastic-stack composite.
Upon review it was found that the chart version was being
replaced at the incorrect yaml path accross all LMA components,
so these replacements are corrected in this PS as well.
Change-Id: Iad973f4a16d9985a639c3c6927d9f74cd57f4910
This change adds a composite to treasuremap for deploying
Elasticsearch & Kibana in the lma-stack phase
Co-Authored-By: gs909v <graham.steffaniak@att.com>
Change-Id: I6b4a9b1787f9daae9889084cb2dde483b815186e
This moves to the latest version of SIP:
f9226befbd49e4eba8909aa430ce7407551bba62
This version includes a workload load balancer service, for
which configuration is added.
Closes: #146
Signed-off-by: Sean Eagan <seaneagan1@gmail.com>
Change-Id: I1820b408559bc51d86a62d7d4aad10c458890354
Note:
1. As per the latest conclusion, Dex and SIPCluster would be deployed on same namespace, hence dex function added to same Kustomization file
2. As a part of Issue# 136 for catalogue, there would be another patchset to make nodeport flexible
Change-Id: I53b2bb33278dd229450c305ad2e15476d8796073
- The HelmRepository url replacement would overide the
entire contents of .spec, removing the interval
parameter which was defined in the originaldocument
- Update Chart and Image Versions
Change-Id: I09cb9f6d68bc5e73a46d1cf17e72d2437b61eb1e
Now that the site deployment jobs are green and reliable, make them
voting so that breaking changes are not introduced.
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: I69cede69807f3d018f87cd3a52d7ef03291232af
This change corrects the vm-infra-bridge creation script to set
the iptable rule for masquerade to use the host oam vlan and
updates the vlans to match the multi-tenant site configuration.
Change-Id: If288ed63628658f4e461f512f853b384f0eaeba4
This PS is to update the Rook yaml files for version v1.6.2. Additionally, the version of Ceph is upgraded to v15.2.11 and Ceph-CSI is upgraded to v3.3.1.
v1.6 provides a few features the storage team wants:
* The operator supports upgrading multiple OSDs in parallel
* LVM no longer used to provision OSDs by default
* Monitor failover can be disabled if needed
* Operator support for Ceph Pacific (v16)
* Ceph 15.2.11 by default
* CephClient CRD standardized to controller-runtime library (kubebuilder)
https://github.com/kubernetes-sigs/controller-runtime
* Pod Disruption Budgets enabled by default.
https://github.com/rook/rook/blob/master/design/ceph/ceph-managed-disruptionbudgets.md
More notes:
* There are many indentation changes in common.yaml
* There is now a variable in operator.yaml for enabling host networking for the CSI pods. Default is to use host network.
* CSI image updates:
ROOK_CSI_CEPH_IMAGE: "quay.io/cephcsi/cephcsi:v3.3.1"
ROOK_CSI_SNAPSHOTTER_IMAGE: "k8s.gcr.io/sig-storage/csi-snapshotter:v4.0.0"
* There is a very large update to crds.yaml largely due to the controller-runtime being employed.
* Ceph 15.2.11 needed for CVE-2021-20288
Change-Id: I5cf0cf63bfcf4b0ea1d242d6eae2f53adda7be5e
1. Reflecting changes done in [1] to treasuremap.
2. Changing airshipctl ref to [1]
3. Making static validation work, since it was merged before [1]
4. Adding dex.ldap.bind_password to imported secrets
5. Adding dex.oidc.clientSecret to generated secrets
6. Due to the added new site - increasing the validation timeout
7. Adding replacement for [2]
[1]
https://review.opendev.org/c/airship/airshipctl/+/786286
[2]
https://review.opendev.org/c/airship/treasuremap/+/788991
Relates-To: #128
Change-Id: I473ace3d7aae85ebe76b73253108c6f1b6ca6e95
