Currently we don't test the configuration with 5 controllers,
change the number of l3 agents per router from 5 to 3.
Change-Id: I84bcb196fb78006c02ba0e860cc2e69420081b87
Override default "metadata_proxy_shared_secret" parameter.
This secret is used by Neutron to sign instance-id headers
to prevent spoofing when proxying metadata requests.
Change-Id: I771d7f818a18b82d55bf781d71fc95114ac7e78c
Sloop type/site is a minimalistic approach to Airship with reduced
requirements towards hardware and external dependencies while keeping
all the functional features.
Major differences compared to reference site airship-seaworthy
- Two bare-metal server setup with 1 control, and 1 compute.
Most components are scaled to a single replica and doesn't carry
any HA as there is only a single control plane host.
- No requirements for DNS/certificates.
HTTP and internal cluster DNS is used.
- Ceph set to use the single (root) disk. This generally
provides minimalistic no-touch ceph deployment.
No replication of ceph data (single copy).
- Simplified networking (no bonding).
Two network interfaces are used by default (flat PXE, and DATA network
with VLANs for OAM, Calico, Storage, and OpenStack Overlay)
- Generic hostnames used (airsloop-control-1, airsloop-compute-1) that
simplifies generation of k8s certificates
- Usage of standard Ubuntu 16.04 GA kernel (as oppose to HWE)
Change-Id: I4944fcae7d29ed8799d810c93efb0120b6b3a105
Fixes the error when upgrade nova chart that compains the
airship-nova-test pod alrady exists when upgrade Nova chart.
Change-Id: I26e5e32614d1fd2880c33501bde9638f37606857
This commit introduces a global chart and chart group for NFS
provisioner, a chart in the OpenStack-Helm-Infra repository [0]. The NFS
chart will be required for Airskiff when deploying global UCP charts.
[0] https://git.openstack.org/cgit/openstack/openstack-helm-infra/tree/nfs-provisioner
Change-Id: I9c6464f08e6ce54bdca72525cdef04df7f14edc5
Add name and component labels to the memcached, ceph-config charts and
horizon charts and ucp chart groups in the global so they can be
referenced by customized sites.
Change-Id: I54aad9582841fc2d91a103aeb28b162660bd1b0f
This updates the fluent-logging chart to match the input configs
used in the upstream chart, primarily focused on moving from the
sqlite db file tracking mechanism to the in memory mechanism
instead. This also adds the appropriate fluentbit filter config
for throttling the number of records being forwarded to fluentd
Change-Id: I68ebf05b1b9fcf2a98b4717b74e3d13050446a09
Set `--tls-cipher-suites` to golang defaults minus 3DES
Implementation of change made in
https://review.openstack.org/#/c/634815/
Change-Id: Icbeded84d5973b042a779ba20569654d2d91b563
This modifies the RabbitMQ Armada charts to wait specifically
for the RabbitMQ StatefulSets to complete prior to proceeding.
This is more robust than the default Pod waiting, as Pod waiting
for SS's has a race condition such that all Pods are likely
Running and Ready prior to any action having been taken, during
and upgrade scenario.
This change leverages recent Armada resource-based wait functionality.
Change-Id: I3867ce6966047d6b877a9bfa872defc0eda9693a
The latest version of Armada introduced a separate timeout
value for tests [1], a default value for the timeout is 300,
which is not large enough for Neutron tests.
Also add wait.labels to ensure automatic deletion of test
pods [2].
[1] https://review.openstack.org/#/c/618585/
[2] https://review.openstack.org/#/c/629313/
Change-Id: I86b1f9a8f17c273cf990189b2ffb07d60e3814b9
Updates to use new Shipyard pod configurations, removes node port use.
Requires Shipyard commit a11e962eef5a5aa8f8fc15c4a324dfa6b2465061 or
newer.
Change-Id: Iff5af45d6b4f60c34d18aad821cf9afa4ea67dda
This change updates the following components:
Kubernetes 1.10.11 -> 1.11.6
CoreDNS 1.1.2 -> 1.1.3 (per k8s 1.11 recommendations)
Etcd 3.2.14 -> 3.2.18 (per k8s 1.11 recommendations)
Tiller 2.10.0 -> 2.12.1 (adds support for k8s 1.11, thread safety fix)
Armada as of 2019-02-4 (adds support for Tiller 2.12.1)
Also fixes tiller upgradability.
Change-Id: I2375b0ae167593815c56470ba6a6c7b529375302
This parameter has been deprecated in Newton and removed [1] in Ocata.
[1] https://review.openstack.org/#/c/385604/
Change-Id: I4e0130fea0375754cebb4a22d2248346f313fe6d
This updates the configuration for the fluent-logging chart to
include inputs for libvirt and qemu, as well as updates the output
configurations to include the appropriate buffer configuration
overrides
Change-Id: Id908ea875b07004202795dac68df7e9727ae9771
* prometheus - change `prometheus` subpath to `monitoring`
* grafana - path to prometheus credentials should be `user`
instead of `admin`
Change-Id: Iee014ce3ff4ee2ebb534003ce3f18ab8bcd63b9d
Adding paths, rerun_interval and rerun_policy to existing
divingbell_perm overrides
Uplift divingbell to latest version
Change-Id: I117f0ee7af92a7f139e2766ec435fc1f3f718e62
Transposed characters in the target replacements in
some of the deployment files can lead to unexpected
results (mostly that defaults are used instead of
overrides)
Since defaults were being used before, the endpoint definition needed to
be redefined to use the expected scheme (amqp) and path (/airflow)
Change-Id: I85a58c7b525e29208957845bf25ffbb0111c8f35
* Drydock: typo for user path `drydock.user` -> `auth.drydock`.
* Drydock: add an override for admin user.
* Shipyard: add an override for "shipyard" user.
Change-Id: I0e1f99db816ccf41085cca24637db40e0641a7b6
Leverage the divingbell perm module to set the etcd data directories
to 700. Prior to this change, they are 755 in Promenade-based
deployments. However, this change is more of a best-practice
technicality than a true value-add, since all the directories
*inside* these data directories already have 700 permissions.
Change-Id: I92290c46441d008f05b40f0c219c1709627d2803
This corrects some erroneous configuration in the fluent-logging
chart. This also updates the chart group to be sequenced, as
fluent-logging depends on Elasticsearch to be up prior to running
the template jobs
Change-Id: I5ac52a86008a5c91ac0a6fd0081fd60ec977d5ce
The Airskiff site needs the ability to override charts that have
multiple replicas or utilize Prometheus. This commit adds labels to
OpenStack-Helm charts and chart groups that will be overriden in the
Airskiff site. Charts are labeled with name and component selectors to
match existing labels on select charts and leave the `airship-seaworthy`
site unaffected.
Change-Id: I24d69afe70fbee35d3b21b8803eb64a81ed5376e
This updates the Elasticsearch chart to use the correct
overrides for changing the default PVC size to something more
appropriate. This also includes the label configuration used for
selecting a node for the test pods.
Change-Id: I94366792ef89d709e8fcf50262deccdc724e3a2a
This updates chart configuration overrides for the monitoring
services, as well as adds missing secrets, charts and service
accounts for other exporters that have now been enabled
Change-Id: Ia1ed7bba38d7c262e85de8162d53012cdadf487e
This updates the Elasticsearch and Fluent-logging charts to use
the most recent configuration keys in their values overrides, and
also introduces support for the ceph-rgw s3 api for use for
Elasticsearch snapshot repositories
Change-Id: Ia998db9006350a22fcc7dc3052301d7a5b8259f4